android

cSploit अब EOL माना जाता है और डेवलपर्स द्वारा अपडेट नहीं किया जा रहा है। वर्तमान संस्करण नए Android संस्करणों पर कार्यात्मक नहीं हो सकता है। हम उन सभी की सराहना करते हैं जिन्होंने वर्षों में cSploit में योगदान दिया। cSploit: Android नेटवर्क पेंटेस्टिंग सूट cSploit एक मुक्त/लिब्रे और ओपन सोर्स GP...

BurpSuiteSharpener

حول هذا المستودع ونهاية الدعم EOL لن يتم تحديث هذا المستودع بعد الآن. يرجى استخدام https://github.com/irsdl/BurpSuiteSharpenerEx. Burp Suite Sharpener يجب أن يضيف هذا الامتداد عددًا من الميزات المتعلقة بواجهة المستخدم والوظائف إلى Burp Suite لتسهيل العمل به. يعمل الإصدار الأحدث فقط مع Montoya API...

liferay-ga4-rce-research

Liferay CE 7.0.3 GA4 — исследование уязвимостей RAPTOR Loop-Hunt Аудит безопасности Liferay Portal CE 7.0.3 GA4 git-тег 7.0.3-ga4, коммит b2d7cc68a, выполненный по методологии RAPTOR loop-hunt : детерминированная разведка → 25 изолированных агентов-генераторов, читающих исходники → 22 независимых...

OpenPLC_v3

OpenPLC Runtime الإصدار 3 ⚠️ وصل هذا المشروع إلى نهاية العمر الافتراضي End of Life ولم يعد مدعومًا. تم استبداله بـ OpenPLC Runtime v4. يرجى زيارة المستودع الجديد للحصول على تعليمات التثبيت والوثائق والدعم. OpenPLC هو وحدة تحكم منطقية قابلة للبرمجة مفتوحة المصدر وتعتمد على برمجيات سهلة الاستخدام...

security-onion

Security Onion Security Onion 16.04 a atteint sa fin de vie : https://blog.securityonion.net/2021/04/security-onion-1604-has-reached-end-of.html Vous pouvez trouver le nouveau dépôt Security Onion 2 à l'adresse : https://github.com/Security-Onion-Solutions/securityonion/...

EUVD-2026-64854

A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly available and might be used. This...

envizon

envizon - evait security द्वारा EOL https://github.com/evait-security/envizon/issues/130 हम evait security आंतरिक परियोजना दस्तावेज़ीकरण के लिए https://gitlab.com/invuls/pentest-projects/pcf पर स्थानांतरित हो गए हैं। नेटवर्क विज़ुअलाइज़ेशन और पेंटेस्ट रिपोर्टिंग संस्करण 5.0 यह उपकरण evait securit...

scanner-cli

परित्याग सूचना: Hawkeye ने अपने जीवन की अंतिम सीमा पार कर ली है। आपके और आपके प्रोजेक्ट के लिए बाजार में बहुत से आधुनिक विकल्प उपलब्ध हैं। यदि आप प्रोजेक्ट के रखरखाव को अपने हाथ में लेना चाहते हैं, तो कृपया मुझसे संपर्क करने में संकोच न करें। आप मुझ तक पहुँचने के तरीके मेरे व्यक्तिगत होमपेज पर पा...

Turvan6rkus-CVE-2024-3273

🛠️ Командная инъекция в устройствах сетевого хранения D-Link 🌟 Предыстория D-Link Network Attached Storage NAS, или сетевое хранилище , — это устройство с жёстким диском или дисками, подключаемое к компьютерной сети для хранения и совместного использования файлов. В отличие от обычного внешнего...

CVE-2026-19841

A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the...

CVE-2026-41939

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...

CVE-2026-41939 Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...

CVE-2026-41939

Summary: CVE-2026-41939 affects Care Everywhere Gateway 14.3.10, where a hard-coded credential flaw in the bundled WildFly 8.2.0.Final management interface enables unauthenticated remote access to the WildFly admin console (port 20990) with default credentials. This allows deployment of a malicio...

Wednesday, July 29, 2026 Security Releases

Wednesday, July 29, 2026 Security Releases Security releases available Updates are now available for the 26.x, 24.x, 22.x Node.js release lines for the following issues. This security release includes the following dependency updates to address public vulnerabilities: undici 8.9.0, 7.29.0, 6.28.0...

PT-2026-65863

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...

Cisco IOS 12.4 HTTP Server Cross-Site Request Forgery (CVE-2008-4128)

According to its self-reported version, Cisco IOS 12.4 is affected by multiple cross-site request forgery CSRF vulnerabilities in the HTTP administration component. An unauthenticated, remote attacker can exploit these by persuading an authenticated user to follow a malicious link, allowing...

CVE-2026-15487 TRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os command injection

A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub41FBD0 of the file /goform/systemntp of the component Firmware Update Handler. Performing a manipulation of the argument Hostname results in os command injection. The attack may be initiated remotely. The vendo...

CVE-2026-15485

A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function sub43F2C4 of the file /goform/toolsnslookup of the component DNS Lookup Handler. This manipulation of the argument nslookuptarget/dnsserver causes os command injection. The attack can be initiated remotely...

CVE-2026-15486

A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub42026C of the file /goform/toolsddns of the component Firmware Update Handler. Such manipulation of the argument hostname/username/password leads to os command injection. The attack can be launched remotel...

EUVD-2026-43208

A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub42026C of the file /goform/toolsddns of the component Firmware Update Handler. Such manipulation of the argument hostname/username/password leads to os command injection. The attack can be launched remotel...