GraphQLer

The only dependency-aware GraphQL API testing tool! GraphQLer is a cutting-edge tool designed to dynamically test GraphQL APIs with a focus on adaptability. It offers a range of sophisticated features that streamline the testing process and ensure robust analysis of GraphQL APIs. GraphQLer...

AndroidSecurityEvolution

Android Security Evolution Significant security enhancements of recent major Android versions, starting with Android 5.0 Lollipop API 21. Android 5.0 API 21 - Lollipop Security Enhancements - Android 5 Starting August 2023, Google Play Services updates will only be received from this Android...

CLSA-2026-1791881293 TuxCare security update for ch.qos.logback (3 CVEs)

TuxCare rebuilt 6 ch.qos.logback packages to address 3 CVEs. Fixed in 1.2.11-tuxcare.1...

CVE-2026-108174

The PluginUs.Net FOX woocommerce-currency-switcher WordPress plugin, versions up to and including 1.5.4 , is vulnerable to a Missing Authorization (CWE-862) issue. The vulnerability stems from Incorrectly Configured Access Control Security Levels , potentially allowing unauthorized actions. The i...

CVE-2026-109696

The FluentBoards plugin for WordPress (developed by WP ManageNinja LLC) is vulnerable to a Broken Access Control issue (CWE-862) in versions up to and including 2.1.0 . The root cause is incorrectly configured access control security levels , which allows for missing authorization . This vulnerab...

CVE-2026-108496

The WP User Manager WordPress plugin (versions up to and including 2.9.23 ) is vulnerable to a Missing Authorization issue (CWE-862). The flaw allows for the exploitation of Incorrectly Configured Access Control Security Levels , potentially enabling unauthorized actions within the plugin. No spe...

CVE-2026-108493

The Pay for Payment for WooCommerce plugin (specifically the woocommerce-pay-for-payment component) is vulnerable to a Missing Authorization flaw (CWE-862) in versions up to and including 3.0.1 . This vulnerability allows for Exploiting Incorrectly Configured Access Control Security Levels , pote...

CVE-2026-108492

The Quick Paypal Payments plugin for WordPress (versions n/a through 6.0.3 ) is vulnerable to a Broken Access Control issue (CWE-862). The vulnerability stems from Missing Authorization , specifically allowing for the exploitation of incorrectly configured access control security levels within th...

get-pixels-updated

This is an updated version of get-pixels which patches the CVE-2020-8175 security issue. At the time of creation, every file is the same as the ones from the original repository, excluding the package.json. get-pixels-updated The following is from the get-pixels GitHub page. As mentioned before,...

linux-4.1.15_CVE-2018-5873

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

CLSA-2026-1791879447 TuxCare security update for org.springframework.ws (7 CVEs)

TuxCare rebuilt 6 org.springframework.ws packages to address 7 CVEs. Fixed in 3.1.6-tuxcare.2...

CLSA-2026-1791879222 TuxCare security update for org.springframework.ws (5 CVEs)

TuxCare rebuilt 6 org.springframework.ws packages to address 5 CVEs. Fixed in 4.0.14-tuxcare.2...

bughunters

bughunters.google.com resources This repository hosts resources aimed to help the Google Bug Hunting community conduct security research as part of Google's vulnerability reward programs featured at https://bughunters.google.com/. Google VRP Domain Tiers OSS VRP OSS VRP Repository Tier List Patch...

Cyber-Attack-Simulation-

Cyber-Attack-Simulation- Log4Shell CVE-2021-44228...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.42 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.42 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

cgi-printenv

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install cgi-printenv Run bellow command to check cgi-printenv -h Configurations 2. We integrated with the Telegram API to receive insta...

CVE-2018-14665

CVE-2018-14665 Here you can find my analisys and PoC for most used Linux distribution. For now i started from Redhat, this is the link for the official RHSA RHSA-2018:3410...

ROOT-APP-PYPI-CVE-2025-66471 CVE-2025-66471 in urllib3 - Patched by Root

Root has patched CVE-2025-66471 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

CVE-2026-103418

Firefox for iOS is vulnerable to a Universal XSS flaw because the browser directly interpolates the page’s HTML language attribute into translation JavaScript. This allows an attacker to execute code within the browser's privileged content world and bypass the page’s Content Security Policy . Thi...

CVE-2026-103418 Universal XSS via the HTML language attribute in Translation Services

Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability was fixed in Firefox for iOS 157.1...