IronFox

IronFox F-Droid QR Code: IronFox is a fork of Divested Computing Group's Mull Browser, based on Mozilla Firefox. Our goal is to continue the legacy of Mull by providing a free and open source, privacy and security-oriented web browser for daily use. !TIP Find a bug? Encounter an annoying problem?...

CVE-2026-77883 Apache Syncope: Information disclosure via one-hop JEXL navigation past the JexlContextBuilder name denylist

Exposure of sensitive information through data queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User read to access LinkedAccount's if...

EUVD-2026-77441

Exposure of sensitive information through data queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User read to access LinkedAccount's if...

CVE-2026-77883

Apache Syncope is vulnerable to information disclosure via a one-hop JEXL navigation that bypasses the JexlContextBuilder name denylist . An administrator with Derived Schema entitlements can craft a malicious JEXL expression, enabling any administrator with User read entitlements to access Linke...

CVE-2025-70962

CVE-2025-70962 Use of Hard-coded Credentials in ZOSI C519M IP camera RTSP service Field| Value ---|--- CVE ID| CVE-2025-70962 Vendor| ZOSI Technology Product| ZOSI C519M smart IP camera also listed as model 1NC-519M Affected versions| Firmware V4.2.8.832C01450BA tested build; earlier versions not...

EUVD-2026-77439

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Syncope. The notification message, as optionally shown by Console's and Enduser's login pages can be instructed to display HTML tags with unsafe JS inline, via malicious HTTP link generation...

CVE-2026-78318

Apache Syncope is affected by an unauthenticated reflected XSS in its Console and Enduser login pages. The vulnerability stems from improper neutralization of input during web page generation: the optional notification message displayed on those pages can be manipulated via a malicious HTTP link ...

CVE-2026-78318 Apache Syncope: Unauthenticated reflected XSS in Console and Enduser

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Syncope. The notification message, as optionally shown by Console's and Enduser's login pages can be instructed to display HTML tags with unsafe JS inline, via malicious HTTP link generation...

proxmox-lxc-docker-fix

Proxmox LXC AppArmor Fix for Docker/Containers Workaround for CVE-2025-52881 : Fixes Docker, Podman, and container runtime breakage in Proxmox LXC containers caused by AppArmor incompatibility with runc 1.2.7+/1.3.2+ 🚨 The Problem Recent security updates to runc versions 1.2.7+ and 1.3.2+ and...

EUVD-2026-77438

Incorrect privilege assignment vulnerability in Apache Syncope. When the configured JWKS settings for internal JWT authentication are disclosed at least protocol and key, an attacker can obtain admin privileges after completing a successful authentication and obtaining a valid low-privileges JWT...

CVE-2026-78330

Apache Syncope is affected by an incorrect privilege assignment vulnerability in its internal JWT authentication mechanism. When the configured JWKS settings (at least protocol and key) are disclosed, an attacker who completes a successful authentication and obtains a valid low-privilege JWT can ...

CVE-2026-78330 Apache Syncope: Privilege escalation for admin user via JWT authentication

Incorrect privilege assignment vulnerability in Apache Syncope. When the configured JWKS settings for internal JWT authentication are disclosed at least protocol and key, an attacker can obtain admin privileges after completing a successful authentication and obtaining a valid low-privileges JWT...

EUVD-2026-77437

Insertion of sensitive information into sent data vulnerability in Apache Syncope. Any authenticated user can query for the list of available OIDC providers configured for SSO with Console and Enduser. The returned payload contains all configuration settings, including client secrets, regardless ...

CVE-2026-78336 Apache Syncope: OIDCC4UI provider list discloses client secrets to any authenticated user

Insertion of sensitive information into sent data vulnerability in Apache Syncope. Any authenticated user can query for the list of available OIDC providers configured for SSO with Console and Enduser. The returned payload contains all configuration settings, including client secrets, regardless ...

CVE-2026-78336

Apache Syncope is an identity and access management (IAM) framework. The vulnerability resides in the OIDC provider list endpoint used for SSO configuration in Console and Enduser. Any authenticated user , regardless of their entitlements, can query this endpoint and receive a payload containing ...

isslfix

iOS : iSSLFix: Certificate in chain starting at has isCA=0 = possible MITM attempt, making valida...

magic-extractor

Magic Extractor Description Magic Extractor is a universal extraction tool for Windows that identifies a file with several detectors and routes it to the right bundled extractor. It aims to cover mainstream compression formats, the installers you actually see today, and a range of less common...

dtrace-memaccess_cve-2020-27949

Reading and writing memory of other processes using fasttrap The /dev/fasttrap device for creating trap nodes in user-space processes for the pid and objc providers has the permissions 666. In contrast to /dev/dtrace, which is also 666, fasttrap lacks a permission check. This allows any process t...

Project-Pwnag0dchi

Project Pwnag0dchi Created this since a lot of people were asking about the customized plugins & configurations I use. Following this guide, your Pwnagotchi will look exactly as seen on my socials & YouTube videos in 5mins tops. You'll also find a complete Pwnagotchi noob build guide + some commo...

CVE-2025-60719-AFD.SYS

!IMPORTANT This proof of concept is for demonstration and learning purposes only. Use it with care. CVE-2025-60719-AFD.SYS Akamai researchers have created a new AI capability for instant root-cause analysis. The tool is a supervised multi-agent system, dubbed Patchdiff-AI. In this article we are...