tinfoleak

tinfoleak La herramienta de código abierto más completa para el análisis de inteligencia en Twitter Introducción tinfoleak es una herramienta de código abierto dentro de las disciplinas OSINT Inteligencia de Fuentes Abiertas y SOCMINT Inteligencia de Redes Sociales, que automatiza la extracción d...

mud-visualizer

Visualizzatore di Manufacturer Usage Description MUD Attenzione: mud-visualizer è attualmente in beta. Usalo a tuo rischio. Questo strumento può essere utilizzato per visualizzare i file MUD in formato JSON. Indice Motivazione Installazione Astrazioni MUD supportate Contributi Supporto Citazione...

CVE-2026-98323

A flaw was found in the Linux kernel's Software iWARP siw Remote Direct Memory Access RDMA driver. When handling extended protocol headers split across multiple network packets, the driver incorrectly calculates the remaining length during the copy operation, leading to an out-of-bounds memory...

yari

YARI - YARA Interattivo Debugger interattivo per il linguaggio YARA scritto in Rust. Il debugger chiama direttamente libyara evitando l'emulazione per ottenere i risultati più accurati. 🚀 Funzionalità: Chiamare funzioni dai moduli Ottenere il valore delle costanti dei moduli Valutare espressioni...

CVE-2026-92085

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Management Software: before V16.0.1...

CVE-2026-92085

The Talassoft Industrial Management Software by TMT Machinery Industry and Trade Co. Ltd. contains a Stored XSS vulnerability (CWE-79) caused by improper neutralization of input during web page generation. This issue affects versions before V16.0.1 . Attackers could potentially execute malicious ...

CVE-2026-92085 Stored XSS in TMT Machine's Talassoft Industrial Management Software

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Management Software: before V16.0.1...

EUVD-2026-95775

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Management Software: before V16.0.1...

CVE-2026-98212

A flaw was found in the Linux kernel's MultiMediaCard MMC host software queue. A local user could exploit a use-after-free vulnerability when pending retry operations are not cancelled before device removal, allowing tasks to access memory after it has been released. This issue can lead to a Deni...

swsim

swSIM Il progetto deve essere clonato in modo ricorsivo. Scaricare il file ZIP non è sufficiente. swSIM è una scheda SIM completamente software. È il primo simulatore di scheda SIM disponibile pubblicamente per quanto ne so che non dipende da alcun hardware SIM per funzionare. Ambito Un simulator...

ROOT-OS-UBUNTU-2204-CVE-2025-38348 CVE-2025-38348 in linux - Patched by Root

Root has patched CVE-2025-38348 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-64303 CVE-2026-64303 in linux - Patched by Root

Root has patched CVE-2026-64303 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

csw-slides-2024

Developing Secure Software in 2024 Abstract As humanity increases its dependence on computer systems, the need for safe and secure software becomes paramount. Today, everything from planes, trains, and automobiles to toothbrushes and cooktops contain a multitude of tiny computers. Each of these...

widevine-l3-decryptor

Advertencia de deprecación Este repositorio solía contener código para eludir el DRM L3 de Widevine en Chrome en máquinas Windows. Ya no funciona a partir del 31 de mayo de 2021, pero puedes leer el informe de reversión. Actualización Google emitió una solicitud de eliminación por DMCA contra la...

PT-2026-108898

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Management Software: before V16.0.1...

Cisco NX-OS Software NX-API RCE (cisco-sa-napi-rce-r2shwu2j)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A heap-based buffer overflow condition exists in the NX-API feature due to insufficient input validation of data sent to the NX-API. An unauthenticated, remote attacker can exploit this, by sending a...

CVE-2026-78835

The Rocket Software Rocket Remote Desktop version 18.0.8583.1 is vulnerable to Insufficiently Protected Credentials (CWE-522). This security weakness allows for unauthorized access or data exposure due to inadequate protection of sensitive information. The vulnerability is reported with a CRITICA...

CVE-2026-92085: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Management Software: before V16.0.1...

CVE-2026-94444

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to connect to can serve an arbitrary module in its place. We now unpack the trusted ziphash for the bundled golang.org/fips140 module and...

Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (September 2026 - Part 2 of 2)

Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2026-69153 DESCRIPTION: PostCSS takes a CSS file and provides an API to...