androidqf

androidqf NOTE: this project is currently not maintained. An independent fork can be found under theMVT Project. androidqf Android Quick Forensics is a portable tool to simplify the acquisition of relevant forensic data from Android devices. Download androidqf Build Executable binaries for Linux,...

investigations

Investigations This repository contains indicators of compromise extracted from some of Amnesty International's technical investigations in targeted threats against human rights defenders. These indicators are shared under the license CC-BY...

inside-pegasus

Inside Pegasus: key documents from WhatsApp v. NSO Group A curated set of NSO Group internal documents, product materials and sworn testimony that entered the public record in WhatsApp Inc. and Meta Platforms, Inc. v. NSO Group Technologies Limited and Q Cyber Technologies Limited , Case No...

commend_sqli

CVE-2023-XXXXX Suggested description G8-VOIPREC Commend VoIPRec web interface is vulnerable to time-base blind SQL injections in "Code" parameter on login page. Additional Information PoC: POST /cgi-bin/SecComRecX.cgi HTTP/1.1 Host: 192.168.88.10 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0...

I had plans for that second

Welcome to this week's edition of the Threat Source newsletter. Here for the latest on the PHP vulnerabilities? Head on down to 'The One Big Thing'. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset. But i...

Astra Linux – Vulnerability in Chromium

The double-free operation in the ICU of Google Chrome before version 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

mvt

Mobile Verification Toolkit !IMPORTANT Abbiamo recentemente unito il ramo "v3". Questo ha introdotto modifiche sostanziali. Se facevi affidamento sull'output di mvt in altri script, questi potrebbero essersi rotti. Maggiori dettagli: https://github.com/mvt-project/mvt/issues/757 Mobile Verificati...

International Datacasting SFX2100 SuperFlex SatelliteReceiver SNMP Remote Code Execution

International Datacasting SFX2100 SuperFlex SatelliteReceiver contains an SNMP remote code execution vulnerability through its default writable private community string. The proof of concept uses NET-SNMP-EXTEND-MIB directives to execute a supplied command. https://packetstorm.news/download/23495...

CVE-2026-100794

Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

Local Presence, Global Reach: How Virtual Numbers Support International Customer Communication

Expanding into another country creates a practical communication problem for businesses. Customers may be thousands of miles away,…...

CVE-2026-92598

A flaw was found in Nodemailer. This vulnerability arises from the failure to properly apply UTS-46 normalization when encoding international domain names. A remote attacker can exploit this by crafting recipient addresses with invisible characters or compatibility mappings. This allows them to...

CVE-2026-92598

Nodemailer before 9.1.0 fails to apply UTS-46 normalization when encoding international domain names, causing the domain resolver to compute a different Punycode A-label than standards-compliant parsers. Attackers can craft recipient addresses with invisible characters or compatibility mappings...

Malicious code in international-silver-turkey (npm)

Source: amazon-inspector fd92b399824949e720cb1655d6867d711999b0596f4ec133b7d194568b7c5d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in international-amaranth-booby (npm)

Source: amazon-inspector 64acf5ad6a0f907676e6e78184a5888e898f62a99afc79b6a09336e7615b8aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in international-sapphire-dove (npm)

Source: amazon-inspector 8d5c09da5a358f987f42948a50d6b3477de4c861e8590490b41f8ee3c0f0c012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in international-copper-lion (npm)

Source: amazon-inspector 916ae4b0421509f4ca33a2a4902c5e06743b2fc8024e87e93e03c921007496fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

mvt v2026.9.7

Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...

CVE-2026-61139: Improper Access Control

Vulnerability in the Oracle Public Sector Financials International product of Oracle E-Business Suite component: Authorization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2026-19425 Win Men Intermational｜Travel Agency Management System - SQL Injection

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

EUVD-2026-54835

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root...