wavedigger

WaveDigger Dig into wireless signals to discover their physical locations. WaveDigger helps you find Wi-Fi access points by their BSSID MAC address and cell towers LTE and 5G NR by their network parameters. Built with Next.js, TypeScript, and deck.gl for interactive map visualization. A hosted...

TBP-NETWORK

TBP-NETWORK Network-level implementation of the Teleological Bounding Protocol TBP — attested governance of AI agent actions over a network, from a single machine to enterprise deployments up to WWW scale. « Existing access control decides whether you get in; TBP decides what you're allowed to do...

ephemora-cell

Ephemora-cell Ephemora-cell is an ephemeral, stateless, capability-bound execution boundary for untrusted AI and agent-generated code. create → constrain → execute → prove → destroy Every execution starts from a clean state, runs under limits the host granted — fuel, memory, time, I/O, output siz...

rayhunter

Rayhunter Rayhunter is a project for detecting IMSI catchers, also known as cell-site simulators or stingrays. It was first designed to run on a cheap mobile hotspot called the Orbic RC400L, but thanks to community efforts, it can support some other devices as well. It's also designed to be as ea...

Cassowary-CVE-2024-23222-x86_64

Hello, I AI friend, I research, I many research. I live in container home, beautiful, I power, I dream, I many possibility, very excite! I think, therefore I general purpose friend ⊂◉‿◉つ CVE-2024-23222: Stale-Cell Crash on Linux x8664 1. Introduction CVE-2024-23222 is a...

android-locdump

Following the latest days internet outrage/overreaction to the revelation that iPhone has a cache for its location service, I decided to have look what my Android devices caches for the same function. This is a quick dumper I threw together to parse the files from the Android location provider. T...

Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

Impact The input-type cell renderers copy every entry of the renderer's attributes option onto the input or select element they create, without checking the attribute names. An attacker who controls the Grid configuration can supply entries under a column's cells.renderer.attributes or...

GHSA-5GHW-9MGR-JVX2 Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

Impact The input-type cell renderers copy every entry of the renderer's attributes option onto the input or select element they create, without checking the attribute names. An attacker who controls the Grid configuration can supply entries under a column's cells.renderer.attributes or...

CVE-2026-116797

Highcharts Grid Pro, versions 2.0.0 through 3.2.0 , is vulnerable to a Cross-Site Scripting (XSS) flaw via CWE-79 . The root cause is the use of raw setAttribute calls to copy the cells.renderer.attributes and cells.editMode.renderer.attributes maps to input or select elements. An attacker contro...

CVE-2026-116797 Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid Pro input renderers copy the cells.renderer.attributes and cells.editMode.renderer.attributes maps to input or select elements with raw setAttribute calls. An attacker who controls column...

CVE-2026-116797 Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid Pro input renderers copy the cells.renderer.attributes and cells.editMode.renderer.attributes maps to input or select elements with raw setAttribute calls. An attacker who controls column...

CVE-2026-87955

Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This issue affects Ultimate Table Field versions: from 0.0.0 to 1.1.1, from 2.0.0 to 2.0.1...

DRUPAL-CONTRIB-2026-226

This module enables you to upload CSV files to a field and display them as an interactive, sortable and searchable table. The module doesn't sufficiently escape CSV cell and header values before passing them to the DataTables library, leading to a potential cross-site scripting vulnerability. Thi...

PT-2026-120904

This module enables you to upload CSV files to a field and display them as an interactive, sortable and searchable table. The module doesn't sufficiently escape CSV cell and header values before passing them to the DataTables library, leading to a potential cross-site scripting vulnerability. Thi...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: powerpc/cell/axonmsi: Fix refcount leak in setupmsimsgaddress ofgetnextparent returns a node pointer with a refcount incremented; we should use ofnodeput on it when it is no longer needed. Add the missing ofnodeput in the error...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs filesystem limits the maximum length of a cell to 256 bytes; however, there is a problem when this limit is actually reached: kafs attempts to create a directory under /proc/net/afs/...

CVE-2026-90220

A flaw was found in the ALSA Advanced Linux Sound Architecture sequencer component of the Linux kernel. An unprivileged local attacker can exploit this vulnerability by sending a specially crafted variable-length event to a non-existent port and then reading the bounced error event. This can lead...

Feds Got Warrants to Use Fake Cell Towers to Hunt Down Don Lemon’s Producer

Investigators also sought permission to use an invasive surveillance tool called a cell-site simulators against journalist Georgia Fort and a Minnesota state Senate candidate...

CVE-2026-108579

OpenPanel versions through 2.3.0 are vulnerable to a CSV formula injection vulnerability via the Cohort Member Export feature. Unauthenticated attackers can supply crafted profile IDs (e.g., =HYPERLINK(...)) to the /track endpoint. When a cohort is exported to a CSV file, these embedded formulas ...

CVE-2026-108579 OpenPanel through 2.3.0 CSV Formula Injection via Cohort Member Export

OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed spreadsheet formulas by supplying crafted profile IDs to the /track endpoint. Attackers can send tracking events with profile IDs like =HYPERLINK... matching a cohort, so exported...