91361 matches found
vigolium v0.3.8
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...
user-scanner v1.4.3.1
User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 380+ total scan vectors —including 155+ email-integrated sites and 225+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames a...
agent-bom v0.99.0
Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. 15 package ecosystems · 16 compliance surfaces · 77 MCP tools · no account required Quick start · Live demo · Docs What it is agent-bom scans repositories, images, and cloud accounts, then correlates what i...
CVE-2024-6832: Protection Mechanism Failure
The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not maintain a consistent state for account locking if it cannot reach all configured user stores, allowing an attacker to repeatedly attempt authentication with invalid credentials witho...
CVE-2026-32469: Authentication Bypass by Spoofing
Unauthenticated Bypass Vulnerability in CAPTCHA 4WP = 7.6.0 versions...
CVE-2026-66695: Path Traversal: '.../...//'
Unauthenticated Path Traversal in W3 Total Cache = 2.10.2 versions...
CVE-2026-15599: Unverified Ownership
Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse. This issue affects pardus-domain-joiner: before 0.5.5...
CVE-2026-61963: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Media LIbrary Assistant = 3.38 versions...
CVE-2026-66709: Improper Control of Generation of Code
Shop manager Remote Code Execution RCE in CTX Feed = 6.6.42 versions...
CVE-2026-66663: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
CVE-2026-66705: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Facebook for WordPress = 5.2.1 versions...
CVE-2026-28179: Improper Neutralization of Input During Web Page Generation
Shop manager Cross Site Scripting XSS in FiboSearch = 1.33.0 versions...
CVE-2026-65574: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Abogado = 1.18 versions...
CVE-2026-66683: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript = 2.0.16 versions...
CVE-2024-8995: Insufficient Session Expiration
Unused authorization codes issued to deleted users are not being properly invalidated or removed from the system. This allows for the persistence of these codes, enabling them to be potentially reused. If an attacker possesses both the authorization code and the associated client credentials clie...
CVE-2026-28082: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.13.1 versions...
CVE-2026-28005: Missing Authorization
Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer = 1.5.19 versions...
CVE-2026-66712: Missing Authorization
Unauthenticated Broken Access Control in Simple Membership = 4.7.8 versions...