libhtp

Annonce de fin de vie de LibHTP 7 juillet 2026 À la suite de la fin de vie de Suricata 7, le projet libhtp ne sera plus maintenu et mis à jour par OISF. Suricata 8 et les versions ultérieures utilisent un fork du code de libhtp qui a été converti et réécrit en Rust. Il est disponible sous la même...

liferay-ga4-rce-research

Liferay CE 7.0.3 GA4 — Recherche de vulnérabilités RAPTOR Loop-Hunt Un audit de sécurité de Liferay Portal CE 7.0.3 GA4 tag git 7.0.3-ga4, commit b2d7cc68a réalisé avec la méthodologie RAPTOR loop-hunt : reconnaissance déterministe → 25 agents générateurs isolés lisant le code source brut → 22...

android

cSploit est maintenant considéré comme EOL et n'est plus mis à jour par les développeurs. La version actuelle pourrait ne pas fonctionner sur les versions plus récentes d'Android. Nous remercions tous ceux qui ont contribué à cSploit au fil des ans. cSploit : Suite de pentesting réseau pour Andro...

envizon

envizon - par evait security EOL https://github.com/evait-security/envizon/issues/130 Nous evait security avons migré vers https://gitlab.com/invuls/pentest-projects/pcf pour la documentation interne du projet. visualisation réseau & reporting de pentest Version 5.0 Cet outil est conçu, développé...

security-onion

Security Onion وصل إصدار Security Onion 16.04 إلى نهاية العمر الافتراضي: https://blog.securityonion.net/2021/04/security-onion-1604-has-reached-end-of.html يمكنك العثور على مستودع Security Onion 2 الجديد على: https://github.com/Security-Onion-Solutions/securityonion/...

scanner-cli

إشعار إيقاف: بلغ Hawkeye نهاية عمره الافتراضي. هناك خيارات أكثر حداثة متاحة لك ولمشروعك. إذا كنت ترغب في تولي صيانة المشروع، فلا تتردد في الاتصال بي. ستجد وسائل التواصل معي على صفحتي الشخصية. . . . . . . أداة Hawkeye scanner-cli هي أداة لتمييز مخاطر الأمان والثغرات والمخاطر العامة للمشروع. وهي...

Drupal SEoL (7.x)

According to its version, Drupal is 7.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc...

OpenPLC_v3

OpenPLC Runtime version 3 ⚠️ Ce projet a atteint sa fin de vie et n'est plus maintenu. Il a été remplacé par OpenPLC Runtime v4. Veuillez visiter le nouveau dépôt pour les instructions d'installation, la documentation et le support. OpenPLC est un automate programmable industriel open source basé...

Turvan6rkus-CVE-2024-3273

🛠️ Système d'injection de commandes pour les périphériques de stockage réseau D-Link 🌟 Contexte Le stockage réseau NAS de D-Link est un périphérique doté d'un disque dur ou de plusieurs connecté à un réseau informatique pour le stockage et le partage de fichiers. Contrairement à un disque dur...

Astra Linux – Vulnerability in Apache Log4j1.2

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter, where the values to be inserted are converted using PatternLayout. The message converter %m is likely to always be included. This allows attackers to manipulate SQL statements by entering crafted...

BurpSuiteSharpener

À propos de ce dépôt et EOL Ce dépôt ne sera plus mis à jour. Veuillez utiliser https://github.com/irsdl/BurpSuiteSharpenerEx. Burp Suite Sharpener Cette extension ajoute un certain nombre de fonctionnalités d'interface utilisateur et fonctionnelles à Burp Suite pour rendre son utilisation un peu...

Security Bulletin: Vulnerability in AngularJS affects IBM License Key Server Administration and Reporting Tool

Summary Potential vulnerability in AngularJS has been identified that affects IBM License Key Server Administration and Reporting Tool. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-0716 DESCRIPTION: Improper sanitization ...

CVE-2026-82971

A command injection vulnerability in QVidium Opera11 3.3.2a26-Ax4x-opera11 affects the CGI script /cgi-bin/net_tr.cgi , where manipulation of the ipaddr argument allows remote, unauthenticated attackers to execute arbitrary commands. The vulnerability is rated CVSS 10.0 (Critical) with low attack...

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Ajax.NET Professional AjaxPro contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users are advised to discontinue use and/or transition to a...

EUVD-2026-64854

A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly available and might be used. This...

CVE-2026-19841

A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the...

CVE-2026-41939

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...

CVE-2026-41939 Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...

CVE-2026-41939

Summary: CVE-2026-41939 affects Care Everywhere Gateway 14.3.10, where a hard-coded credential flaw in the bundled WildFly 8.2.0.Final management interface enables unauthenticated remote access to the WildFly admin console (port 20990) with default credentials. This allows deployment of a malicio...

Wednesday, July 29, 2026 Security Releases

Wednesday, July 29, 2026 Security Releases Security releases available Updates are now available for the 26.x, 24.x, 22.x Node.js release lines for the following issues. This security release includes the following dependency updates to address public vulnerabilities: undici 8.9.0, 7.29.0, 6.28.0...