privacybadger

プライバシーバッジャー Privacy Badgerは、隠れたトラッカーを自動的に学習してブロックするブラウザ拡張機能です。Privacy Badgerは、主要なデジタル権利非営利団体であるEFFによって作られ、企業があなたをスパイするのを防ぎます。 Privacy Badgerは、データ共有と販売をオプトアウトするためにGlobal Privacy Controlシグナルを送信し、企業にあなたを追跡しないように伝えるためにDo Not Trackシグナルを送信します。トラッカーがこれらのシグナルを無視した場合、Privacy Badgerはそれらをブロックすることを学習します。...

lazyrecon

/ \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Usage ./lazyrecon.sh -d domain.com To exclude particular subdomains: ./lazyrecon.sh -d domain.com -e excluded.domain.com,other.domain.com About...

getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

nuclei-wordfence-cve

Nuclei + Wordfence = ♥ 85,767 Nuclei Templates for WordPress Security Scanning 🥳 Level up your WordPress security game! This project's got a treasure trove of fresh Nuclei templates for WordPress. Scan for weaknesses in Core, plugins, and themes – all based on the latest intel from Wordfence.com...

sh00t

A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or task management...

GestioIP - Reflected Cross-Site Scripting

GestioIP v3.5.7 contains a reflected cross-site scripting caused by unsanitized input in the ipdojob request, letting attackers execute scripts in the victim's browser, exploit requires specific user permissions. id: CVE-2024-50857 info: name: GestioIP - Reflected Cross-Site Scripting author:...

Serdyuk-DO-homework-CVE-2021-41773

Serdyuk-DO-homework-CVE-2021-41773...

PT-2026-106629

In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call skb clone and charge r for closed listener in tcp v6 do rcv. tcp v6 do rcv no longer calls skb clone and charge r for TCP LISTEN since commit 073d89808c06 "net: fix data-races around sk-sk forward alloc". However,...

CVE-2025-2266

🚨 CVE-2025-2266 — WordPress プラグインのエクスプロイト 🔍 脆弱性の概要 WordPress 用プラグイン Checkout Mestres do WP for WooCommerce は、バージョン 8.6.5 から 8.7.5 までにおいて、未認証の任意オプション更新の脆弱性 の影響を受けます。 脆弱な関数 cwmpUpdateOptions は適切な権限チェックが行われないため、未認証の攻撃者 が WordPress の任意のオプションを更新できる可能性があります。 ⚠️ リスクと悪用 攻撃者は以下のことが可能です： ユーザー登録を有効化する。...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: initramfs: Avoid filename buffer overflow The initramfs filename field is defined in Documentation/driver-api/early-userspace/buffer-format.rst as follows: plaintext 37 cpiofile := ALGN4 + cpioheader + filename + "\0" + ALGN4 +...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: For the m68k architecture, the bus error is only forced if the PC is not in the exception table. The getkernelnofault function copies data in supervisor mode when forcing a task backtrace log through /proc/sysrqtrigger. This is...

PT-2026-104552

Name of the Vulnerable Software and Affected Versions The Beaver Builder Page Builder – Drag and Drop Website Builder versions prior to 2.11.0.6 Description The plugin allows unauthenticated attackers to execute arbitrary shortcodes because the software fails to properly validate a value before...

PT-2026-104538

Name of the Vulnerable Software and Affected Versions WP Ultimate Review versions prior to 2.4.4 Description Authenticated users with subscriber-level access and above can execute arbitrary shortcodes. This occurs because the software fails to properly validate a value before executing the do...

PT-2026-104536

Name of the Vulnerable Software and Affected Versions WP Ultimate Review versions prior to 2.4.4 Description Unauthenticated attackers can execute arbitrary shortcodes because the software fails to properly validate a value before running the do shortcode function. The required nonce is exposed t...

PT-2026-104498

Name of the Vulnerable Software and Affected Versions All in One SEO versions prior to 5.0.3 Description The plugin allows unauthenticated attackers to execute arbitrary shortcodes because it fails to properly validate a value before running the do shortcode function. This issue occurs when the...

PT-2026-102521

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/do cmd.js’ endpoint containing an excessively long...

PT-2026-98476

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the scsi qla2xxx driver during queue teardown. The response queue MSI-X handler qla2xxx msix rsp q schedules the qla do work function via queue workha-wq...

PT-2026-98602

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free race condition exists involving the cad pid pointer, a kernel-wide structure. The functions proc do cad pid and kill cad pid read cad pid and pass it to pid vnr and kill...

PT-2026-97949

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ppl do flush function within the md/raid5-ppl component. The problem occurs because a loop continues to iterate after the ppl io unit finished functi...

PT-2026-97966

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the cvm oct tx do cleanup function. The TX cleanup tasklet, which can be scheduled by the watchdog IRQ handler to execute cvm oct tx do cleanup, may rema...