keyhog v0.5.86

Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...

CVE-2026-81625 Stack buffer overflow in Greenbone OS and openvas-scanner

A remote attacker with user privileges may use a malicious or compromised NASL vulnerability test VT on the affected products to trigger a stack buffer overflow and gain full access on the compromised system...

CVE-2026-81625 Stack buffer overflow in Greenbone OS and openvas-scanner

A remote attacker with user privileges may use a malicious or compromised NASL vulnerability test VT on the affected products to trigger a stack buffer overflow and gain full access on the compromised system...

CVE-2026-81625

CVE-2026-81625 is a stack buffer overflow in Greenbone OS and openvas-scanner . A remote attacker with user privileges can execute a malicious or compromised NASL vulnerability test (VT) to trigger the overflow, potentially gaining full access to the system. The vulnerability is rated HIGH with a...

SkillSpector v2.10.0

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...

threat-finder v0.3.0

OffSeq Threat Finder threat-finder finds the vulnerable software actually running on a host — not what a manifest claims — and tells you which findings are network-reachable. It resolves each running service and, with --scope all, every installed OS package to an exact Package-URL and matches it...

CVE-2026-81276: Missing Authorization

Unauthenticated Broken Access Control in Kali Forms = 2.4.23 versions...

CVE-2026-81272: Missing Authorization

Editor Broken Access Control in FluentPlayer Pro = 1.3.2 versions...

CVE-2026-78275: Improper Limitation of a Pathname to a Restricted Directory

Editor Arbitrary File Deletion in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78276: Deserialization of Untrusted Data

Editor PHP Object Injection in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78274: Unrestricted Upload of File with Dangerous Type

Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78257: Deserialization of Untrusted Data

Contributor PHP Object Injection in Booking and Rental Manager = 2.7.5 versions...

CVE-2026-78289: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...

CVE-2026-59301: Insertion of Sensitive Information into Log File

Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-32550: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Kadence Shop Kit = 3.0.6 versions...

CVE-2026-59285: Deserialization of Untrusted Data

Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. Spring for GraphQL 2.0.0 - 2.0.4...

CVE-2026-81674: Improper Neutralization of Special Elements used in an SQL Command

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...

CVE-2026-81677: Improper Neutralization of Special Elements used in an SQL Command

The ‘/ws/apiprensa/getVideo’ endpoint is vulnerable to SQL injection due to improper validation of the GET parameter idambito. An attacker can inject SQL syntax that breaks the underlying structure of the MariaDB query, resulting in syntax errors and the exposure of database error messages via...

CVE-2026-81673: Improper Neutralization of Special Elements used in an SQL Command

The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the idvideo and idambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of...

CVE-2026-81672: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the idvideo parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors when malicious input is provided. The vulnerability exposes...