CVE-2026-55591 Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints

Signal K Server is a server application that runs on a central hub in a boat. Prior to 2.28.0, makeRemoteRequest in src/serverroutes.ts accepted attacker-controlled host, port, useTLS, and selfsignedcert parameters from the testSignalKConnection, requestAccess, and checkAccessRequest endpoints...

CVE-2026-55591 Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints

Signal K Server is a server application that runs on a central hub in a boat. Prior to 2.28.0, makeRemoteRequest in src/serverroutes.ts accepted attacker-controlled host, port, useTLS, and selfsignedcert parameters from the testSignalKConnection, requestAccess, and checkAccessRequest endpoints...

CVE-2026-91991 Tornado before 6.5.8 Cookie Attribute Injection via Capitalized kwargs

Tornado before 6.5.8 contains an incomplete fix for cookie attribute injection that allows attackers to inject arbitrary cookie attributes by passing capitalized or legacy keyword arguments to setcookie. Attackers can embed semicolon-delimited data in capitalized parameters like Domain, Path, or...

CVE-2026-91991 Tornado before 6.5.8 Cookie Attribute Injection via Capitalized kwargs

Tornado before 6.5.8 contains an incomplete fix for cookie attribute injection that allows attackers to inject arbitrary cookie attributes by passing capitalized or legacy keyword arguments to setcookie. Attackers can embed semicolon-delimited data in capitalized parameters like Domain, Path, or...

CVE-2026-91983 Vikunja before 2.6.0 API Token Scope Bypass via expand Parameter

Vikunja before 2.6.0 contains an API token scope bypass vulnerability in task read endpoints where authorization fails to inspect query string parameters. Attackers with limited token scopes can use the expand parameter to access restricted data like comments, reactions, and time entries without...

CVE-2026-91983 Vikunja before 2.6.0 API Token Scope Bypass via expand Parameter

Vikunja before 2.6.0 contains an API token scope bypass vulnerability in task read endpoints where authorization fails to inspect query string parameters. Attackers with limited token scopes can use the expand parameter to access restricted data like comments, reactions, and time entries without...

CVE-2026-91935 Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes

Flowise before 3.1.4 fails to validate baseURL parameters in chat-model nodes, allowing authenticated users to redirect requests to arbitrary hosts. Attackers with chatflows:create or chatflows:update permissions can exfiltrate LLM provider API keys by redirecting requests to cloud metadata...

CVE-2026-91935 Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes

Flowise before 3.1.4 fails to validate baseURL parameters in chat-model nodes, allowing authenticated users to redirect requests to arbitrary hosts. Attackers with chatflows:create or chatflows:update permissions can exfiltrate LLM provider API keys by redirecting requests to cloud metadata...

CVE-2026-91922

Steedos Platform through 3.0.15-beta.47 contains a reflected cross-site scripting vulnerability in the anonymous /api/page/render endpoint that fails to properly escape query parameters in inline script elements. Attackers can craft malicious links with script-terminating sequences in the schemaA...

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at internet-exposed Vite development servers that's designed to steal cloud credentials, configurations from Amazon Web...

Exploit for CVE-2026-59346

CVE-2026-59346 — VMXNET3 TSO Integer Overflow VMware Workstat...

CVE-2026-91922

Steedos Platform through 3.0.15-beta.47 contains a reflected cross-site scripting vulnerability in the anonymous /api/page/render endpoint that fails to properly escape query parameters in inline script elements. Attackers can craft malicious links with script-terminating sequences in the schemaA...

EUVD-2026-78413

Steedos Platform through 3.0.15-beta.47 contains a reflected cross-site scripting vulnerability in the anonymous /api/page/render endpoint that fails to properly escape query parameters in inline script elements. Attackers can craft malicious links with script-terminating sequences in the schemaA...

CVE-2026-91922 Steedos Platform through 3.0.15-beta.47 Reflected XSS via page render

Steedos Platform through 3.0.15-beta.47 contains a reflected cross-site scripting vulnerability in the anonymous /api/page/render endpoint that fails to properly escape query parameters in inline script elements. Attackers can craft malicious links with script-terminating sequences in the schemaA...

CVE-2026-91922 Steedos Platform through 3.0.15-beta.47 Reflected XSS via page render

Steedos Platform through 3.0.15-beta.47 contains a reflected cross-site scripting vulnerability in the anonymous /api/page/render endpoint that fails to properly escape query parameters in inline script elements. Attackers can craft malicious links with script-terminating sequences in the schemaA...

cve-mcp-server

🛡️ CVE MCP Server Inteligencia de seguridad impulsada por IA a tu alcance: 28 herramientas + un orquestadortriagecve de una sola llamada, 24 fuentes de datos, un protocolo. Un servidor Model Context Protocol MCP de nivel de producción que convierte a Claude en un analista de seguridad de espectro...

TheTimeMachine

🚀 TheTimeMachine v3.0 - Armando Wayback para Reconocimiento, Bug Bounties, OSINT y más! Has oído hablar de los viajes en el tiempo en películas y cómics, ¿verdad? Bueno, esto ya no es ficción 😎. TheTimeMachine te permite explorar el pasado de cualquier aplicación web extrayendo URLs archivadas de...

PacketSender

简介 https://packetsender.com 阅读其他语言版本：English, Español, Deutsch, Français, italiano, 简体中文. Packet Sender 是一款开源工具，可用于发送和接收 TCP、UDP 以及 SSL（加密 TCP）数据包，同时支持 HTTP/HTTPS 请求和面板生成。主分支正式支持 Windows、Mac 和桌面 Linux（基于 Qt）。其他平台可能会重新编译并重新分发 Packet Sender。Packet Sender 完全免费，采用 GPL v2...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

ExtractBitlockerKeys

一个用于自动从域中提取 BitLocker 恢复密钥的系统管理或后渗透脚本。 功能特性 自动从域控制器的 LDAP 获取所有计算机列表。 多线程连接，从 LDAP 提取 BitLocker 密钥。 迭代 LDAP 结果页面，获取域中所有计算机，无论规模大小。 !WARNING 请勿将此备份存储在该域的在线 SMB 共享中。建议打印并物理存放在保险柜中。 以 JSON 格式导出结果，包含计算机 FQDN、域、恢复密钥、卷 GUID、创建时间和组织单位。 以 XLSX 格式导出结果，包含计算机 FQDN、域、恢复密钥、卷 GUID、创建时间和组织单位。 以 SQLITE3...