CVE-2026-23993

creationtimestamp| type| source ---|---|--- 2026-01-21 22:12:37+00:00| seen| https://bsky.app/profile/pentesterlab.com/post/3mcxowc2c6k23 2026-01-22 18:15:58+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3mczs65vv7c2t 2026-02-02 00:26:19+00:00| seen|...

Navidrome has Multiple SQL Injections and ORM Leak

Security Advisory: Multiple Vulnerabilities in Navidrome Summary Navidrome automatically adds parameters in the URL to SQL queries. This can be exploited to access information by adding parameters like password=... in the URL ORM Leak. Furthermore, the names of the parameters are not properly...

InjuredAndroid - A Vulnerable Android Application That Shows Simple Examples Of Vulnerabilities In A CTF Style

A vulnerable Android application with ctf examples based on bug bounty findings, exploitation concepts, and pure creativity. Setup for a physical device 1. Download injuredandroid.apk from Github 2. Enable USB debugging on your Android test phone. 3. Connect your phone and your pc with a usb cabl...