aws-recon

AWS Recon Una herramienta de recolección de inventario de AWS orientada a la seguridad y con múltiples hilos, escrita en Ruby. Esta herramienta se creó para facilitar la recolección eficiente de una gran cantidad de atributos y metadatos de recursos de AWS. Su objetivo es recopilar casi todo lo...

riskscanner

Advertencia Este proyecto ha dejado de mantenerse, se ha migrado al módulo de cumplimiento de seguridad de CloudExplorer Lite. RiskScanner Plataforma de escaneo de cumplimiento de seguridad multi-nube de código abierto RiskScanner es una plataforma de escaneo de cumplimiento de seguridad multi-nu...

CVE-2026-104854: Improper Privilege Management

Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix domain sockets for its daemon and isolated plugin workers in shared temporary locations without owner-only directory and socket permissions. Another unprivileged local account on ...

CVE-2026-12951: Improper Neutralization of Special Elements used in an SQL Command

The Dc Woocommerce Multi Vendor plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter of the /multivendorx/v1/compliance/report-abuse REST endpoint in versions up to and including 5.0.18. This is due to insufficient escaping on the user supplied parameter and lack of...

PT-2026-104126

Name of the Vulnerable Software and Affected Versions Dc Woocommerce Multi Vendor versions prior to 5.0.19 Description An issue exists where authenticated attackers with vendor-level access or higher specifically those with the edit stores capability can perform SQL Injection. This occurs because...

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Bad Plugins vulnerability (USN-8855-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8855-1 advisory. It was discovered that GStreamer Bad Plugins incorrectly validated the size of multi-channel audio...

0-click-RCE-Exploit-for-CVE-2024-50526

CVE-2024-50526 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1859403137435459727 This repository contains a proof-of-concept exploit for CVE-2024-50526, an unauthenticated arbitrary file upload vulnerability in the Multi Purpose Mail Form WordPress plugin,...

ThreatLens

Investigate IPs, domains, hashes, and CVEs across 6 free threat intel APIs — without switching between browser tabs. Quick Start · Usage · Architecture · API Keys · Screenshots · Contributing 🚀 Proudly featured in the official Awesome OSINT repository. 📖 Overview ThreatLens is a single command-li...

CVE-2026-87796

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-87796 CVE-2026-87796 Multi Uploader for Gravity Forms 1.1.9 - sh1zen I am @abraxasnull. Loopback lab. The client is CVE-2026-87796-Abraxas-Labs.py. The advisory named a method. movefile is a private PHP...

agentZ

Zero Trust Agentic AI Platform Build, run, and govern AI agents. Secure by design. Every agent runs inside a default-deny sandbox and never receives a credential. Every agent action is traceable. AgentZ is a multi-tenant platform for running AI agents. It provides strong isolation guarantees, zer...

CVE-2026-104181

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.13.3 and 5.8.3, app-based multi-factor authentication management actions do not consistently require confirmation of the current password. An attacker with access to an authenticated user...

memgrep

Memory grep A memory searching utility across multiple processes Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/memgrep Released under AGPL see LICENSE for more information...

CVE-2026-104181 Filament: Multi-factor authentication (app) management actions do not require password reauthentication

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.13.3 and 5.8.3, app-based multi-factor authentication management actions do not consistently require confirmation of the current password. An attacker with access to an authenticated user...

CVE-2026-104181 Filament: Multi-factor authentication (app) management actions do not require password reauthentication

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.13.3 and 5.8.3, app-based multi-factor authentication management actions do not consistently require confirmation of the current password. An attacker with access to an authenticated user...

CVE-2026-104181

The Filament full-stack components for Laravel are vulnerable in versions 4.0.0 through 4.13.3 and 5.8.3 . The root cause is that app-based multi-factor authentication (MFA) management actions do not consistently require the current password for confirmation. An attacker with access to an authent...

CVE-2026-104181 Filament: Multi-factor authentication (app) management actions do not require password reauthentication

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.13.3 and 5.8.3, app-based multi-factor authentication management actions do not consistently require confirmation of the current password. An attacker with access to an authenticated user...

SDK

Публичный SDK Intelligence X Комплект разработчика SDK позволяет любому использовать поисковую систему Intelligence X. Он бесплатен для использования, и Intelligence X приветствует любые интеграции в сторонние инструменты и сервисы. Intelligence X — это поисковая система и архив данных...

CVE-2026-41940

CVE-2026-41940 A security research tool for detecting and analyzing cPanel/WHM services and their authentication behavior. Designed for authorized testing and educational purposes only. cPanel Security Scanner Research Tool This project is a security research tool designed to analyze and detect...

aegis-latent-core

Aegis Latent Core AI Governance and Cryptographic Evidence Gateway Aegis Latent Core commits signed, hash-linked evidence of every governed AI call — before the response reaches the caller — and issues a portable proof that a third party verifies without trusting the gateway, us, or you. -green...

Cobra

Cobra This project's design can no longer meet current white-box scanning requirements. It is no longer maintained and is intended for research use only. Please do not use it in a production environment. Introduction Cobra is a source code security audit tool that supports detecting most prominen...