phantom-grid

⬡ Phantom Grid Free, open-source Burp Collaborator alternative for penetration testing labs Out-of-Band OOB interaction capture · HTTP/HTTPS · DNS · SQLite · Exfil reassembly What is this? Phantom Grid is a self-hosted OOB Out-of-Band interaction capture tool — a free alternative to Burp...

phantom-grid

Phantom Grid - Enterprise Zero Trust Network Access ZTNA Phantom Grid is a next-generation Zero Trust Network Access ZTNA and active defense system. It operates at both the Kernel Level eBPF and Application Level mTLS to transform Linux servers into a robust, deceptive attack surface. Built for...

RedGridLink

Red Grid Link Red Grid Link is retired Retired September 27, 2026. v1.7.0 is the final release. Link has been removed from sale on the App Store and unpublished on Google Play. New subscriptions and lifetime purchases are no longer offered. Existing installations: Retirement does not erase local...

Grid-Mobile

Grid - Encrypted Location Sharing Be Hard to Track. mygrid.app Grid is a secure, end-to-end encrypted E2EE location sharing application integrated with the Matrix Protocol. Built using Flutter, Grid provides a privacy-focused solution for sharing your location with trusted contacts. Features...

The Grid <= 2.8.1 - Unauthenticated Code Injection

Theme-one The Grid = 2.8.1 contains a command injection caused by improper control of code generation, letting attackers execute arbitrary commands remotely, exploit requires crafted input. id: CVE-2026-94169 info: name: The Grid = 2.8.1 - Unauthenticated Code Injection author: 0xAkoko severity:...

Essential Grid <= 3.1.0 - Cross-Site Scripting

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability in ThemePunch OHG Essential Grid plugin = 3.1.0 versions. id: CVE-2023-47684 info: name: Essential Grid = 3.1.0 - Cross-Site Scripting author: 0xpugal severity: medium description: | Unauthenticated Reflected Cross-Site Scripting XS...

Post Grid <= 2.2.50 - Information Exposure via REST API

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid Combo – 36+ Gutenberg Blocks.This issue affects Post Grid Combo – 36+ Gutenberg Blocks: from n/a through 2.2.50. id: CVE-2023-40211 info: name: Post Grid = 2.2.50 - Information Exposure via REST API...

Selenium Grid < 4.0.0-alpha-7 - Remote Code Execution

Selenium Server Grid before 4.0.0-alpha-7 permits unauthenticated session creation and unsafe capability injection via /wd/hub/session due to missing Origin validation and weak content-type enforcement. id: CVE-2022-28108 info: name: Selenium Grid 4.0.0-alpha-7 - Remote Code Execution author: t0x...

WonderLanternZ7

WonderLantern Z7 lab EXPERIMENTAL CAMERA FIRMWARE RESEARCH. A failed or incorrect flash can permanently brick a camera, destroy data, or require paid repair/replacement. Use entirely at your own risk. To the fullest extent permitted by law, the authors/contributors accept no liability. No warrant...

CVE-2026-123975

The Grid Community Toolkit (versions before 6.2.20261111) and globus-gss-assist (before 12.9) are vulnerable to a heap out-of-bounds write in the globus_gss_assist_token_get_fd() function. This flaw is triggered by processing SSLv2 record lengths below 3. Remote unauthenticated clients can exploi...

CVE-2026-123975 Grid Community Toolkit globus-gss-assist before 12.9 Pre-Authentication Heap Out-of-Bounds Write

Grid Community Toolkit before 6.2.20261111 globus-gss-assist before 12.9 contains a heap out-of-bounds write in globusgssassisttokengetfd triggered by SSLv2 record lengths below 3. Remote unauthenticated clients can send a crafted GSI handshake record to services like globus-gatekeeper and myprox...

EUVD-2026-125403

Grid Community Toolkit before 6.2.20261111 globus-gss-assist before 12.9 contains a heap out-of-bounds write in globusgssassisttokengetfd triggered by SSLv2 record lengths below 3. Remote unauthenticated clients can send a crafted GSI handshake record to services like globus-gatekeeper and myprox...

EUVD-2026-125356

In Telerik UI for Blazor, versions v12.0.0 through 15.2.0, an improper input validation vulnerability exists, where the Grid, TreeList and Gantt's AI command filters on any model property, bypassing the declared column allowlist...

CVE-2026-119102 AI Command Filters On Any Property Bypassing Column Allowlist

In Telerik UI for Blazor, versions v12.0.0 through 15.2.0, an improper input validation vulnerability exists, where the Grid, TreeList and Gantt's AI command filters on any model property, bypassing the declared column allowlist...

CVE-2026-119102

In Telerik UI for Blazor (versions v12.0.0 through 15.2.0 ), an improper input validation vulnerability allows the Grid , TreeList , and Gantt components to process AI command filters on any model property. This behavior bypasses the declared column allowlist , potentially exposing data outside t...

CVE-2026-128334 listmonk 6.2.0 before 7.0.0-beta.2 Missing Authentication via Azure Bounce Webhook

listmonk 6.2.0 before 7.0.0-beta.2 contains a missing authentication vulnerability that allows unauthenticated attackers to submit Azure Event Grid bounce webhooks when no shared secret is configured. Attackers can POST forged EmailDeliveryReportReceived events with Bounced status to...

EUVD-2026-125043

listmonk 6.2.0 before 7.0.0-beta.2 contains a missing authentication vulnerability that allows unauthenticated attackers to submit Azure Event Grid bounce webhooks when no shared secret is configured. Attackers can POST forged EmailDeliveryReportReceived events with Bounced status to...

PT-2026-146900

Grid Community Toolkit before 6.2.20261111 globus-gss-assist before 12.9 contains a heap out-of-bounds write in globus gss assist token get fd triggered by SSLv2 record lengths below 3. Remote unauthenticated clients can send a crafted GSI handshake record to services like globus-gatekeeper and...

PT-2026-146869

In Telerik UI for Blazor, versions v12.0.0 through 15.2.0, an improper input validation vulnerability exists, where the Grid, TreeList and Gantt's AI command filters on any model property, bypassing the declared column allowlist...

CVE-2026-124692

In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, the Grid and TreeList column-reorder drag clue reparses header text as HTML. An attacker who can influence a column field or title used by an affected application can cause JavaScript to execute when a use...