CVE-2026-89148 AVideo Open Redirect via playlistSort.php Referer Header

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php. Because the endpoint is not a .json.php script, AVideo's automatic CSRF guard autoCSRFGuard/forbidIfIsUntrustedRequest does not run, and when the request includes the sort paramet...

EUVD-2026-76050

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php. Because the endpoint is not a .json.php script, AVideo's automatic CSRF guard autoCSRFGuard/forbidIfIsUntrustedRequest does not run, and when the request includes the sort paramet...

CVE-2026-89148

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php. Because the endpoint is not a *.json.php script, AVideo's automatic CSRF guard does not execute. When a request includes the sort parameter, the script sets the Location header to...

CVE-2026-49837

A flaw was found in GoBGP, an open-source Border Gateway Protocol BGP implementation. A remote attacker could send a specially crafted BGP OPEN message, causing the BGP OPEN capability parser to misinterpret data. This issue arises because the parser may read capability values beyond their declar...

certificate-ripper

Certificate Ripper 🔐 A CLI tool to extract server certificates Demo Advantages...

google-dorks

google-dorks Update Jan 2026 Read this, my Medium Blog Space:👩‍💻Proviesec Security Medium Articles - read it Table of Contents Introduction My love google dork Search filters Operators Search Term OR Ideas Links Example Preventing GOOGLE DORKS Introduction ⭐ Star us on GitHub — it motivates a lot!...

CVE-2026-84311 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-JP53-MHQP-8XCG vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-23W6-3W8W-8484 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84309 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84310 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-763M-79HH-57F2 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84309 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84310 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-763M-79HH-57F2 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-23W6-3W8W-8484 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84311 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-JP53-MHQP-8XCG vulnerabilities

Vulnerabilities for packages: open-webui...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

session_reaper_lab

CVE-2025-54236 - SessionReaper Lab Entorno Docker para demostración práctica de la CVE-2025-54236 SessionReaper: Deserialización de Objetos PHP que lleva a RCE en Magento Open Source 2.4.7. Uso exclusivo en entorno controlado. No ejecutar contra sistemas sin autorización explícita. Sobre la...