1489729 matches found
VMware vCenter Server LDAP Broken Access Control
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller PSC, does not correctly implement access controls. id: CVE-2020-3952 info: name: VMware vCenter Server LDAP Broken Access Control author: 0xAkoko severity: critic...
xss-payload-list
xss-payload-list 🎯 Cross Site Scripting XSS Vulnerability Payload List...
WebShells
WebShells WebShell studying...
Android-Security-Masterclass
Android Security Masterclass 🛡️📱 Official OWASP Project — A Hands-on OWASP MASVS/MASTG Security Training Lab for Android Developers & Pentesters — Mirror Architecture: Vulnerable ↔ Secure ↔ Attacker 📖 Overview The Android Security Masterclass is an official OWASP project designed with a Mirror...
CLSA-2026-1792115498 TuxCare security update for nodemailer (3 CVEs)
TuxCare rebuilt nodemailer to address 3 CVEs. Fixed in 9.0.0-tuxcare.3...
unhook-bof
This is a Beacon Object File to refresh DLLs and remove their hooks. The code is from Cylance's Universal Unhooking research: https://blogs.blackberry.com/en/2017/02/universal-unhooking-blinding-security-software To use: Load unhook.cna into Cobalt Strike via Cobalt Strike - Script Manager Run...
jira-exploits-cve
jira-exploits-cve Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...
OWASP-Top-10-Neocloud-and-AI-Data-Center-Security-Risks
The Top 10 Neocloud and AI Data Center Security Risks FORGE - Harden the metal beneath the model. 🌐 Website: https://forge-framework.io Executive Summary AI workloads depend on complex infrastructure spanning accelerators, high-speed networks, storage, orchestration platforms, identity systems,...
CLSA-2026-1792114646 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.30-tuxcare.12...
Audix
| / /| | / / / / / |// / // // // / / // |,/ ,/ // //|| is a PowerShell tool to quickly configure the Windows Event Audit Policies for monitoring & incident response. Please note: This tool will only change the local security policy. If applied to a host with a GPO setting, it is best to use the...
openclarity
OpenClarity is an open source tool for agentless detection and management of Virtual Machine Software Bill Of Materials SBOM and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets. Join OpenClarity's Slack channel to hear about the latest...
training-security-awareness
Free Security Awareness Training for Employees — Open Source Interactive SCORM Library 130+ free, open-source security awareness training exercises for employees — hands-on, interactive SCORM modules covering phishing awareness training, phishing simulation, GDPR training, EU AI Act compliance, A...
SecureML
SecureAIML 🔐 Enterprise-Ready AI Model Security built on OpenSSF Model Signing SecureAIML is the "Stripe for model security" - making enterprise-grade AI model protection accessible, user-friendly, and production-ready for every organization. Why SecureAIML? In the era of AI/ML, model security is...
bleach
====== Bleach NOTE: 2026-06-05: Bleach is no longer maintained. There will be no future releases including for security issues. See issue: Bleach is an allowed-list-based HTML sanitizing library that escapes or strips markup and attributes. Bleach can also linkify text safely, applying filters th...
PT-2026-116000
IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm...
PT-2026-116137
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication...
PT-2026-116138
IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive...
MiracleLinux 9 : kernel-5.14.0-687.48.1.el9_8 (AXSA:2026-2071:101)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2071:101 advisory. kernel: vhost: move vdpa group bound check to vhostvdpa CVE-2026-43248 kernel: security/keys: fix missed RCU read section on lookup CVE-2026-64015...
python313-urllib3-2.8.0-1.1 on GA media (moderate)
python313-urllib3-2.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:12044-1 Rating: moderate Cross-References: CVE-2016-9015 CVE-2018-20060 CVE-2019-11324 CVE-2019-9740 CVE-2020-26137 CVE-2021-33503 CVE-2023-43804 CVE-2023-45803 CVE-2024-37891 CVE-2026-97687 CVE-2026-97688 CVE-2026-97689 CV...