CVE-2026-105118

OpenAM versions prior to 16.1.3 are susceptible to an open redirect vulnerability. The root cause is the failure to verify the id_token_hint provided to the /oauth2/connect/endSession endpoint. Unauthenticated attackers can exploit this by supplying a forged hint to redirect victims to any regist...

CVE-2026-105118 OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by supplying an unverified idtokenhint to the /oauth2/connect/endSession endpoint. Attackers can name any realm client in a forged hint to redirect victims to any registered...

EUVD-2026-92022

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by supplying an unverified idtokenhint to the /oauth2/connect/endSession endpoint. Attackers can name any realm client in a forged hint to redirect victims to any registered...

DSpace__DSpace_CVE-2022-31192_5-100

DSpace DSpace Documentation | DSpace Releases | DSpace Wiki | Support Overview DSpace open source software is a turnkey repository application used by more than 2,000 organizations and institutions worldwide to provide durable access to digital resources. For more information, visit...

xlsx

SheetJS The SheetJS Community Edition offers battle-tested open-source solutions for extracting useful data from almost any complex spreadsheet and generating new spreadsheets that will work with legacy and modern software alike. SheetJS Pro offers solutions beyond data processing: Edit complex...

Nullify

Nullify Secure. Transparent. Nullified. Nullify is an open source, modular data retention, deletion, and lifecycle governance platform. It provides a centralized framework for discovering data, evaluating retention policies, executing controlled lifecycle actions, and maintaining verifiable audit...

pe-bear-old

PE-bear releases PE-bear is a freeware reversing tool for PE files. Its objective is to deliver fast and flexible “first view” for malware analysts, stable and capable to handle malformed PE files. Signatures for PE-bear: SIG.txt updated: 22.01.2014 - contains signatures fromPEid's UserDB -...

cipher387.github.io

This page contains all my services and collections that are useful to OSINT enthusiasts. https://cipher387.github.io/ I recommend that you pay special attention to: https://cipher387.github.io/osintmap/ Thank you for following me! https://cybdetective.com...

PsyloDbg

PsyloDbg PsyloDbg is a fast-growing and user-friendly open-source Windows Debugger entirely coded in Delphi. The main goal of this project is to offer to Malware analysts another tool to short their response time during their analysis process. The project is still in very early stage, it is...

mi-x

Am I Exploitable? Author: 2022 - Now, Rezilion Description: Vulnerabilities validation Development: January 2022 - Now Documentation: See website, README Introduction Description ‘Am I Exploitable?’ is a python open source project that comes to meet the need of validating if your system is...

Endurance-Wiper

Endurance-Wiper Beta - Open Source A small wiper malware written in C using the .NET framework. If you are from Twitter or any other source, you can clearly tell this is in active development. You are free to check the updates here...

GCTI

GCTI This repository contains GCTI's open source detection signatures...

TJ-OSINT-Notebook

TJ-OSINT-Notebook Intial Release November 18th 2022 Main Purpose: This OSINT Notebook provides an overview of the tools, techniques, and resources that I use for a variety of situations for performing reconaissance and OSINT operations. This Notebook has helped me in many situations to learn more...

fuzzing-templates

Fuzzing Templates Community curated list of fuzzing templates for the nuclei engine to find unknown security vulnerabilities. Documentation • Contributions • Discussion • Community !Caution This repository is archived and merged into nuclei-templates project under /dast directory. Fuzzing templat...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

pentest-copilot

Pentest Copilot Открытый AI-агент для пентеста. Подключается к атакующей машине Kali, автономно запускает инструменты, анализирует результаты и повторяет цикл. Вы описываете цель. Остальное делает он. Создан для реальных проектов, boot2root-машин и CTF. В действии Pentest Copilot выполняет обход...

CVE-2022-24637

CVE-2022-24637 Unauthenticated RCE in Open Web Analytics version / newPassword YourIp YourPort It might be possible that you need to run it a few times to get a shell. The script can be improved...

CVE-2019-18426

WhatsApp Vulnerabilities Disclosure - Open Redirect + CSP Bypass + Persistent XSS + FS read permissions + potential for RCE CVE-2019-18426 Technical Article Original Vulnerabilities Disclosures Documents DEMO Vids!...

disclosure-check

Disclosure Check Disclosure Check — это инструмент для определения механизмов раскрытия уязвимостей в проектах с открытым исходным кодом. Warning Этот проект всё ещё находится в разработке и может работать некорректно для многих проектов. Если вы столкнулись с ошибкой, пожалуйста, создайте issue,...

[SECURITY] Fedora 45 Update: sgml-common-0.6.3-70.fc45

The sgml-common package contains a collection of entities and DTDs that are useful for processing SGML, but that don't need to be included in multiple packages. Sgml-common also includes an up-to-date Open Catalog file...