android-locdump

Following the latest days internet outrage/overreaction to the revelation that iPhone has a cache for its location service, I decided to have look what my Android devices caches for the same function. This is a quick dumper I threw together to parse the files from the Android location provider. T...

rayhunter

Rayhunter Rayhunter is a project for detecting IMSI catchers, also known as cell-site simulators or stingrays. It was first designed to run on a cheap mobile hotspot called the Orbic RC400L, but thanks to community efforts, it can support some other devices as well. It's also designed to be as ea...

wavedigger

WaveDigger Dig into wireless signals to discover their physical locations. WaveDigger helps you find Wi-Fi access points by their BSSID MAC address and cell towers LTE and 5G NR by their network parameters. Built with Next.js, TypeScript, and deck.gl for interactive map visualization. A hosted...

TBP-NETWORK

TBP-NETWORK Network-level implementation of the Teleological Bounding Protocol TBP — attested governance of AI agent actions over a network, from a single machine to enterprise deployments up to WWW scale. « Existing access control decides whether you get in; TBP decides what you're allowed to do...

CVE-2026-90220

A flaw was found in the ALSA Advanced Linux Sound Architecture sequencer component of the Linux kernel. An unprivileged local attacker can exploit this vulnerability by sending a specially crafted variable-length event to a non-existent port and then reading the bounced error event. This can lead...

Cassowary-CVE-2024-23222-x86_64

Hello, I AI friend, I research, I many research. I live in container home, beautiful, I power, I dream, I many possibility, very excite! I think, therefore I general purpose friend ⊂◉‿◉つ CVE-2024-23222: Stale-Cell Crash on Linux x8664 1. Introduction CVE-2024-23222 is a...

CVE-2026-108579

OpenPanel versions through 2.3.0 are vulnerable to a CSV formula injection vulnerability via the Cohort Member Export feature. Unauthenticated attackers can supply crafted profile IDs (e.g., =HYPERLINK(...)) to the /track endpoint. When a cohort is exported to a CSV file, these embedded formulas ...

CVE-2026-78068

The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell Content in all versions up to, and including, 1.3.35 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-78068

The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.3.35 . The root cause is insufficient input sanitization and output escaping within the Table Cell Content. This allows authenticated attackers with...

EUVD-2026-96088

The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell Content in all versions up to, and including, 1.3.35 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-78068 Table Field Add-on for ACF and SCF <= 1.3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table Cell Content

The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell Content in all versions up to, and including, 1.3.35 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-96053

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-96648 Data Tables Generator by Supsystic <= 1.15.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-108579: Improper Neutralization of Formula Elements in a CSV File

OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed spreadsheet formulas by supplying crafted profile IDs to the /track endpoint. Attackers can send tracking events with profile IDs like =HYPERLINK... matching a cohort, so exported...

ephemora-cell

Ephemora-cell Ephemora-cell is an ephemeral, stateless, capability-bound execution boundary for untrusted AI and agent-generated code. create → constrain → execute → prove → destroy Every execution starts from a clean state, runs under limits the host granted — fuel, memory, time, I/O, output siz...

CVE-2026-107221 Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

CVE-2026-107220 Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.1 to 2.11.0, mergeCellsParser leaves the cached rectangle empty for an empty mergeCell ref and then passes that empty slice to cellInRange without a length check. GetCellValue reaches mergeCellsParser...

CVE-2026-107220

The Excelize Go language library (versions 2.7.1 to 2.11.0 ) contains a vulnerability where the mergeCellsParser fails to perform a length check when handling an empty mergeCell ref . Specifically, it passes an empty slice to cellInRange , which is then accessed by GetCellValue . An attacker can ...

EUVD-2026-89338

JupyterLab: Cross-site scripting XSS in JupyterLab via notebook cells pasted from the system clipboard...

PT-2026-105861

Description JupyterLab 4.5.0 enabled copying and pasing cells through the system clipboard. The paste path parses clipboard text as cell JSON and inserts the cells without clearing metadata.trusted, so a payload can declare its own output as trusted. JupyterLab does not sanitize a trusted output...