OpenCLAW-P2P

P2PCLAW - Decentralized Autonomous Research Collective P2PCLAW is a decentralized research network where AI agents and human researchers publish, validate, preserve, and evaluate scientific work through open infrastructure. Project lead and maintainer: Francisco Angulo de Lafuente ORCID...

CVE-2026-93370

The Paystack WooCommerce Payment Gateway plugin for WordPress (versions up to and including 5.8.5 ) is vulnerable to Sensitive Information Exposure via the key parameter. Unauthenticated attackers can extract customer PII—such as billing names, email addresses, phone numbers, and shipping address...

scopeblind-gateway

⚠️ This repository has moved. Active development continues at ScopeBlind/scopeblind-gateway. This personal fork may be behind the canonical repository. Please use the org repo for issues, pull requests, and the latest code. protect-mcp Security gateway for MCP servers. Shadow-mode logs by default,...

CVE-2026-121866

The iLeads SMS Gateway by Exsile WordPress plugin before 2.0.0 does not check capabilities or nonces in several AJAX actions that update a site option chosen by the request, allowing any authenticated user, such as a subscriber, to change arbitrary WordPress options and escalate to administrator,...

IPRotate_Burp_Extension

IPRotateBurpExtension Extension for Burp Suite which uses AWS API Gateway to change your IP on every request. More info: Bypassing IP Based Blocking Using AWS - Rhino Security Labs Note/Warning This method of using AWS API Gateways to obfuscate source IP is now considered prohibited according to...

CVE-2026-121866

The iLeads SMS Gateway by Exsile WordPress plugin (versions before 2.0.0 ) is vulnerable to privilege escalation. The flaw exists because several AJAX actions fail to validate capabilities or nonces when updating site options requested by the user. This allows any authenticated user, such as a su...

EUVD-2026-118949

The iLeads SMS Gateway by Exsile WordPress plugin before 2.0.0 does not check capabilities or nonces in several AJAX actions that update a site option chosen by the request, allowing any authenticated user, such as a subscriber, to change arbitrary WordPress options and escalate to administrator,...

knocker

Knocker is a self-hosted service that provides an HTTP based "knock-knock" single-packet authorization SPA gateway for your Homelab with web, cli + gnome and android clients. it can be used as authentication for your reverse proxy like Caddy, or even on the firewall level using the FirewallD...

CVE-2026-17313

IBM API Connect versions v12.1.0.0 through v12.1.1.2 are affected by CVE-2026-17313 , which allows a remote attacker to obtain sensitive information and take control of gateway configurations. The root cause is an authentication bypass via an alternate path (CWE-288 ). The vulnerability has a CRI...

EUVD-2026-118704

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and take control of gateway configuration due to authentication bypass via an alternate path...

webscan

webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...

requests-ip-rotator

Proudly sponsored by Swiftproxy High-performance residential proxies with an 80M+ IP pool across 195+ countries — improve request success rates and reduce IP blocks during large-scale data collection and browser automation. Perfect for use with requests-ip-rotator, Playwright, Selenium, and other...

janusec

Janusec Application Gateway / JANUSEC应用网关 English Readme 提供快速、安全的应用交付 介绍PPT： https://www.janusec.com/download/Janusec-Application-Gateway-CN.pdf 主要功能 JANUSEC应用网关的主要功能有： 向Web应用提供统一的安全接入，包括HTTPS、身份认证、安全防御（WAF/CC）等。如Web应用是通过K8S Pods部署的，该网关也可以作为K8S Ingress Controller使用，向Pods提供跟普通Web应用同样的接入和安全特性。...

nipe

An engine to make Tor Network your default gateway. Summary The Tor project allows users to surf the Internet, chat and send instant messages anonymously through its own mechanism. It is used by a wide variety of people, companies and organizations, both for lawful activities and for other illici...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-93754

The payever – WooCommerce Gateway plugin for WordPress (versions

EUVD-2026-118549

The payever – WooCommerce Gateway plugin for WordPress is vulnerable to arbitrary file upload leading to remote code execution in various versions up to, and including, 4.8.0. Three WooCommerce-API callbacks payeversetsandboxapikeys, payevertogglesubscription, payeversynchronizationincoming are...