stego-toolkit

Steganography Toolkit This project is a Docker image useful for solving Steganography challenges as those you can find at CTF platforms like hackthebox.eu. The image comes pre-installed with many popular tools see list below and several screening scripts you can use check simple things for...

Digital Inspector Unauthorized Access

The vulnerability of the “Digital Inspector” software architecture is related to the use of pre-installed account data. Exploiting this vulnerability can allow an unauthorized actor to gain unauthorized access to protected information...

capture-the-flag

Capture The Flag! Remaster Linux Live CD images for the purpose of creating ready to use security wargames with pre-installed vulnerabilities to exploit. Requirements You will need the following in order to build the Live CD using the scripts in this project: Linux, with root access using sudo gi...

umap

umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...

CVE-2021-43798

CVE-2021-43798 CVE-2021-43798 is a vulnerability marked as High priority CVSS 7.5 leading to arbitrary file read via installed plugins in Grafana application. This vulnerability works on versions 8.0.0-beta1, 8.0.0 to 8.3.0. Tested only on 8.2.0. Exploit works by creating a list of vulnerable...

CVE-2026-112707

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to identify what other apps a user has installed...

CVE-2026-112707

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to identify what other apps a user has installed...

CVE-2026-112707

A privacy issue in iOS and iPadOS allows an application to identify other apps installed on a user's device. The vulnerability is addressed by moving sensitive data to a protected location . This issue is fixed in versions iOS 26.7.2 , iPadOS 26.7.2 , iOS 27.2 , and iPadOS 27.2 . No exploit infor...

EUVD-2026-110335

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to identify what other apps a user has installed...

ZimaOS <= v1.2.4 - Sensitive Information Disclosure

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the API endpoints in ZimaOS, such as http:///v1/users/image?path=/var/lib/casaos/1/apporder.json and http:///v1/users/image?path=/var/lib/casaos/1/system.json,...

PT-2026-125344

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to identify what other apps a user has installed...

EUVD-2026-106248

Vulnerability in the Installed Base product of Oracle E-Business Suite component: Data Provider UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Installed Base. Successful attack...

EUVD-2026-106246

Vulnerability in the Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Installed Base. Successful...

EUVD-2026-106247

Vulnerability in the Installed Base product of Oracle E-Business Suite component: HTML UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Installed Base. Successful attacks requir...

CVE-2026-101851

Vulnerability in the Installed Base product of Oracle E-Business Suite component: Data Provider UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Installed Base. Successful attack...

CVE-2026-101849

Vulnerability in the Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Installed Base. Successful...

CVE-2026-101850

Vulnerability in the Installed Base product of Oracle E-Business Suite component: HTML UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Installed Base. Successful attacks requir...

CVE-2026-101849

A vulnerability exists in the Installed Base product of Oracle E-Business Suite (specifically the Create Item Instance component) in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the product, provided there is human i...

CVE-2026-101850

A vulnerability exists in the Installed Base product of Oracle E-Business Suite (component: HTML UI ) affecting supported versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Installed Base, although successful attacks req...

CVE-2026-101851

A vulnerability exists in the Installed Base product of Oracle E-Business Suite , specifically within the Data Provider UI component. Affected versions are 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful ex...