NextJS-CVE-2025-29927

Here's a clean and informative README.md for your GitHub repo that explains it's a vulnerable Next.js application for CVE-2025-29927 and includes a link to your setup YouTube video: 🔓 NextJS-CVE-2025-29927 - Vulnerable Demo Application This is a vulnerable Next.js application that demonstrates...

ActiveScanPlusPlus

ActiveScan++ ActiveScan++ extends Burp Suite's active and passive scanning capabilities. Designed to add minimal network overhead, it identifies application behaviour that may be of interest to advanced testers: Potential host header attacks password reset poisoning, cache poisoning, DNS rebindin...

CVE-2024-23113

CVE-2024-23113 The script is designed to detect CVE-2024-23113, which is a format string vulnerability in the FortiGate FGFM service FortiGate to FortiManager protocol running on TCP port 541. The vulnerability occurs because an attacker can control a format string, which could lead to Remote Cod...

-CVE-2024-45352

🚨 CVE-2024-45352 – Xiaomi Smarthome Remote Code Execution RCE 📌 Summary A critical vulnerability CVE-2024-45352 was discovered in the Xiaomi Smarthome application, allowing unauthenticated remote code execution RCE via improper input handling in the internal API parser. This vulnerability can be...

Alfred

WIP - Revamped Alfred 2.0 Alfred - A Modular Recon and Exploitation Framework EXPIREMTNAL PHASE Alfred is a Python-based framework designed to assist in various reconnaissance, exploitation, and post-exploitation tasks. It is highly modular, allowing users to easily add plugins to extend...

Drupal Diba carousel slider cross-site scripting vulnerability

Drupal Diba carousel slider versions prior to 0.0.0 and 3.0.2 contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

hwk-fr ACF Extended cross-site scripting vulnerability

The hwk-fr ACF Extended versions 0.9.2.7 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions prior to 6.2.12 and prior to 6.3.1 contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of input during web page generation, potentially enabling cross-site scripting attacks...

Drupal SAML SSO – Service Provider cross-site scripting vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to cross-site scripting attacks...

Drupal PhotoSwipe – Responsive JavaScript Modal Image Gallery Cross-site Scripting Vulnerability

Drupal PhotoSwipe – Versions prior to 5.0.9 contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

Drupal Webform cross-site scripting vulnerability

Drupal Webform versions 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1 contain a cross-site scripting vulnerability caused by improper input handling during web page generation, which may lead to cross-site scripting attacks...

xootix waitlist woocommerce cross-site scripting vulnerability

xootix waitlist woocommerce versions 2.9.1 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...

Drupal Artificial Intelligence cross-site scripting vulnerability

Drupal versions prior to 1.3.13 and versions 1.4.0 through 1.4.8 contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during page generation, potentially enabling stored cross-site scripting attacks...

CLSA-2026-1789373515 Fix of 124 CVEs

CVE-2025-68214 - timers: Fix NULL function pointer race in timershutdownsync CVE-2025-68214 CVE-2024-58093 - PCI/ASPM: Fix link state exit during switch upstream function removal CVE-2024-58093 CVE-2026-72463 - xfrm: Fix dev use-after-free in xfrm async resumption CVE-2026-72463 CVE-2026-64600 -...

Crocoblock JetElements for Elementor: Cross-site Script Vulnerability

Crocoblock JetElements for Elementor 2.9.2.4 and earlier versions have a cross-site scripting vulnerability. This vulnerability arises from improper input handling during web page generation, which may lead to storage-based cross-site scripting attacks...

UBUNTU-CVE-2026-89098

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an...

CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability...

EUVD-2026-101633

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability...

CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability...

CVE-2026-0319

A vulnerability exists in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software due to improper input handling . This flaw allows an authenticated user to establish a GlobalProtect session while masquerading as another user . While Cloud NGFW and Panorama are not affected, no known wor...