1163 matches found
electronegativity
Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...
cve-disclosures
CVE Disclosures Coordinated vulnerability disclosures and CVE references published by Anindya Sankar Roy GitHub: @fr3akhacks. Each entry below links to a public advisory containing the affected product, affected/fixed versions, CVE ID, prose description, vulnerability type, root cause, and impact...
CVE-2026-109694
The Fluent CRM plugin for WordPress (WP ManageNinja LLC) is vulnerable to a Privilege Escalation flaw in versions 3.2.5 and below . The root cause is identified as an Incorrect Privilege Assignment (CWE-266). This vulnerability allows an attacker to escalate privileges within the application. Spe...
Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC
Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC Zurmo-Stable-3.1.1 Cross Site Scripting XSS Assigned CVE Number: CVE-2017-7188...
Blackcat-cms-v1.2-xss-POC-by-Provensec-llc
Blackcat-cms-v1.2-xss-POC-by-Provensec-llc BlackCat-CMS-Bundle-v1.2 Cross Site ScriptingXSS Assigned CVE Number: CVE-2017-9609...
U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud
The U.S. Department of Justice DoJ on Tuesday charged 14 people and seized about 187 computers and KVM devices as part of its ongoing efforts to disrupt North Korea's fraudulent remote IT worker ITW scheme. The indictment charges a mix of U.S. citizens and Chinese nationals for their roles in an ...
Fourteen_Endpoints
The Middlemen Shell Companies Inside Apple's Privacy Relay An anonymous Delaware LLC publishes a Bible prayer app, a daily journal, and a caller ID tool on the App Store. That entity operates encrypted relay infrastructure inside Apple's privacy network. That relay terminates at Taiwan Mobile Co....
fake-useragent
fake-useragent Up-to-date simple useragent faker with real world database. Features Data is pre-downloaded & post-processed from Intoli LLC and the data is part of the package itself The data consists of a wide range of browser agents and various browsers Retrieves user-agent strings both of type...
CVE-2026-62127 WordPress WP plugin Info Card plugin <= 6.3.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MediaRon LLC WP Plugin Info Card wp-plugin-info-card allows Stored XSS.This issue affects WP Plugin Info Card: from n/a through 6.3.5...
DEBIAN-CVE-2026-98287
In the Linux kernel, the following vulnerability has been resolved: pppoatm: ensure a writable skb header and linear data In pppoatmsend, LLC encapsulation checks whether there is sufficient headroom for the 4-byte LLC header, but does not ensure that the skb header is writable. Normal transmit...
UBUNTU-CVE-2026-98287
In the Linux kernel, the following vulnerability has been resolved: pppoatm: ensure a writable skb header and linear data In pppoatmsend, LLC encapsulation checks whether there is sufficient headroom for the 4-byte LLC header, but does not ensure that the skb header is writable. Normal transmit...
CVE-2026-98287 pppoatm: ensure a writable skb header and linear data
In the Linux kernel, the following vulnerability has been resolved: pppoatm: ensure a writable skb header and linear data In pppoatmsend, LLC encapsulation checks whether there is sufficient headroom for the 4-byte LLC header, but does not ensure that the skb header is writable. Normal transmit...
EUVD-2026-93215
In the Linux kernel, the following vulnerability has been resolved: pppoatm: ensure a writable skb header and linear data In pppoatmsend, LLC encapsulation checks whether there is sufficient headroom for the 4-byte LLC header, but does not ensure that the skb header is writable. Normal transmit...
PT-2026-106616
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the pppoatm send function where LLC encapsulation verifies the headroom for the 4-byte LLC header but fails to ensure the skb header is writable. This occurs specifically...
CVE-2026-98287: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: pppoatm: ensure a writable skb header and linear data In pppoatmsend, LLC encapsulation checks whether there is sufficient headroom for the 4-byte LLC header, but does not ensure that the skb header is writable. Normal transmit...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerabilities have been resolved: llc: Support for ETHPTR8022 has been removed. The syzbot reported a bug related to uninit-values. 0 llc previously supported ETHP8022 0x0004 and also ETHPTR8022 0x0011. The syzbot exploited this to trigger the bug. The code us...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: llc: Makes llcuisendmsg more robust against changes related to bonding. syzbot was able to exploit llcuisendmsg, allocating a skb without sufficient headroom, and then attempting to append 14 bytes of Ethernet header information...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerabilities have been resolved: llc: A test for maclen should be performed before reading the MAC header. The LLC layer reads the MAC header using ethhdr, without verifying that the skb contains an Ethernet header. Syzbot was able to access the llcrcv functi...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerabilities have been resolved: llc: Calling sockorphan at the release time syzbot reported an interesting trace 1 caused by a stale pointer to sk-skwq in a closed llc socket. In the commit ff7b11aa481f "net: socket: setting sock-sk to NULL after calling...