EUVD-2026-20461

CORS misconfiguration in CoolerControl/coolercontrold 4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websites...

CVE-2026-26051

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

Design/Logic Flaw

x26-Cogs is a repository of cogs made by Twentysix for the Red Discord bot. Among these cogs is the Defender cog, a tool for Discord server moderation. A vulnerability in the Defender cog prior to version 1.10.0 allows users with admin privileges to issue commands as other users who share the sam...

CVE-2020-15817

CVE-2020-15817 affects JetBrains YouTrack prior to version 2020.1.1331, where an external user could execute commands against arbitrary issues. The issue is high severity; remediation is to upgrade YouTrack to 2020.1.1331 or later (as noted in JetBrains’ Q2 2020 security bulletin). If you need mo...

Multiple PDQ Products Privilege Acquisition Vulnerabilities (CNVD-2017-23005)

PDQ Manufacturing LaserWash G5 and others are automotive automatic cleaning equipment from PDQ Manufacturing USA. A security vulnerability exists in several PDQ products due to the program failing to pass usernames and passwords in a secure manner. An attacker could exploit the vulnerability to...

Security Bypass Vulnerability in Multiple Samsung Phones

Samsung SM-G920F Galaxy S6 and others are smartphones released by the South Korean company Samsung Samsung. A security bypass vulnerability exists in several Samsung phones. An attacker can use the vulnerability to make a call, send a text message or issue a command...

Twittor - A fully featured backdoor that uses Twitter as a C&C server

A stealthy Python based backdoor that uses Twitter Direct Messages as a command and control server This project has been inspired by Gcat which does the same but using a Gmail account. Setup For this to work you need: A Twitter account Use a dedicated account! Do not use your personal one! Regist...