CVE-2026-75339

cjbi admin3 v3.0.0 suffers from missing permission checks on the /storage/upload storage endpoint. Any logged-in user can upload arbitrary files, while any anonymous attacker can download them, enabling unauthorized file access and potential data exposure. The CVSS v3.1 score is 8.8 (High) (AV:N/...

PT-2026-82789

Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings. This could result in full compromise of device functionality...

CVE-2026-75339

The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them...

WebSecProbe

.png WebSecProbe è un'utility di test di sicurezza progettata per ricercatori di sicurezza web, penetration tester e amministratori di sistema per analizzare le risposte HTTP 403 Forbidden e il comportamento dei controlli di accesso nelle applicazioni web. Lo strumento aiuta a identificare...

superpowers-evals

Superpowers Evals Laboratorio di valutazione comportamentale per superpowers. Quorum guida CLI reali di coding-agent Claude, Codex, Antigravity, Gemini, Kimi, OpenCode, Pi e Copilot attraverso un agente Gauntlet QA e li valuta rispetto ai criteri di accettazione dello scenario più controlli...

scoringengine

Scoring Engine Scoring Engine è una piattaforma open-source per eseguire competizioni di cybersecurity con squadre Rosse/Bianche/Blu. Automatizza i controlli dei servizi a ogni round e fornisce un tabellone web e un'interfaccia di configurazione. Caratteristiche Pianificazione ed esecuzione...

Grafana-Final-Scanner

Grafana Final Scanner Um scanner de vulnerabilidades para Grafana via linha de comando. Ele identifica a versão do Grafana instalada, executa um conjunto de verificações CVE sensíveis à versão, audita falhas comuns de configuração, armazena resultados em um banco de dados local e pode exibi-los p...

CVE-2026-77507

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.8, Weblate's object-scoped RSS feeds do not apply the permission checks used elsewhere, allowing unauthorized users to read change-history metadata from private projects and...

CVE-2026-62326

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a user with the built-in "Edit source" role can store a malicious regular expression in a source string's flags that is executed without any timeout, allowing them to stall...

pybatfish

Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...

DriverBuddyReloaded

Driver Buddy Reloaded Table of Contents Driver Buddy Reloaded Table of Contents Installation Quick Usage Advanced Usage About Driver Buddy Reloaded Finding DispatchDeviceControl Labelling WDM and WDF Structures Finding and Decoding IOCTL Codes Flagging Functions Finding DeviceName Dumping Pooltag...

SharpEDRChecker

SharpEDRChecker Neue und verbesserte C-Implementierung von Invoke-EDRChecker. Überprüft laufende Prozesse, Prozessmetadaten, in den aktuellen Prozess geladene DLLs sowie die Metadaten jeder DLL, gemeinsame Installationsverzeichnisse, installierte Dienste sowie die Binärmetadaten jedes Dienstes,...

cfripper

CFRipper CFRipper è una libreria e uno strumento CLI per l'analisi della sicurezza dei modelli AWS CloudFormation. Puoi usare CFRipper per prevenire il deploy di risorse AWS non sicure nel tuo ambiente Cloud. Puoi scrivere i tuoi controlli di conformità aggiungendo nuovi plugin personalizzati...

pcc

PHP Secure Configuration Checker Überprüft die aktuelle PHP-Konfiguration auf potenzielle Sicherheitslücken. Einfach diese Datei von Ihrem Webserver aus aufrufen oder über die CLI ausführen. Autor Diese Software wurde von Ben Fuhrmannek, SektionEins GmbH, entwickelt, um php.ini-Prüfungen zu...

EUVD-2026-66419

On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrativ...

CVE-2015-1328

CVE-2015-1328 Prova di concetto Un exploit di prova di concetto PoC per CVE-2015-1328, una vulnerabilità di escalation dei privilegi che colpisce l'implementazione overlayfs del kernel Linux. Questa vulnerabilità consente a utenti locali non privilegiati di ottenere accesso root sfruttando...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098688)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098688 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: x86/aegis - Add missing error checks The skcipherwalk functions can allocate memory and c...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098983)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098983 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qlogic/qede: fix potential out-of-bounds read in qedetpacont and qedetpaend The loops in...

EUVD-2026-37013

gRPC Erlang package's path bindings are overridable by query string and request body...

TYPO3-EXT-SA-2026-015: Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-015...