pwndbg

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...

ssh-baseline

DevSec SSH Baseline This Compliance Profile ensures, that all hardening projects keep the same quality. https://github.com/dev-sec/puppet-ssh-hardening https://github.com/dev-sec/chef-ssh-hardening https://github.com/dev-sec/ansible-ssh-hardening Standalone Usage This Compliance Profile requires...

CVE-2026-120814

An improper privilege management issue in the sharding subsystem of MongoDB Server may allow a user holding certain shard-level administrative privileges to cause persisted internal coordination state to be reprocessed with elevated internal authority. Because that state is trusted rather than...

CVE-2026-120814

An improper privilege management issue in the sharding subsystem of MongoDB Server may allow a user holding certain shard-level administrative privileges to cause persisted internal coordination state to be reprocessed with elevated internal authority. Because that state is trusted rather than...

EUVD-2026-122829

An improper privilege management issue in the sharding subsystem of MongoDB Server may allow a user holding certain shard-level administrative privileges to cause persisted internal coordination state to be reprocessed with elevated internal authority. Because that state is trusted rather than...

PT-2026-137198

Name of the Vulnerable Software and Affected Versions VitaFit versions prior to 2.8.1.0 Description The application lacks an Android network security configuration, which allows network-based attackers to intercept or modify unencrypted HTTP communications. This issue enables attackers on untrust...

CVE-2026-121020

Exposure of Sensitive Information to an Unauthorized Actor CWE-200 in the security configuration API in AxxonSoft Axxon One before 3.2.0 on Windows and Linux allows a remote authenticated user with limited privileges to enumerate all user accounts and roles configured in the system via the user...

CVE-2026-121020 User and Role Enumeration by Low-Privileged Users in Axxon One Security Configuration API

Exposure of Sensitive Information to an Unauthorized Actor CWE-200 in the security configuration API in AxxonSoft Axxon One before 3.2.0 on Windows and Linux allows a remote authenticated user with limited privileges to enumerate all user accounts and roles configured in the system via the user...

CVE-2026-121020

The AxxonSoft Axxon One software (versions before 3.2.0 on Windows and Linux ) contains a vulnerability in the security configuration API (CWE-200 ). A remote authenticated user with limited privileges can exploit this flaw to enumerate all user accounts and roles configured in the system. This i...

EUVD-2026-115716

Exposure of Sensitive Information to an Unauthorized Actor CWE-200 in the security configuration API in AxxonSoft Axxon One before 3.2.0 on Windows and Linux allows a remote authenticated user with limited privileges to enumerate all user accounts and roles configured in the system via the user...

VMware ESX Code Execution

The vulnerability in the VMware ESX hypervisor is related to security configuration errors. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

EUVD-2026-109593

A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack can be launched...

PT-2026-123151

A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack can be launched...

HeyCyan encryption issue vulnerability

The HeyCyan 1.0.103 version contains an encryption vulnerability. This vulnerability stems from unknown function operations within the Network Security Configuration component of AndroidManifest.xml, potentially leading to the transmission of sensitive information in plain text...

R_EXPLOIT

R-Exploit — Authorized Web Security Audit + Local Lab Open-...

ROS-20261012-73-0028

The vulnerability of the wdmincallback function in the drivers/usb/class/cdc-wdm.c file of the Linux operating system’s USB device driver framework is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

mongoaudit

mongoaudit es una herramienta CLI para auditar servidores MongoDB, detectar configuraciones de seguridad deficientes y realizar pruebas de penetración automatizadas. Instalación Clona este repositorio y ejecuta la configuración: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit...

web-check — Updated!

Web-Check Comprehensive, on-demand open source intelligence for any website 🌐web-check.xyz Kindly supported by: NinjaPear API to get a full B2B profiles from any URL | Hostinger Deploy Web-Check with one click on Hostinger | Warp Built for coding with multiple AI agents ---|---|--- Contents About...

Windows Host Security Configuration Reporter

This plugin aggregates Windows host security configuration settings collected by individual detection plugins and reports the result as a structured internal host tag. The structured data object is reported even when only a subset of the source plugins ran. %NASLMINLEVEL 80900 C Tenable, Inc...

Astra Linux – Vulnerability in dovecot

A issue was discovered in the auth component of Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead ...