CVE-2026-101105

The Matrimonial System 1.0 (code-projects) is vulnerable to a remote SQL injection in the Profile Creation Endpoint . The flaw exists in the processprofile_form function within the /create_profile file, specifically caused by the improper handling of the fname argument. An attacker can exploit th...

CVE-2026-98161

A flaw was found in the Linux kernel's persistent memory pmem subsystem. When processing storage write requests, the driver continues copying data even if a preceding cache flush operation fails, potentially overwriting the error status and reporting success. A local user performing I/O operation...

teatime

Teatime - Un Framework de Ataque RPC para Blockchain .. image:: https://img.shields.io/pypi/v/teatime.svg :target: https://pypi.python.org/pypi/teatime .. image:: https://img.shields.io/travis/dmuhs/teatime.svg :target: https://travis-ci.com/dmuhs/teatime .. image::...

teatime

=========================================== Teatime - A Blockchain RPC Attack Framework .. image:: https://img.shields.io/pypi/v/teatime.svg :target: https://pypi.python.org/pypi/teatime .. image:: https://img.shields.io/travis/dmuhs/teatime.svg :target: https://travis-ci.com/dmuhs/teatime...

CVE-2026-97519

A flaw was found in the Linux kernel's Intel Xe graphics driver. When device core dump cleanup routines are triggered without a completed capture, the driver attempts to access uninitialized snapshot data. A local user could exploit this issue to cause a null pointer dereference, resulting in a...

kernel: RDMA/rxe: Fix double free in rxe_srq_from_init

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rxe driver. An error in the rxesrqfrominit function's memory management can lead to a double free vulnerability. This occurs when an attempt to copy data to user space fails, causing the sam...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

EUVD-2026-88402

A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function runcode of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state...

CVE-2026-101102

A vulnerability exists in deepseek-ai deepseek-harness (versions up to 0.1.0-rc.7 ) within the Code Mode Sandbox component. Specifically, the run_code function is susceptible to manipulation, leading to a sandbox issue that can be triggered via a remote attack . Notably, the vendor's own document...

BrotherVulnerabilities

Múltiples dispositivos Brother: Múltiples vulnerabilidades Resumen Rapid7 llevó a cabo un proyecto de investigación de día cero sobre impresoras multifunción MFP de Brother Industries, Ltd. Esta investigación dio como resultado el descubrimiento de ocho nuevas vulnerabilidades. Se ha identificado...

ZeusCloud

Asegura tu nube. ZeusCloud es una plataforma de seguridad en la nube de código abierto. Descubre, prioriza y remedia tus riesgos en la nube. Crea un inventario de activos de tus cuentas de AWS. Descubre rutas de ataque basadas en exposición pública, IAM, vulnerabilidades y más. Prioriza hallazgos...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

CVE-2026-98160

A flaw was found in the Linux kernel's rtl8723bs wireless driver. During device initialization error handling, allocated memory is released using an incompatible deallocation routine. A local attacker could exploit this condition during driver initialization failures to cause memory corruption,...

CVE-2026-97518

A flaw was found in the Linux kernel's cfg80211 wireless configuration subsystem. The subsystem fails to reject duplicate cipher suite entries during wireless device registration. This flaw allows a local user to cause an array buffer overflow within the Wireless Extensions WEXT compatibility...

CVE-2026-97517

A flaw was found in the Linux kernel's nl80211 wireless configuration interface. This flaw can lead to a Denial of Service DoS caused by an out-of-bounds memory read when processing wireless beacon settings. The kernel fails to validate that the variable-length portion of a High Efficiency HE...

WhiteBeam

透明端点安全 功能 阻止并检测高级攻击 现代经审计的密码学：用于哈希和加密的 RustCrypto 高度兼容：开发专注于所有平台（包括旧版）和架构 源代码可用：欢迎审计 由累计超过100年经验的安全研究人员审查 实际演示 检测与防御能力的视频演示 针对零日漏洞测试 WhiteBeam 针对 WhiteBeam 蜜罐的已录制攻击 安装 由于 0.3 版本引入了不兼容的安全增强，WhiteBeam 目前暂时无法安装。请稍后再来查看！ 从软件包安装（Linux） WhiteBeam 尚未发布针对特定发行版的软件包，请稍后再查看！ 从发布版安装（Linux） 1. 下载最新发布版 2...

CVE-2018-0114

CVE-2018-0114 Script de python2.7 para generación de JWT CVE-2018-0114 Una vulnerabilidad en la biblioteca de código abierto node-jose de Cisco anterior a la versión 0.11.0 podría permitir que un atacante remoto no autenticado re-firmara tokens utilizando una clave que está incrustada dentro del...

Firebolt-wristphone-vulnerability

Firebolt-wristphone-vulnerability 此仓库涉及 Firebolt 手表手机漏洞，对应 CVE 编号 CVE-2024-30656，由 MITRE 建议。 请参阅附带的 PDF 文档，了解对手表手机的攻击演示。 发现者：Yashodhan Mandke...

creepy

creepy Current Version 1.1 Author Yiannis Kakavas Homepage http://www.geocreepy.com Installation Instructions See http://www.geocreepy.com Description Geolocation OSINT tool. Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentati...

CVE-2026-101100

A flaw exists in the ag-ui-protocol ag-ui component affecting versions up to 2026-09-07 . The vulnerability is located in the FilterToolCallsMiddleware function within the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the Middleware component. Specifically, executing...