ALFA

ALFA Automated Audit Log Forensic Analysis for Google Workspace Copyright c 2026 Invictus Incident Response Original authors Greg Charitonos & BertJanCyber maintained by Invictus Incident Response Before you start A note on supported operating systems, ALFA is tested on several Linux distribution...

Elkeid

Elkeid - Bytedance Cloud Workload Protection Platform English | 简体中文 Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices. With the business...

DFIR-O365RC

Table of contents: 1. Module description 2. Installation and prerequisites 1. Using Docker 2. Manual Installation 3. Managing the DFIR-O365RC application 1. Creating the application 2. Updating the application 3. Removing the application 4. Permissions and license requirements 5. Functions includ...

CVE-2026-105191

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin versions before 1.17.11 is vulnerable to a sensitive data disclosure. The root cause is a missing capability check on an AJAX action that returns the stored before-and-after values of a record change. This flaw al...

CVE-2026-105191 WP ERP < 1.17.11 - Subscriber+ Sensitive Data Disclosure via Audit Log

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin before 1.17.11 does not perform a capability check on an AJAX action that returns the stored before-and-after values of a record change, allowing any authenticated user, including Subscribers, to read other users'...

CVE-2026-95769

An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to falsify the client address recorded in audit records...

CVE-2026-95759

Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system...

CVE-2026-95769 Unauthenticated Audit Log Spoofing in API of HPE Networking Fabric Composer

An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to falsify the client address recorded in audit records...

CVE-2026-95769

An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer . An unauthenticated remote attacker could successfully exploit this flaw to falsify the client address recorded in the audit logs. No specific remediation steps or exploit links are provided in the documents.

EUVD-2026-116186

An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to falsify the client address recorded in audit records...

CVE-2026-95759

Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer . An authenticated attacker with low privileges could successfully exploit this vulnerability to suppress audit records of their activity on the affected system. No specific details regarding the root cause or rem...

EUVD-2026-116176

Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system...

CVE-2026-115357

A flaw was found in OpenBao. Under certain conditions, the service fails to record audit log entries for responses when processing requests to generate root tokens or rotate encryption keys. A remote attacker can complete these critical operations without leaving a complete audit trail, hindering...

sn1per-mcp

Sn1per MCP Server Drive your self-hosted Sn1per from your AI assistant: scoped, audited, for authorized testing. For authorized security testing only. Use the Sn1per MCP Server only against systems you own or are explicitly permitted, in writing, to test, and within the scope of that permission...

CVE-2024-10793

CVE-2024-10793 PoC Set this lines to your hosts file: 127.0.0.1 goodcms.lab 127.0.0.1 attacker.com Launch Wordpress using docker: $ sudo systemctl start docker $ sudo docker-compose up -d Open http://goodcms.lab:2121 and do installation wordpress steps. Install wp-security-audit-log.5.2.1 or olde...

CVE-2026-3494_Verfication

CVE-2026-3494 - MariaDB serveraudit Logging Verification PoC This project provides a specialized environment to verify and analyze a potential audit logging bypass in the MariaDB serveraudit plugin when specific inline comments , -- are used within SQL queries. Key Findings Logging Omission in...

cve-2026-32699-facturascripts-nick-bypass

CVE-2026-32699 - FacturaScripts EditUser Nick Parameter Broken Access Control Description Summary The application fails to validate the nick parameter during a POST request to the EditUser controller. Although the UI prevents editing this field, a user can bypass this restriction using a proxy to...

CVE-2026-115195

A broken access control vulnerability exists in the Mautic Stats API /api/stats/table. The endpoint did not enforce permissions for several internal tables: an intended administrator-only restriction was never applied, and tables without an explicit permission mapping were readable by default. As...

CVE-2026-115195

A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). The endpoint fails to enforce permissions for several internal tables because administrator-only restrictions were not applied and tables without explicit permission mappings are readable by default. Conseq...

Audit Log Injection

Apache ZooKeeper is vulnerable to audit log injection. The vulnerability is due to improper handling of tab characters in audit log serialization, where the server writes attacker‑controlled usernames and ACL identifiers into the acl= field without escaping tabs, and an attacker can send a digest...