android

cSploit is now considered EOL and is not being updated by the developers. Current version might not be functional on newer Android versions. We appreciate everyone who contributed to cSploit over the years. cSploit: Android network pentesting suite cSploit is a free/libre and open source GPLed...

liferay-ga4-rce-research

Liferay CE 7.0.3 GA4 — بحث في الثغرات RAPTOR Loop-Hunt مراجعة أمنية لـ Liferay Portal CE 7.0.3 GA4 وسم git 7.0.3-ga4، الالتزام b2d7cc68a نُفذت بمنهجية RAPTOR loop-hunt : استطلاع حتمي → 25 وكيل توليد معزول يقرؤون المصدر الخام → 22 وكيل حكم مستقل يدحضون من المصدر الخام → 9 مدقّقين مباشرين يهاجمون...

libhtp

Annonce de fin de vie de LibHTP 7 juillet 2026 À la suite de la fin de vie de Suricata 7, le projet libhtp ne sera plus maintenu et mis à jour par OISF. Suricata 8 et les versions ultérieures utilisent un fork du code de libhtp qui a été converti et réécrit en Rust. Il est disponible sous la même...

envizon

envizon - par evait security EOL https://github.com/evait-security/envizon/issues/130 Nous evait security avons migré vers https://gitlab.com/invuls/pentest-projects/pcf pour la documentation interne du projet. visualisation réseau & reporting de pentest Version 5.0 Cet outil est conçu, développé...

security-onion

Security Onion Security Onion 16.04 has reached End Of Life: https://blog.securityonion.net/2021/04/security-onion-1604-has-reached-end-of.html You can find the new Security Onion 2 repo at: https://github.com/Security-Onion-Solutions/securityonion/...

scanner-cli

Avis de dépréciation : Hawkeye a atteint sa fin de vie. Il existe des options plus modernes pour vous et votre projet. Si vous souhaitez reprendre la maintenance du projet, n'hésitez pas à me contacter. Vous trouverez les moyens de me joindre sur ma page personnelle. . . . . . . Le scanner-cli...

OpenPLC_v3

OpenPLC Runtime version 3 ⚠️ Ce projet a atteint sa fin de vie et n'est plus maintenu. Il a été remplacé par OpenPLC Runtime v4. Veuillez visiter le nouveau dépôt pour les instructions d'installation, la documentation et le support. OpenPLC est un automate programmable industriel open source basé...

Turvan6rkus-CVE-2024-3273

🛠️ نظام الأوامر لأجهزة التخزين الشبكي من D-Link 🌟 الخلفية جهاز التخزين الشبكي D-Link Network Attached Storage NAS أو التخزين المتصل بالشبكة هو جهاز يُوصَل بشبكة الحاسوب ويحتوي على قرص صلب أو أقراص لتخزين الملفات ومشاركتها. على عكس القرص الصلب الخارجي العادي الذي يتصل مباشرة بالحاسوب، يتصل جهاز...

BurpSuiteSharpener

À propos de ce dépôt et EOL Ce dépôt ne sera plus mis à jour. Veuillez utiliser https://github.com/irsdl/BurpSuiteSharpenerEx. Burp Suite Sharpener Cette extension ajoute un certain nombre de fonctionnalités d'interface utilisateur et fonctionnelles à Burp Suite pour rendre son utilisation un peu...

Drupal SEoL (7.x)

According to its version, Drupal is 7.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc...

Astra Linux – Vulnerability in Apache Log4j1.2

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter, where the values to be inserted are converted using PatternLayout. The message converter %m is likely to always be included. This allows attackers to manipulate SQL statements by entering crafted...

Security Bulletin: Vulnerability in AngularJS affects IBM License Key Server Administration and Reporting Tool

Summary Potential vulnerability in AngularJS has been identified that affects IBM License Key Server Administration and Reporting Tool. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-0716 DESCRIPTION: Improper sanitization ...

CVE-2026-82971

A command injection vulnerability in QVidium Opera11 3.3.2a26-Ax4x-opera11 affects the CGI script /cgi-bin/net_tr.cgi , where manipulation of the ipaddr argument allows remote, unauthenticated attackers to execute arbitrary commands. The vulnerability is rated CVSS 10.0 (Critical) with low attack...

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Ajax.NET Professional AjaxPro contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users are advised to discontinue use and/or transition to a...

EUVD-2026-64854

A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly available and might be used. This...

[SECURITY] Debian 11 LTS will reach end-of-life on 31 August 2026

Dear Debian LTS users, This is a gentle reminder that Debian 11 codename "bullseye" will reach the end of its Long Term Support LTS period on 31 August 2026. We encourage users to upgrade to Debian 12 codename "bookworm", and then, when possible, to Debian 13 codename "trixie". Starting in...

D-Link DNS_340L - OS Command Injection

Exploit Title: D-Link DNS340L - OS Command Injection Date: 2026-07-16 Exploit Author: Jared Brits K3ysTr0K3R Vendor Homepage: https://www.dlink.com/ Version: DNS-320 v1.00, DNS-320LW v1.01.0914.2012, DNS-325 v1.01, v1.02, DNS-340L v1.08, and possibly others Tested on: D-Link DNS-320 CVE:...

CVE-2026-19841

A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the...

ABB Ability Zenon

SUMMARY ABB is aware of publicly reported vulnerabilities affecting MongoDB 4.2, which is bundled within the IIoT Services of the affected product versions. MongoDB 4.2 has reached end-of-life and contains multiple known security vulnerabilities. An attacker who successfully exploits these...

CVE-2026-41939

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...