CVE-2026-84815

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kriesi Enfold allows Reflected XSS. This issue affects Enfold: from n/a through 8.0...

macos-collector v1.7.0

macos-collector macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR macos-collector.sh is a Shell script utilized to collect macOS Forensic Artifacts from a compromised macOS endpoint using primarily Aftermath by Jamf Threat Labs. Download Download the latest version of...

EUVD-2026-70469

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kriesi Enfold allows Reflected XSS. This issue affects Enfold: from n/a through 8.0...

CVE-2026-84815 WordPress Enfold theme <= 8.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kriesi Enfold allows Reflected XSS. This issue affects Enfold: from n/a through 8.0...

CVE-2026-84815 WordPress Enfold theme <= 8.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kriesi Enfold allows Reflected XSS. This issue affects Enfold: from n/a through 8.0...

CVE-2026-84815

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the Kriesi Enfold WordPress theme, affecting versions 8.0 and earlier . The flaw stems from improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that execute in a victim's brows...

Security update for terraform-provider-susepubliccloud

This update for terraform-provider-susepubliccloud fixes the following issue: CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of truncated/invalid UTF-8 input can lead to infinite loop bsc1271995. Patch Instructions: To install this SUSE update use the SUSE recommended...

Security update for curl

This update for curl fixes the following issues: CVE-2026-5773: wrong reuse of SMB connection bsc1262633. CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. CVE-2026-8926: password leak with netrc and user in URL bsc1268412. CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause a...

HTTP-Basma

Adaptive Fingerprinting: HTTP-Basma's Multi-Stage Probing for Granular Server Differentiation HTTP-Basma is live at https://httpbasma.netomize.ca/ Introduction In the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability...

aws-perimeter

aws-perimeter ターミナルベースのAWSセキュリティスキャナ 。100以上のセキュリティチェック をVPC、IAM、S3、CloudTrail、コンテナ（ECS/EKS）、AI攻撃検出にわたって実行。危険なIAM権限、露出したシークレット、誤設定されたS3バケット、コンテナの脆弱性、そして新興のLLMjacking脅威を検出します。 製品概要: docs/CAPABILITIESOVERVIEW.md 機能 🔐 VPCセキュリティ セキュリティグループ分析（開放されたSSH/RDP、データベースポート） パブリック公開検出と管理ポートリスク...

Security Bulletin: IBM Tivoli Netcool Configuration Manager is affected by multiple Bouncy Castle vulnerabilities that could cause denial of service, resource exhaustion, cryptographic verification bypass, or other security impacts.

Summary IBM Tivoli Netcool Configuration Manager version 6.4.2 addresses multiple vulnerabilities in Bouncy Castle components. These vulnerabilities could allow attackers to cause denial of service, excessive resource consumption, application crashes, bypass cryptographic verification, or trigger...

DEBIAN-CVE-2026-80734

In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached inodes BUG When running generic/795 with 8K block size, 4K page size, the test always fails, triggering some ASSERTs related to folio size: 795 241074: dropcaches: 3 assertion...

CVE-2026-80734

In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached inodes BUG When running generic/795 with 8K block size, 4K page size, the test always fails, triggering some ASSERTs related to folio size: 795 241074: dropcaches: 3 assertion...

AZL-99062 CVE-2026-80726 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

DEBIAN-CVE-2026-80726

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

CVE-2026-80726

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

FOFA-API-Threaded-Searcher

FOFA API スレッド型検索ツール FOFA Fofa.so API を照会し、選択したフィールドを抽出して、スマートな整形でユニークな結果を保存する強力なマルチスレッド Python ツールです。 ✨ 特徴 マルチスレッド – 複数ページを並行して取得（スレッド数は設定可能） カスタムフィールド – 任意の有効な FOFA フィールドを選択可能（ip、port、title、cert.、tls.、…） スマートな出力ファイル名 – プライマリフィールドに基づいてファイル名を自動生成（例: domains.txt、ips.txt） 重複排除 –...

log4j2-bugmaker

Log4j2-BugMaker CVE-2021-44228 Log4Shell 脆弱性デモプロジェクト これは、Log4j2 のリモートコード実行脆弱性（Log4Shell）を学習・研究するためのデモプロジェクトです。 ⚠️ セキュリティ警告 このプロジェクトはセキュリティ研究および教育目的のみに使用してください。本番環境では使用しないでください！ このプロジェクトは、重大なセキュリティ脆弱性を含む Log4j 2.14.1 を使用しています。 📋 環境構成 Spring Boot : 2.6.1 Log4j2 : 2.14.1 脆弱性のあるバージョン Java : 8 JDK 1.8 ...

util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...