fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

CVE-2025-27591-Meta-below-LPE

CVE-2025-27591 — Meta below Symlink Local Privilege Escalation Overview Field| Details ---|--- CVE| CVE-2025-27591 Software| Meta below system resource monitor Affected Versions| 0.9.0 Vulnerability| Symlink following → arbitrary file overwrite as root Authentication| Local user with sudo access ...

c4-meta-system

C4-META System v1.0.0 research prototype Research prototype for multi-layer AI defense: C4 explainability, ensemble classifiers, deobfuscation, O₂ security engine, ThoughtVirus defense, and SVETILO value alignment. Alpha-grade — validated internally, external audit pending. Version: 1.0.0-alpha |...

CVE-2025-59057-PoC

A XSS vulnerability exists in in React Router's meta/ APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag...

meta-lobbying-and-other-findings

Website: https://tboteproject.com Most Recent Repository: https://tboteproject.com/git/hekate/attestation-findings Help keep the server running! Monero: 451CjP6mgu12yvmDLxLduYYw5Py3Nnb91RwoRYCnhMwhGKM5hxYSaAWapq7CdRQz3qRJbUqqrnYBzW7L4aUt7nhbAYGmLSX Thank you for your support. Meta Platforms:...

ThreatExchange

Projects in this Repository This repository originally started as code to support Meta's ThreatExchange API, but over time has grown to include a number of projects to support signal exchange and content moderation in general. Below are a list of sub-projects. PDQ Image Hashing and Similarity...

CVE-2026-39376

CVE-2026-39376 CVE-2026-39376Infinite redirect loop DoS via meta-refresh chain Summary When parse fetches a URL that returns an HTML page containing a tag, it recursively calls itself with the redirect URL — with no depth limit, no visited-URL deduplication, and no redirect count cap. An...

import-users-from-csv-with-meta

import-users-from-csv-with-meta Import Users From CSV with Meta 1.15 - Unauthorised Authenticated Users Export...

Meta_SecAlign

Meta SecAlign: A Secure Foundation LLM Against Prompt Injection Attacks Sizhe Chen, Arman Zharmagambetov, David Wagner, Chuan Guo for equal technical contributions 🔥 Meta-SecAlign models are now licensed for commercial use under the Llama community licenses, despite this codebase being licensed f...

OSTE-Meta-Scan

OSTE-Meta-Scanner This project is now maintained and supported by OSTE and is no longer available as an open-source project. For inquiries, commercial use, or support, please contact OSTE via LinkedIn, or official website, or sales team at +213.7.98.38.94.54 via whatsup. This project aims to...

CVE-2026-111596

The Kliken: Ads + Pixel for Meta WordPress plugin before 1.2.3 does not verify that a visitor holds an order's key before outputting that order's details on the order confirmation page, allowing unauthenticated users to retrieve the billing location, purchased products and totals of other...

EUVD-2026-107073

The Kliken: Ads + Pixel for Meta WordPress plugin before 1.2.3 does not verify that a visitor holds an order's key before outputting that order's details on the order confirmation page, allowing unauthenticated users to retrieve the billing location, purchased products and totals of other...

CVE-2026-111596

The Kliken: Ads + Pixel for Meta WordPress plugin, in versions before 1.2.3 , is vulnerable to an unauthenticated order data disclosure due to an Insecure Direct Object Reference (IDOR) . The application fails to verify that a visitor possesses a specific order's key before displaying order detai...

CVE-2026-111596 Kliken: Ads + Pixel for Meta < 1.2.3 - Unauthenticated Order Data Disclosure via IDOR

The Kliken: Ads + Pixel for Meta WordPress plugin before 1.2.3 does not verify that a visitor holds an order's key before outputting that order's details on the order confirmation page, allowing unauthenticated users to retrieve the billing location, purchased products and totals of other...

CVE-2026-111596 Kliken: Ads + Pixel for Meta < 1.2.3 - Unauthenticated Order Data Disclosure via IDOR

The Kliken: Ads + Pixel for Meta WordPress plugin before 1.2.3 does not verify that a visitor holds an order's key before outputting that order's details on the order confirmation page, allowing unauthenticated users to retrieve the billing location, purchased products and totals of other...

WordPress Kliken: Ads + Pixel for Meta plugin < 1.2.3 - Unauthenticated Order Data Disclosure vulnerability

Unauthenticated Order Data Disclosure vulnerability discovered by Huseyn in WordPress Plugin Kliken: Ads + Pixel for Meta versions 1.2.3...

TTPForge

TTPForge TTPForge is a cyber attack simulation platform designed and built by Sam Manzer @d3sch41n, Alek Straumann @CrimsonK1ng, and Geoff Pamerleau @Sy14r, and including subsequent contributions from many good folks in Meta’s Red, Blue, and Purple security teams. Jayson Grace @l50 migrated the...

HackBot

HackBot - AI Cybersecurity Chatbot | | | | | | | | | | || |/ |/ | |/ / \ / | | By: Morpheuslord | | | | | | | | | | AI used: Meta-LLama2 || ||,|||\/ / | Introduction Welcome to HackBot, an AI-powered cybersecurity chatbot designed to provide helpful and accurate answers to your...

EUVD-2026-106271

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Meta Data. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

PT-2026-120468

The Kliken: Ads + Pixel for Meta WordPress plugin before 1.2.3 does not verify that a visitor holds an order's key before outputting that order's details on the order confirmation page, allowing unauthenticated users to retrieve the billing location, purchased products and totals of other...