Boucle-framework

Boucle Claude Code hooks that actually enforce your rules. 7 standalone hooks, plus enforce-hooks for CLAUDE.md policy, audit tooling, 1,900+ tests, and a searchable Claude Code gaps corpus with severity ratings and workarounds. Quick links: Check your setup · Install hooks · Known limitations ·...

graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

caOptics

Note Project archived due to shifting development priorities and refocusing my community efforts to other areas PoCs, other tools and demos/presentation, project is set to read-only. CA Optics - Azure AD Conditional Access Gap Analyzer What is Conditional Access? Notes for early testers Release...

Gixy-Next v0.7.1

Gixy-Next: NGINX Configuration Security Scanner for Security Audits Overview Gixy-Next Gixy is an open-source NGINX configuration security scanner and hardening tool that statically analyzes your nginx.conf to detect security misconfigurations, hardening gaps, and common performance pitfalls befo...

Astra Linux – Vulnerability in WebKit2GTK

A use-after-free vulnerability exists in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before version 2.36.8. This vulnerability allows attackers to execute code remotely...

Astra Linux – Vulnerability in Firefox and Thunderbird

When calling JS::CheckRegExpSyntax, a syntax error may be set, resulting in the call to convertToRuntimeErrorAndClear. A path within the function might attempt to allocate memory when no memory is available, causing a newly created Out of Memory exception to be misinterpreted as a syntax error...

The vulnerability of the rds_conn_shutdown() function in the net/rds/connection.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the rdsconnshutdown function in the net/rds/connection.c module, which is part of the Linux kernel’s networking functions, is related to deficiencies in the isolation of the controlled system area. Exploiting this vulnerability could allow a malicious actor to cause service...

Security update for pcp

This update for pcp fixes the following issues: CVE-2026-16524: command injection in linuxsockets PMDA via network.persocket.filter bsc1272922. CVE-2026-16526: pmdaroot privilege escalation via FDCLOEXEC fd inheritance and missing peer credentials bsc1272923. CVE-2026-16527: missing authenticatio...

Security update for pcp

This update for pcp fixes the following issues: CVE-2026-16524: command injection in linuxsockets PMDA via network.persocket.filter bsc1272922. CVE-2026-16526: pmdaroot privilege escalation via FDCLOEXEC fd inheritance and missing peer credentials bsc1272923. CVE-2026-16527: missing authenticatio...

The vulnerability of the DOMPurify.sanitize() function in the JavaScript library for safe cleaning and protection of HTML code. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of the DOMPurify.sanitize function in the JavaScript library for safe cleaning and protection of HTML code is related to the lack of protective measures for website structure. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-17927

Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...

CVE-2026-17919

Insufficient policy enforcement in Enterprise in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via physical access to the device. Chromium security severity: Low...

EUVD-2026-50774

Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50770

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: Medium...

EUVD-2026-50762

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66058

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in Extensions allows an attacker to inject arbitrary scripts or HTML Universal Cross-Site Scripting or UXSS via a crafted Chrome Extension, provided the...

PT-2026-66012

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the FileSystem component allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Recommendations Update Google Chro...

PT-2026-66173

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in WebMCP allows a remote attacker to bypass the same origin policy, which is a security mechanism that restricts how a document or script loaded from on...

PT-2026-66148

Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Privilege Escalation

FileGator is vulnerable to Privilege Escalation. The vulnerability is due to insufficient validation of user-supplied file permission values, where arbitrary Unix permission modes are passed directly to chmod, allowing authenticated users with chmod permission to escalate privileges to root...