EUVD-2026-38245

Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation...

CVE-2023-31595

CVE-2023-31595 IC Realtime ICIP-P2012T уязвима к некорректному контролю доступа через открытый порт IC Realtime IP PTZ купольная камера ICIP-P2012, версия ПО: 2.420 Открытый порт 9989 отвечает снимком в реальном времени на момент запроса; с помощью скрипта это можно использовать для получения...

spoilerwall

Beware! Spoilers ahead! Spoilerwall introduces a brand new concept in the field of network hardening. Avoid being scanned by spoiling movies on all your ports! Firewall? How about Fire'em'all! Stop spending thousand of dollars on big teams that you don't need! Just fire up the Spoilers Server and...

CVE-2026-80327

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 and later...

CVE-2026-80327 Open Redirect in PingGateway Fragment Filter

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 and later...

EUVD-2026-93358

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 and later...

CVE-2026-80327

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This vulnerability impacts PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. The issue allows for redirection to untrusted sites and is addressed in versions 2024.11.2...

Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-

Webmin 1.580 RCE 실행 가이드 Webmin 1.580의 /file/show.cgi 구성 요소를 통해 인증된 원격 코드 실행RCE을 수행하기 위한 빠른 참고 자료입니다. 1. 공격 머신 리스너 페이로드를 실행하기 전에 로컬 머신에서 다음 명령을 실행하여 들어오는 연결을 캐치하세요: rlwrap nc -lnvp 4444 2. 대상 익스플로잇 페이로드 다음 URL을 브라우저 주소 표시줄에 직접 붙여넣으세요 먼저 Webmin 대시보드에 로그인되어 있는지 확인하십시오:...

stylesmuggler-adobe-patches

disrex/stylesmuggler-adobe-patches Плагин Composer, который автоматически применяет официальное исправление Adobe APSB26-146 CVE-2026-75650, внутренняя ссылка VULN-39341 для zero-day уязвимости StyleSmuggler в Magento Open Source и Mage-OS , определяя установленную версию. Он сам пропатчивает...

DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been...

CVE-2020-8423

CVE-2020-8423 https://ktln2.org/2020/03/29/exploiting-mips-router/testing-environment를 기반으로 한 연구 hook.c는 특히 open 커스터마이즈되었다. vmlinux 버전 2.6.31...

CLEANSTART-2026-FH92420 UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns

Security vulnerability affects the rundeck package. UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns...

PT-2026-106809

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.32.2, the openURL utility in ui/src/utils/open-url/open-url.js trusted window.SafariViewController whenever that global existed in an iOS environment. Attacker-controlled HTML rendered by components...

EUVD-2026-78300

proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet...

adaPwn

adaPwn - CVE-2019-14912 PoC Le module adAS OPENSSO ne vérifie pas correctement le domaine vers lequel rediriger, ce qui permet de rediriger l'utilisateur vers un site web contrôlé par un attaquant, volant ainsi son cookie de session adAS. Utilisation usage: adaPwn.py -h --interface INTERFACE...

gradient-untangler

gradient-untangler A local research harness that searches for the exact tokens that make an open-weight language model start its answer the way you specify. Open-weight models ship as ordinary files: config.json, a tokenizer, and one or more .safetensors or .bin shards. A Hugging Face id is only ...

Rocket.Chat

La solution open-source sécurisée ultime pour les communications d'équipe Rocket.Chat est une plateforme de communication open-source, sécurisée et entièrement personnalisable développée en TypeScript pour les organisations ayant des normes élevées de protection des données. Nous sommes la soluti...

security-baseline-ubuntu

☕ Support the Project If this practical guide has saved your host from compromise, helped you configure your security baseline, or saved you hours of debugging AppArmor and Firejail profiles, you can support the author and further development of this open-source initiative. ⚠️ OPSEC Warning:...

opencode

L'agent de codage IA open source. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt Installation YOLO curl -fsSL...

Open-Source-Threat-Intel-Feeds

Бесплатные Threat Intel/IOC фиды Этот репозиторий содержит открытые и свободно используемые Threat Intel фиды, которые можно применять без дополнительных требований. CSV-файл ThreatIntelFeeds хранится в структурированном виде на основе Вендора, Описания, Категории и URL. Вендоры, предлагающие...