NeuroSploit v4.0.0

🧠 NeuroSploit v4.0.0 Autonomous, multi-model penetration-testing harness — Rust, CLI-only. by Joas A Santos & Red Team Leaders ⭐ If this is useful, star the repo — it helps a lot. 📖 New here? Read thefull Tutorial & User Guide → — every mode, flag, config and example explained. Version-by-version...

API

ShopEase API Security Shooting Range A carefully designed A...

K000163042: OpenSSH vulnerability CVE-2026-35385

Security Advisory Description In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O legacy scp protocol and without -p preserve mode. CVE-2026-35385 Impact There is no impac...

hermetic

Der agentenisolierte Credential-Broker. Ihr KI-Agent führt den authentifizierten Aufruf durch. Er sieht nie den Schlüssel. -brightgreen?style=flat-square Webseite · Installation · Schnellstart · Funktionsweise · Sicherheitsmodell · Schwachstelle melden !IMPORTANT Ihr KI-Agent arbeitet auf der ★★★...

K000163041: Linux kernel vulnerability CVE-2026-53403

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's current mode, is expected to have a matching entry in info-modelist. vartodisplay relies on this and...

CVE-2026-78154

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The endpoint is public on purpose and the invitation code is the credential. This is the standalone SD...

gitgalaxy — Updated!

GitGalaxy Docs · Visualizer 1 scan · 97 structural signals · 50+ languages · 0 need for compilation 19 risk exposure scores · 6 final reports · 0 dependencies · pip install gitgalaxy What Pain Point Does This Solve? GitGalaxy exists for one recurring problem: understanding a large, real,...

PT-2026-82379

CVE ID :CVE-2026-13081 Published : Aug. 24, 2026, 6:20 p.m. | 32 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2026-82378

CVE ID :CVE-2026-13047 Published : Aug. 24, 2026, 6:20 p.m. | 32 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

RHEL 8 : libgcrypt (RHSA-2026:58978)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58978 advisory. The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fixes: Libgcrypt: Libgcrypt: Denial of...

RHEL 8 : libgcrypt (RHSA-2026:58979)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58979 advisory. The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fixes: Libgcrypt: Libgcrypt: Denial of...

RHEL 8 : libgcrypt (RHSA-2026:58977)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58977 advisory. The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fixes: Libgcrypt: Libgcrypt: Denial of...

A Scenario-Based Evaluation of CRQC+AI Vulnerability Spectrum for TLS 1.3 Cryptographic Dependencies

This paper evaluates quantum and AI-accelerated risks to TLS 1.3 cryptographic dependencies under an evidence-tiered model, distinguishing mechanism-backed threats Shor algorithm against RSA and ECC from contingency-backed risks to lattice-based post-quantum cryptography PQC and hypothesis-only...

CVE-2026-78154: Undefined Security Weakness

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The endpoint is public on purpose and the invitation code is the credential. This is the standalone SD...

CVE-2026-78154

CVE-2026-78154 was withdrawn by its CNA after further investigation showed it was not a security issue . The original finding described missing authentication in the Public Invitation-Code Redemption Endpoint (function redeem_invitation_code in backend/app/api/routes/v1/user_invitation_code.py) o...

Aegis aegis-v0.13.0-alpha

AEGIS OS-level oversight for AI coding agents Open-source monitor that shows what AI coding agents actually do on your machine — at the OS level, no agent hooks required. AEGIS sees every AI agent on your machine — even ones that don't cooperate. It is an independent, OS-level observer that watch...

Scrapling v0.4.15

Effortless Web Scraping for the Modern Web العربيه | Español | Português Brasil | Français | Deutsch | 简体中文 | 日本語 | Русский | 한국어 Selection methods · Fetchers · Spiders · Proxy Rotation · CLI · MCP Scrapling is an adaptive Web Scraping framework that handles everything f...

curl: RTSP CRLF injection in libcurl allows CURLOPT_RTSP_* values to inject commands into independent sessions

Summary libcurl's RTSP code interpolates the values of CURLOPTRTSPSTREAMURI, CURLOPTRTSPTRANSPORT, and CURLOPTRTSPSESSIONID directly into the RTSP request text with no check for embedded CR/LF, so a value containing \r\n splits one intended RTSP operation into multiple independent RTSP requests o...

Exploit for CVE-2026-66916

Password-Protected Category Bypass via JSON Format in JoomGall...

Kestrel v.1.1.0

Kestrel BloodHound shows you the path. Kestrel shows you what's already inside. Everyone maps the same thing: the attack path - who can reach Domain Admin. It's the right question, and the tools that answer it are excellent. But a graph of "who can reach whom" is blind to an entire class of...