mihari

mihari A query aggregator for OSINT based threat hunting. Mihari can aggregate multiple searches across multiple services in a single rule & persist findings in a database. Mihari supports the following services by default. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise...

private-landing

Private Landing 인증을 올바르게 구축하며 배우세요. 라이브 데모 · 위협 모델 · 인증 흐름 · ADR 데모 참고: 로그인 엔드포인트는 적응형 PoWProof of Work 챌린지로 보호됩니다. 반복된 실패는 점점 더 높은 작업 증명 난이도를 요구합니다. 캐시 기반 속도 제한이 구현 및 테스트되었지만 현재 라이브 데모에서는 활성화되어 있지 않습니다. 활성화하려면 app.ts에서 createCacheClient를 활성화하세요. Cloudflare Workers용으로 처음부터 구축한 인증 참조 구현입니다. PBKDF2...

uefi_bootkit_softlanding

SOFTLANDING UEFI BOOTKIT — ARES-2026-0001 The first public documentation of the SoftLanding UEFI DXE bootkit — a multi-agent, cross-platform firmware implant that persists in SPI flash Ring -2, deploys kernel and userland agents, and survives OS reinstallation and BIOS updates. ⚡ QUICK CHECK — AR...

Malicious code in @client-web-next/ab-landing-form (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16493 Malicious code in @client-web-next/ab-landing-form (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-85574

The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the configuration its front-end proxy relies on, allowing any authenticated user, such as a subscriber, to point that proxy at a host they control and have arbitrary content served from...

CVE-2026-85574 Unbounce Landing Pages 1.1.1 - 1.1.4 - Subscriber+ Reverse-Proxy Target Hijack via set_unbounce_domains

The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the configuration its front-end proxy relies on, allowing any authenticated user, such as a subscriber, to point that proxy at a host they control and have arbitrary content served from...

EUVD-2026-83503

The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the configuration its front-end proxy relies on, allowing any authenticated user, such as a subscriber, to point that proxy at a host they control and have arbitrary content served from...

CVE-2026-85574 Unbounce Landing Pages 1.1.1 - 1.1.4 - Subscriber+ Reverse-Proxy Target Hijack via set_unbounce_domains

The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the configuration its front-end proxy relies on, allowing any authenticated user, such as a subscriber, to point that proxy at a host they control and have arbitrary content served from...

CVE-2026-85574

The Unbounce Landing Pages WordPress plugin, in versions before 1.1.5 , is vulnerable to a Reverse-Proxy Target Hijack via the set_unbounce_domains function. The flaw exists because the plugin fails to perform proper authorisation checks when updating the configuration for its front-end proxy. Th...

PT-2026-95756

Name of the Vulnerable Software and Affected Versions Unbounce Landing Pages WordPress plugin versions prior to 1.1.5 Description An authorization bypass exists when updating the configuration used by the front-end proxy. This allows any authenticated user, including those with subscriber-level...

CVE-2026-85574: Missing Authorization

The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the configuration its front-end proxy relies on, allowing any authenticated user, such as a subscriber, to point that proxy at a host they control and have arbitrary content served from...

CVE-2026-85198: Improper Neutralization of Special Elements used in an SQL Command

The MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO plugin for WordPress is vulnerable to generic SQL Injection via URL Path in all versions up to, and including, 4.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2026-81781

Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unbounce Landing Pages: from n/a through 1.1.4...

CVE-2026-81781 WordPress Unbounce Landing Pages plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unbounce Landing Pages: from n/a through 1.1.4...

CVE-2026-81781

Unbounce Landing Pages WordPress plugin (versions through 1.1.4 ) is affected by a Missing Authorization (Broken Access Control) vulnerability, allowing an attacker with low privileges to exploit incorrectly configured access control security levels. The CVSS 3.1 score is 7.1 (HIGH) , with a netw...

EUVD-2026-72650

Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unbounce Landing Pages: from n/a through 1.1.4...

CVE-2026-81781 WordPress Unbounce Landing Pages plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unbounce Landing Pages: from n/a through 1.1.4...

PT-2026-86997

Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unbounce Landing Pages: from n/a through 1.1.4...

CVE-2026-81781: Missing Authorization

Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unbounce Landing Pages: from n/a through 1.1.4...