cats cats-14.0.0

CATS documentation is available at https://endava.github.io/cats/ REST API fuzzer and negative testing tool. Run thousands of self-healing API tests within minutes with no coding effort! Comprehensive : tests are generated automatically based on a large number scenarios and cover every field and...

pwneye

pwneye es una herramienta de seguridad ofensiva centrada y portátil para trabajar con cámaras IP que exponen servicios ONVIF y RTSP , con el objetivo de ofrecer a investigadores de seguridad y hackers una forma sencilla de gestionar descubrimiento, pruebas de autenticación, recopilación de...

birdy-edwards

BIRDY-EDWARDS 2.0 Infiltrate & Expose Automated AI powered Facebook intelligence tool for target profiling, network analysis and threat reporting. Runs entirely on-device via Ollama. AI-powered Facebook SOCMINT platform — 100% local, zero cloud dependency. For lite version check this repo click...

CVE-2026-34197

CVE-2026-34197 描述 Apache ActiveMQ Broker、Apache ActiveMQ 中存在不当输入验证、代码生成控制不当（'代码注入'）漏洞。Apache ActiveMQ Classic 在 Web 控制台的 /api/jolokia/ 路径下暴露了 Jolokia JMX-HTTP 桥接。默认的 Jolokia 访问策略允许对所有 ActiveMQ MBean（org.apache.activemq:）执行 exec 操作，包括 BrokerService.addNetworkConnectorString 和...

CVE-2026-34040-PoC

CVE-2026-34040 — Docker/Moby AuthZ Plugin Bypass Lab PoC KO: 这是通过超过 1MB 的请求体 绕过 DockerMoby 授权AuthZ 插件的漏洞的实操复现项目。 EN: A lab reproduction of a vulnerability that bypasses Docker Moby authorization AuthZ plugins using an oversized 1MB request body. Vulnerability facts / 漏洞事实 Item| Value ---|--- CVE|...

CVE-2025-55182-React-RSC-Exploit

CVE-2025-55182 // REACT SERVER COMPONENTS RCE VISIÓN GENERAL PoC de exploit para CVE-2025-55182. Apunta a versiones inseguras y vulnerabilidades en funciones de validación de entrada en React Server Components. MECANISMO TÉCNICO Vector : Contaminación de prototipos a través de $1:proto :then...

PT-2026-86652

Modules 5.6.2, 5.3.2 and 4.5.4 are out, fixing CVE-2026-85013: command injection in the Bash completion of module/ml via malicious module names. All versions 3.2.7 to 5.6.1 affected, please upgrade. Advisory: https://t.co/TQixdBKFPL Found by AISLE in partnership with Red Hat...

PT-2026-86635

A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1 20251110. This vulnerability affects the...

PT-2026-86634

A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1 20251110. This affects the function...

VulnCheck KEV: CVE-2025-14208

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub415028 of the file /goform/setwansettings. The manipulation of the argument pppusername results in command injection. It is possible to launch the attack remotely. The exploit has been released to...

PT-2026-86819

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

CVE-2026-85103 - ASN.1 decoding heap overflow leading to a remote code execution

Symptoms - Issue: A heap overflow in the VPN certificate ASN.1 decoding flow may allow a remote attacker to remotely execute arbitrary code on the management and Security Gateway. This issue received the ID CVE-2026-85103 with CVSS: 9.8. Affected Products: Security Management Server, Security...

CVE-2026-85102 - Authentication Bypass and Remote Code Execution in Remote Access and Site-to-Site VPN

Symptoms - Issue: Improper validation of certificate data during VPN negotiation may allow an unauthenticated remote attacker to execute arbitrary code on the Security Gateway. This issue received the ID CVE-2026-85102 with CVSS: 9.8. Affected Products: Security Gateway, Check Point Spark Firewal...

PT-2026-86736

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...

UBUNTU-CVE-2026-85197

A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the...

Linux Distros Unpatched Vulnerability : CVE-2026-19843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into ...

The vulnerability in the script/cgi-bin/dropbox.cgi of the CGI Handler component of the D-Link DNS-340L network storage software allows a hacker to execute arbitrary code.

The vulnerability of the /cgi-bin/dropbox.cgi script of the CGI Handler component in the D-Link DNS-340L network storage software is related to the lack of measures taken at the administrative level to ensure data cleanup. Exploiting this vulnerability could allow an attacker operating remotely t...

Linux Distros Unpatched Vulnerability : CVE-2026-80813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: fix NULL pointer dereference in nvmetexecuteidentifynslist When a host issues an Identify command with CNS 07h Active Namespace ID List for a specific I/...

Linux Distros Unpatched Vulnerability : CVE-2026-18707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly b...

Linux Distros Unpatched Vulnerability : CVE-2026-79678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the...