EUVD-2026-97261

A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file /auth/realms/default/protocol/openid-connect/logout of the component JWT Token Handler. Executing a manipulation of the argument idtokenhint can lead to use of get...

CVE-2026-108808

A vulnerability exists in Eleveo Call Recording Software up to version 10.3.0 within the JWT Token Handler component. Specifically, the file /auth/realms/default/protocol/openid-connect/logout is affected. By manipulating the id_token_hint argument, an attacker may cause the application to use th...

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code Execution

Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An...

Cisco Meraki Data Compromise

The vulnerability of Cisco Meraki network device software relates to incorrect calculations. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Cisco Meraki Buffer Overflow

The vulnerability of Cisco Meraki network device software relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Cisco Meraki Data Compromise

The vulnerability of Cisco Meraki network device software-related microprograms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of protected information...

CVE-2026-108808: Use of GET Request Method With Sensitive Query Strings

A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file /auth/realms/default/protocol/openid-connect/logout of the component JWT Token Handler. Executing a manipulation of the argument idtokenhint can lead to use of get...

PT-2026-110482

Name of the Vulnerable Software and Affected Versions Eleveo Call Recording Software versions prior to 10.3.1 Description An issue exists in the JWT Token Handler component within the file /auth/realms/default/protocol/openid-connect/logout. A remote attacker can manipulate the id token hint...

PT-2026-110492

Name of the Vulnerable Software and Affected Versions OTRS versions 7.0.X through 2026.6.X OTRS Community Edition versions 6.x and earlier Description User-controlled values are not sufficiently neutralized when included in CSV exports. Data submitted by authenticated users or received via extern...

CVE-2026-108809: Insufficient Session Expiration

A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects some unknown processing of the file /auth/realms/default/protocol/openid-connect/logout. The manipulation leads to session expiration. Remote exploitation of the attack is possible. The exploit is...

kin

Una nueva base para el código. Kin es un repositorio de código nativo de grafos para personas y agentes de IA. Almacena el código fuente, las relaciones de código registradas y el historial versionado como estado del repositorio. El grafo es el modelo del repositorio, no un índice de búsqueda...

radare2

Radare2: Libre Reversing Framework for Unix Geeks Current git master branch is 6.2.4, next release will be 6.2.5. Description r2 is a complete rewrite of radare. It provides a set of libraries, tools and plugins to ease reverse engineering tasks. Distributed under LGPLv3, despite each plugin can...

memguard

MemGuard Enclave de software para almacenar información sensible en memoria. Este paquete intenta reducir la probabilidad de que datos sensibles queden expuestos mientras están en memoria. Su objetivo es ser compatible con los principales sistemas operativos y está escrito en Go puro...

guac

GUAC: Gráfico para la Comprensión de la Composición de Artefactos Nota: GUAC está en desarrollo activo: si estás interesado en contribuir, consulta la guía para colaboradores. GUAC es un proyecto en incubación de OpenSSF bajo el Grupo de Trabajo de Integridad de la Cadena de Suministro. Gráfico...

slsa

SLSA "salsa" es Niveles de cadena de suministro para artefactos de software SLSA pronunciado "salsa" es un marco de seguridad desde el origen hasta el servicio, que brinda a cualquier persona que trabaje con software un lenguaje común para aumentar los niveles de seguridad del software y la...

systeminformer

System Informer Una herramienta gratuita, potente y multipropósito que te ayuda a monitorear los recursos del sistema, depurar software y detectar malware. Traído a ti por Winsider Seminars & Solutions, Inc...

awesome-privacy

A curated list of privacy-respecting apps, software, and providers 🌐 awesome-privacy.xyz CodeBerg Mirror | Submit an Addition | Raw data & API Intro Large data-hungry corporations dominate the digital world but with little, or no respect for your privacy. Migrating to open-source applications wit...

sdnpwn

¿Qué es sdnpwn? sdnpwn es un kit de herramientas y un framework para probar la seguridad de las Redes Definidas por Software SDN. Para más información, consulta este artículo: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Instalación Primero descarga sdnpwn usando git git clone...

pyfiscan

pyfiscan Informazioni Pyfiscan è uno scanner gratuito di vulnerabilità e versioni per applicazioni web e può essere utilizzato per individuare versioni obsolete di applicazioni web comuni su server Linux. Un caso d'uso tipico è quello dei provider di hosting che monitorano le installazioni dei lo...

oss-fuzz

OSS-Fuzz: Fuzzing Continuo per Software Open Source Il fuzz testing è una tecnica ben nota per scoprire errori di programmazione nel software. Molti di questi errori rilevabili, come il buffer overflow, possono avere serie implicazioni per la sicurezza. Google ha trovato migliaia di vulnerabilità...