209018 matches found
fuzzdb
FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses...
fuzzdb
FuzzDB è stato creato per aumentare la probabilità di trovare vulnerabilità di sicurezza nelle applicazioni tramite test dinamici di sicurezza delle applicazioni. È il primo e più completo dizionario aperto di pattern di fault injection, posizioni prevedibili delle risorse e regex per il matching...
Osintgram
Osintgram 🔎📸 Osintgram è uno strumento OSINT su Instagram per raccogliere, analizzare ed eseguire ricognizione. Disclaimer: SOLO A SCOPO EDUCATIVO! I collaboratori non si assumono alcuna responsabilità per l'uso di questo strumento. $$\colorredAvviso:$$ Si consiglia di non utilizzare il proprio...
Insular
Insular Isola la tua app del grande fratello. Questo è un fork basato sull'eccellente Island. Un ringraziamento speciale a Shelter che mi ha ispirato a creare il fork completamente FLOSS di Island. Documentazione Per informazioni su come abilitare Insular tramite adb, accesso ai file tra profili,...
GHSA-JRW6-7X4Q-W25J senaite.core Vulnerable to Eval Injection and Missing Authorization
Summary An unauthenticated remote code execution vulnerability in the SENAITE JSON API allows any network-reachable attacker to execute arbitrary Python on the Zope worker process via a two-request anonymous chain. The /@@API/update route is reachable to anonymous callers and runs eval on...
senaite.core Vulnerable to Eval Injection and Missing Authorization
Summary An unauthenticated remote code execution vulnerability in the SENAITE JSON API allows any network-reachable attacker to execute arbitrary Python on the Zope worker process via a two-request anonymous chain. The /@@API/update route is reachable to anonymous callers and runs eval on...
GHSA-W93Q-CQ9W-58P7 SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed
Summary A DOM-based Cross-Site Scripting XSS vulnerability exists in the SunEditor Embed plugin. Crafted iframe embed HTML followed by an external element bypasses the plugin’s sanitization logic. The plugin recreates and appends the attacker-controlled script element to the live DOM, causing...
SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed
Summary A DOM-based Cross-Site Scripting XSS vulnerability exists in the SunEditor Embed plugin. Crafted iframe embed HTML followed by an external element bypasses the plugin’s sanitization logic. The plugin recreates and appends the attacker-controlled script element to the live DOM, causing...
Cloudreve WebDAV (`/dav`) has Path Traversal / Broken Access Control — scoped DAV credential escapes its configured account root
Summary A Cloudreve WebDAV account stores a uri that defines the account's root folder. The WebDAV request handler stripPrefix in pkg/webdav/webdav.go trims the /dav prefix from the request path and joins the remainder to that root with fs.URI.JoinRaw, but never checks that the joined URI stays...
GHSA-W5FV-7X5Q-G8QP Cloudreve WebDAV (`/dav`) has Path Traversal / Broken Access Control — scoped DAV credential escapes its configured account root
Summary A Cloudreve WebDAV account stores a uri that defines the account's root folder. The WebDAV request handler stripPrefix in pkg/webdav/webdav.go trims the /dav prefix from the request path and joins the remainder to that root with fs.URI.JoinRaw, but never checks that the joined URI stays...
DEBIAN-CVE-2026-80536
In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlogrecoverdoregbuffer replays each dirty region described by a buffer log item's bitmap into the buffer read for that item: memcpyxfsbufoffsetbp, uintbit ribufi.iovbase, nbits...
CVE-2026-80536
In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlogrecoverdoregbuffer replays each dirty region described by a buffer log item's bitmap into the buffer read for that item: memcpyxfsbufoffsetbp, uintbit ribufi.iovbase, nbits...
CVE-2026-74754
In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...
DEBIAN-CVE-2026-74754
In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...
DEBIAN-CVE-2026-74734
In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...
CVE-2026-74734
In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...
zen-ai
Zen Open-source offensive security agents. Autonomous pen...
infisical v0.162.24
The open-source secret management platform : Sync secrets/configs across your team/infrastructure and prevent secret leaks. Slack | Infisical Cloud | Self-Hosting | Docs | Website | Twitter | Hiring Remote/SF Introduction Infisical is the open source security infrastructure platform that teams us...
access_updated
Singular Access Fork aggiornato dibtbd/access con ricerca dinamica di pattern basata su Zydis per la compatibilità con Windows 10/11 Un wrapper di syscall in modalità kernel che consente operazioni privilegiate sui processi senza richiedere handle. Utilizza l'hooking del puntatore a...
CVE-2026-80536
CVE-2026-80536 is an out-of-bounds write in the Linux kernel's XFS filesystem , specifically in xlog_recover_do_reg_buffer() during mount-time log recovery. The destination offset and buffer size are both attacker-controlled but only bounded by an ASSERT() that compiles away on production kernels...