phantomstars

phantomstars Automated detection and tracking of fake engagement on GitHub A JS Labs project — part of the AI Slop Intelligence initiative. Runs every day. Scores every suspicious account. Detects coordinated bot campaigns. Files issues directly on compromised repos so maintainers can act. Suppor...

Cooper

Cooper, noun, a maker or repairer of casks and barrels It's a "fish in a barrel" joke. I enjoy puns! A Python tool for ingesting HTML and producing HTML source suitable for phishing campaigns. Cooper simplifies the process of cloning a target website or email for use in a phishing campaign. Just...

phishing-frenzy

Phishing Frenzy Ruby on Rails Phishing Framework Documentation & Info Relevant up to date documentation can be found on the official Phishing Frenzy website located below Phishing Frenzy Website Please submit any tickets or issues to the github issues page Phishing Frenzy Tickets To contact us...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

AI-PASSWORD-TESTING-AGENT

AI Password Attack Orchestrator Brute force is dead. The new password attack learns. This repo is the research behind that claim: a technical analysis of how AI turns password attacks from blind enumeration into adaptive campaigns that learn from every failure — plus the detection rules and...

Abused-Legitimate-Services

Abused Legitimate Services Legitimate third-party Platform-as-a-Service PaaS providers are becoming increasingly leveraged by threat actors for phishing and malware deployment. PaaS providers such as cloud instances, marketing platforms, content delivery networks CDN, and dynamic DNS servers have...

CVE-2026-120470

Joomla / WordPress Extension - acymailing.com - Online version of an email readable without the visibility check in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can read the online version of campaigns that were never made public, including campaigns unpublished after being sent and...

CVE-2026-120470

The AcyMailing extension for Joomla and WordPress (versions 1.0.0 - 11.1.1 ) is vulnerable to a missing authorization issue (CWE-862 ). An unauthenticated attacker can bypass visibility checks to read the online versions of private email campaigns, including those that were unpublished after bein...

CVE-2026-120470 Joomla / WordPress Extension - acymailing.com - Online version of an email readable without the visibility check in AcyMailing 1.0.0 - 11.1.1

Joomla / WordPress Extension - acymailing.com - Online version of an email readable without the visibility check in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can read the online version of campaigns that were never made public, including campaigns unpublished after being sent and...

EUVD-2026-124606

Joomla / WordPress Extension - acymailing.com - Online version of an email readable without the visibility check in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can read the online version of campaigns that were never made public, including campaigns unpublished after being sent and...

CVE-2026-120470: Datasolution AcyMailing extension for Joomla and WordPress: Joomla / WordPress Extension - acymailing.com - Online version of an email readable without the visibility check in…

Joomla / WordPress Extension - acymailing.com - Online version of an email readable without the visibility check in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can read the online version of campaigns that were never made public, including campaigns unpublished after being sent and...

PT-2026-145902

Joomla / WordPress Extension - acymailing.com - Online version of an email readable without the visibility check in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker can read the online version of campaigns that were never made public, including campaigns unpublished after being sent and...

trident

trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...

CVE-2026-61653

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, modules/Campaigns/PopupCampaignRoi.php interpolates $REQUEST'id' into SQL. Although securexss normally entity-encodes quotes, an input prefixed with an XSS payload...

CVE-2026-61653 SuiteCRM: SQL injection via id param in modules/Campaigns/PopupCampaignRoi.php

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, modules/Campaigns/PopupCampaignRoi.php interpolates $REQUEST'id' into SQL. Although securexss normally entity-encodes quotes, an input prefixed with an XSS payload...

CVE-2026-61653 SuiteCRM: SQL injection via id param in modules/Campaigns/PopupCampaignRoi.php

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, modules/Campaigns/PopupCampaignRoi.php interpolates $REQUEST'id' into SQL. Although securexss normally entity-encodes quotes, an input prefixed with an XSS payload...

CVE-2026-61653

SuiteCRM versions prior to 7.15.2 and 8.10.2 are vulnerable to a SQL injection flaw in the modules/Campaigns/PopupCampaignRoi.php component. The root cause is the improper interpolation of $_REQUEST['id'] into a SQL query. While the securexss() function typically encodes quotes, a specific input ...

Mautic: RCE

An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded campaign archive, the application copies the bundled asset files into a publicly accessible media directory without restricting their file names or types. An authenticated user...

CVE-2026-115188

An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded campaign archive, the application copies the bundled asset files into a publicly accessible media directory without restricting their file names or types. An authenticated user...

CVE-2026-115188

The campaign import feature in Mautic 7 is vulnerable to an unrestricted file upload (CWE-434, CWE-94). When processing uploaded campaign archives, the application copies bundled asset files into a publicly accessible media directory without validating file names or types. An authenticated user w...