ship-safe

The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...

sploitego

Sploitego - Maltego's Local Partner in Crime 1.0 - Introduction Sploitego is a local pen-test transform package that uses the Canari Framework for local transform execution in Maltego. The framework was first introduced at DEFCON 20 and has since picked up steam. 2.0 - Installing Sploitego 2.1 -...

linuxprivchecker

Linuxprivchecker.py A Linux Privilege Escalation Check Script Orginal Author: Mike Czumak Tv3rn1x -- @SecuritySift Current Maintainer: Michael Contino @Sleventyeleven This script is intended to be executed locally on a Linux box to enumerate basic system info and search for common privilege...

CVE-2026-111993

A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/AdminDao.java. This manipulation of the argument Password causes cleartext storage of sensitive information. The attack is...

CVE-2026-111993 Soarkey StudentManagement AdminDao.java UserDao.login cleartext storage

A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/AdminDao.java. This manipulation of the argument Password causes cleartext storage of sensitive information. The attack is...

CVE-2026-111993

A flaw in Soarkey StudentManagement (up to commit e08f7f1d5015af407aa4cca0ada3dea189b4937e ) allows for the cleartext storage of sensitive information . The vulnerability is located in the UserDao.login function within the code/src/service/AdminDao.java file, where improper manipulation of the Pa...

EUVD-2026-103979

A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/AdminDao.java. This manipulation of the argument Password causes cleartext storage of sensitive information. The attack is...

CVE-2026-111993 Soarkey StudentManagement AdminDao.java UserDao.login cleartext storage

A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/AdminDao.java. This manipulation of the argument Password causes cleartext storage of sensitive information. The attack is...

CVE-2026-108943

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted ...

CVE-2026-108943 ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted ...

CVE-2026-108943 ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted ...

CVE-2026-108943

A code injection vulnerability exists in ModelTC LightX2V (versions up to 0.5.0 ) within the Tokenizer component. The flaw is located in the AutoTokenizer.from_pretrained function of the file lightx2v/models/runners/cosmos3/cosmos3_runner.py . By manipulating the auto_map argument, an attacker ca...

EUVD-2026-98182

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted ...

CVE-2026-108943: Improper Control of Generation of Code

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted ...

Amazon Linux 2 : qt5-qt3d (ALAS-2026-3994)

The version of qt5-qt3d installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3994 advisory. A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerabili...

Unprivileged Local Execution of Kernel-Level Diagnostic Tests within Brocade Fabric OS

: An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...

CVE-2026-105293

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the Discord origin, such as through XSS, can abuse themes.folder, themes.uninstall...

EUVD-2026-92157

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the Discord origin, such as through XSS, can abuse themes.folder, themes.uninstall...

Rocky Linux 9.6 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1775726631)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775726631 advisory. - A potential heap based buffer overflow was found in bfdelfslurpversiontables in bfd/elf.c. This may lead to loss of availability...

CentOS Linux 8.4 [TuxCare] Security Update: binutils / binutils-devel (CENTOS8.4:CLSA-2026:1777451571)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777451571 advisory. - A flaw has been found in GNU Binutils 2.45. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the component...