ciso-assistant-community

Star the project 🌟 to get releases notification and help growing the community! intuitem.com · SaaS Free trial · Roadmap · Docs · Languages · Discord · Frameworks CISO Assistant offers a fresh perspective on Cybersecurity Management and GRC Governance, Risk, and Compliance practices: Designed as ...

pwnproxy

CI: suite · goldens · perf-check — baseline 281.9ms / 19 pages tests/perf/baseline.json — .github/workflows/ci.yml pwnproxy One security testing engine. Every interface. An open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams. Security testing is no...

GuardScan

🛡️ GuardScan 100% Free & Open Source • Privacy-First Security Scanning and AI Code Review CLI / | | | | / \ | | \ / | / | / \ | \ | | / | | | | | | | | | |/ \ | | | | | | \ | | / \ | | | | | | | | | | || | || / | | || | | | / | |\ | || | || | | | |// \| \/ |/ // \| | ||| Privacy-First...

CVE-2020-2551

CVE-2020-2551 The setup script of this project has been tested on version 10.3.6, version 12 has not been tested. Environment kali+weblogic10.3.6+jdk6u25 Ensure the machine deploying weblogic has at least 1.5G of memory, because the script specifies -x1024m in its parameters. Usage Deploy weblogi...

WAREED-DNS-C2

Wareed DNS C2 WAREED is a Command and Control C2 that utilizes the DNS protocol for secure communications between the server and the target. Designed to minimize communication and limit data exchange, it is intended to be a first-stage C2 to persist in machines that don't have access to the...

CVE-2022-24227-updated

CVE-2022-24227 Updated - BoltWire v8.00 - Stored Cross-site Scripting XSS Description CVE-2022-24227 Updated : In version 8.00 of BoltWire CMS , the First Name and Last Name fields on the member registration completion page are also vulnerable to stored cross-site scripting XSS attacks, just like...

NetScope

NetScope Offline-first network investigation and response platform for Windows. NetScope is a desktop application for security analysts, incident responders, and CTF players. It takes a packet capture .pcap / .pcapng or a live interface and turns it into a complete, evidence-backed investigation ...

CVE-2022-3546

CVE-2022-3546 https://vulners.com/cve/CVE-2022-3546 A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /csms/admin/?page=user/list of the component Create User Handle...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Subdomain Lookup Columbus returned 638...

POC_CVE-2024-40492

CVE-2024-40492: Stored XSS to ATO Description Stored Cross-Site Scripting XSS is a type of security vulnerability typically found in web applications. It occurs when an attacker is able to inject malicious scripts into a web application, and those scripts are stored on the server. When other user...

Malware in do-wnload-available-20999-ruff-ryders-first-lady-6wp8i-xhznkl

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview do-wnload-available-20999-ruff-ryders-first-lady-6wp8i-xhznkl is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

Linux Distros Unpatched Vulnerability : CVE-2026-112063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAMHi that allows malicious XMPP servers to overflow a 128-byte stack buffer...

Keycloak 26.7.3 Username Takeover

Keycloak versions through 26.7.3 contain an improper authentication flaw in the first-broker-login flow that allows a matching external-provider username to lock a legitimate user out of their account...

CVE-2026-100186

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via First Name Field in all versions up to, and including, 4.0.3 due to insufficient input sanitization and output escaping. This makes ...

EUVD-2026-102682

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via First Name Field in all versions up to, and including, 4.0.3 due to insufficient input sanitization and output escaping. This makes ...

CVE-2026-100186

The User Profile Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting (XSS) in all versions up to and including 4.0.3 . The flaw originates from insufficient input sanitization and output escaping within the First Name Field . An unauthenticated attacker can i...

CVE-2026-100186 User Profile Builder <= 4.0.3 - Unauthenticated Stored Cross-Site Scripting via First Name Field

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via First Name Field in all versions up to, and including, 4.0.3 due to insufficient input sanitization and output escaping. This makes ...

CVE-2026-100186: Improper Neutralization of Input During Web Page Generation

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via First Name Field in all versions up to, and including, 4.0.3 due to insufficient input sanitization and output escaping. This makes ...

PT-2026-115441

Name of the Vulnerable Software and Affected Versions User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor versions prior to 4.0.4 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site...