inside-pegasus

داخل بيجاسوس: وثائق رئيسية من WhatsApp ضد NSO Group مجموعة منتقاة من الوثائق الداخلية لمجموعة NSO Group، ومواد المنتجات، والشهادات المُقسَم عليها التي أُدرجت في السجل العام في قضية WhatsApp Inc. and Meta Platforms, Inc. v. NSO Group Technologies Limited and Q Cyber Technologies Limited ، رقم القض...

androidqf

androidqf androidqf Android Quick Forensics is a portable tool to simplify the acquisition of relevant forensic data from Android devices. androidqf is intended to provide a simple and portable cross-platform utility to quickly acquire data from Android devices. It is similar in functionality to...

mvt

Mobile Verification Toolkit !IMPORTANT قمنا مؤخرًا بدمج فرع "v3". وقد أدى ذلك إلى تغييرات جذرية. إذا كنت تعتمد على مخرجات mvt في نصوص برمجية أخرى، فقد تتعطل. لمزيد من التفاصيل: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT هو مجموعة من الأدوات المساعدة لتبسيط وأتمت...

investigations

تحقيقات يحتوي هذا المستودع على مؤشرات الاختراق المستخرجة من بعض التحقيقات التقنية لمنظمة العفو الدولية في التهديدات الموجهة ضد المدافعين عن حقوق الإنسان. تتم مشاركة هذه المؤشرات بموجب ترخيص CC-BY...

commend_sqli

CVE-2023-XXXXX Description suggérée L'interface web de G8-VOIPREC Commend VoIPRec est vulnérable à des injections SQL aveugles basées sur le temps dans le paramètre « Code » de la page de connexion. Informations supplémentaires PoC: POST /cgi-bin/SecComRecX.cgi HTTP/1.1 Host: 192.168.88.10...

CVE-2026-100794

Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

Local Presence, Global Reach: How Virtual Numbers Support International Customer Communication

Expanding into another country creates a practical communication problem for businesses. Customers may be thousands of miles away,…...

CVE-2026-92598

A flaw was found in Nodemailer. This vulnerability arises from the failure to properly apply UTS-46 normalization when encoding international domain names. A remote attacker can exploit this by crafting recipient addresses with invisible characters or compatibility mappings. This allows them to...

Astra Linux – Vulnerability in Chromium

The double-free operation in the ICU of Google Chrome before version 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

mvt v2026.9.7

Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...

CVE-2026-61139: Improper Access Control

Vulnerability in the Oracle Public Sector Financials International product of Oracle E-Business Suite component: Authorization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2026-19425 Win Men Intermational｜Travel Agency Management System - SQL Injection

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

EUVD-2026-54835

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root...

Security Bulletin: IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. (CVE-2026-18097)

Summary IBM® Db2® could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. Vulnerability Details CVEID:CVE-2026-18097 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain...

EUVD-2026-53922

OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values SV frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect...

GHSA-8MXV-9XHP-86H4 rclone: S3 Redirect Sanitization Omits IBM IAM Bearer Tokens and SSE-C Keys

Summary The S3 redirect callback strips X-Amz-Security-Token when a redirect changes scheme or host, but it does not strip IBM IAM bearer authorization or customer-provided encryption keys. Two independently validated paths remain: - a same-host HTTPS-to-HTTP redirect preserves Authorization:...

EUVD-2026-53576

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning...

Apple battles it out again with the UK over encrypted iCloud access

The UK Home Office has once again demanded Apple allows it access to encrypted iCloud data. The Guardian reports that the Home Office issued a Technical Capability Notice to Apple, this time targeting only British users. A Technical Capability Notice is a formal government order that compels tech...

WordPress International Sms For Contact Form 7 Integration plugin <= 1.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Milad karimi in WordPress Plugin International Sms For Contact Form 7 Integration versions = 1.2...

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU

Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. The CVEs listed in this document might affect some configurations of IBM WebSphere Application Server traditiona...