988938 matches found
pocsuite3
pocsuite3 Avertissement légal L'utilisation de pocsuite3 pour attaquer des cibles sans consentement mutuel préalable est illégale. pocsuite3 est uniquement destiné à des fins de tests de sécurité. Avertissement légal L'utilisation de pocsuite3 pour attaquer des cibles sans consentement mutuel...
combobulator
Dependency Combobulator Dependency Combobulator est un framework open-source, modulaire et extensible pour détecter et prévenir les fuites de confusion de dépendances et les attaques potentielles. Cela facilite une approche holistique pour garantir des versions d'applications sécurisées pouvant...
kitty
Introduction | Sulley : Boo ? | Boo : Kitty ! Qu'est-ce que Kitty ? Kitty est un framework de fuzzing modulaire et extensible open-source écrit en Python, inspiré de Sulley d'OpenRCE et du Peach Fuzzer de Michael Eddington et maintenant de Deja Vu Security. Objectif Quand nous avons commencé à...
cve-2026-75650-magento-validation-lab
CVE-2026-75650 / VULN-39341 Docker validation lab This standalone lab reproduces the complete unauthenticated StyleSmuggler HTTP chain on a revision-pinned Magento Open Source 2.4.9 checkout. It then applies Adobe's VULN-39341 patch and proves that the identical request sequence no longer reaches...
gophish
Gophish Gophish : Kit de Phishing Open-Source Gophish est un kit de phishing open-source conçu pour les entreprises et les testeurs d'intrusion. Il offre la possibilité de configurer et d'exécuter rapidement et facilement des campagnes de phishing et des formations de sensibilisation à la sécurit...
byob
Des questions ? Consultez la documentation ou rejoignez notre serveur de support Discord Avertissement : Ce projet doit être utilisé uniquement à des fins de tests autorisés ou éducatives. BYOB est un framework de post-exploitation open-source destiné aux étudiants, chercheurs et développeurs. Il...
EUVD-2026-38245
Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation...
CVE-2023-31595
CVE-2023-31595 IC Realtime ICIP-P2012T уязвима к некорректному контролю доступа через открытый порт IC Realtime IP PTZ купольная камера ICIP-P2012, версия ПО: 2.420 Открытый порт 9989 отвечает снимком в реальном времени на момент запроса; с помощью скрипта это можно использовать для получения...
CVE-2026-80327
An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 and later...
CVE-2026-80327 Open Redirect in PingGateway Fragment Filter
An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 and later...
CVE-2026-80327
An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This vulnerability impacts PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. The issue allows for redirection to untrusted sites and is addressed in versions 2024.11.2...
EUVD-2026-93358
An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 and later...
CVE-2026-80327 Open Redirect in PingGateway Fragment Filter
An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 and later...
Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers can no longer submit security flaws in the code of projects such as Go, Angular, and Protocol Buffers there for a reward...
DEBIAN-CVE-2026-98308
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a stream Stream assignment can fail when hardware streams are exhausted. Move the tracepoint after the NULL check because its payload accesses the assigned stream tag. Detected by...
CVE-2026-98308
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a stream Stream assignment can fail when hardware streams are exhausted. Move the tracepoint after the NULL check because its payload accesses the assigned stream tag. Detected by...
CVE-2026-98308
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a stream Stream assignment can fail when hardware streams are exhausted. Move the tracepoint after the NULL check because its payload accesses the assigned stream tag. Detected by...
Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-
Markdown Webmin 1.580 RCE Execution Guide Quick reference for executing authenticated Remote Code Execution RCE on Webmin 1.580 via the /file/show.cgi component. 1. Attack Machine Listener Run this command on your local machine to catch the incoming connection before executing the payload: rlwrap...
stylesmuggler-adobe-patches
disrex/stylesmuggler-adobe-patches Плагин Composer, который автоматически применяет официальное исправление Adobe APSB26-146 CVE-2026-75650, внутренняя ссылка VULN-39341 для zero-day уязвимости StyleSmuggler в Magento Open Source и Mage-OS , определяя установленную версию. Он сам пропатчивает...