authcov

AuthCov Escaneo de cobertura de autorización de aplicaciones web. Introducción AuthCov rastrea su aplicación web utilizando un navegador Chrome sin interfaz gráfica mientras está conectado como un usuario predefinido. Intercepta y registra las solicitudes API, así como las páginas cargadas durant...

soc-investigation-lab

End-to-End SOC Investigation Lab Executes a complete four-phase attack chain Reconnaissance → Exploitation → Persistence → Exfiltration against Metasploitable2, collects evidence at each phase, and produces a structured incident timeline and SOC report — demonstrating simultaneous attacker and...

Smersh

SMERSH Smersh is a pentest oriented collaborative tool used to track the progress of your company's missions and generate rapport. Preview front Angular: Documentation All information is available at the following address: https://cmepw.github.io/documentation/ How to contribute ?...

PT-2026-90198

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: do not accept C2HData based on blk rq payload bytes alone Commit 25e5cb780e62 "nvme-tcp: fix possible crash in write zeroes processing" established that blk rq payload bytes must not be read without first checking blk r...

PT-2026-90335

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: bound GET REPORT response to the caller buffer quickspi hid raw request receives the caller's buffer length in len, but quickspi get report never sees it and copies the whole device-supplied...

LetsDefend-CVE-2022-41082-Exploitation-Attempt

LetsDefend-CVE-2022-41082-Exploitation-Attempt 🛡️ Incident Report: CVE-2022-41082 Exploitation Attempt 📅 Date: Sep 30, 2022 🕒 Time: 07:19 AM 🚨 Severity: High 🆔 Incident ID: 125 📊 Details Key Attribute| Value ---|--- Event ID| 125 Event Time| Sep 30, 2022, 07:19 AM Rule| SOC175 - PowerShell Found i...

CVE-2026-78573

creationtimestamp| type| source ---|---|--- 2026-09-10 23:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv76crcczs2p 2026-09-11 00:07:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv7bk7xutw25...

lapith

Lapith Lapith is a Python GUI tool that presents Nessus results in a format more useful for penetration testers. Results can be viewed by issue as opposed to by host. It is therefore easier to report all the hosts affected by an issue, rather than all of the issues affecting the host. Multiple...

CVE-Exploit-Research-Development

🔐 SSH Exploit Tool Educational Use Only 📌 Description This tool demonstrates exploitation of: CVE-2008-0166 CVE-2008-1657 It connects to vulnerable SSH services and provides: Persistent interactive shell Command execution logging Automatic PDF & DOCX report generation ⚙️ Features Persistent shell...

GHSA-23RH-XW42-FQ82 Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reportsconfig permission can inject...

Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reportsconfig permission can inject...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 31, 2026 to September 6, 2026)

Last week, there were 278 vulnerabilities disclosed in 187 WordPress Plugins and 7 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 153 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...

CVE-2026-89046

creationtimestamp| type| source ---|---|--- 2026-09-10 19:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6qffx5pc2s...

CVE-2026-85228

creationtimestamp| type| source ---|---|--- 2026-09-10 18:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6mzwzcxb2k 2026-09-11 05:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7uo3diay24...

Privilege-Escalation-CVE-2019-13272-

Privilege-Escalation-CVE-2019-13272- This repository contains a report of Privilege Escalation vulnerability CVE-2019-13272...

CVE-2026-80352

creationtimestamp| type| source ---|---|--- 2026-09-10 17:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6jnakqqt2r 2026-09-11 14:13:08+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mvaqrk47fz2o 2026-09-15 04:37:08+00:00| seen|...

CVE-2026-88921

MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convertmarkdowntopdf module. The attribute, objectAttribute,...

CVE-2026-88921

MISP (versions ≤2.5.45) contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, used during PDF report export via the convert_markdown_to_pdf module. The attribute(), objectAttribute(), object(), and tag() methods interpolated user-controlled fields (attribute type...

CVE-2026-88921 MISP: Unescaped HTML Injection in PDF Report Element Rendering

MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convertmarkdowntopdf module. The attribute, objectAttribute,...

CVE-2026-88893

OpenPanel 's share lookup procedures fail to validate access controls, allowing unauthenticated callers who possess a share link to retrieve argon2id password hashes and full report configurations (event names, filters, breakdown dimensions). This enables offline password cracking and theft of bu...