chipwhisperer

ChipWhisperer Important Links Documentation | Labs | Forum | Store | NewAE ChipWhisperer 7.0: Revamped Analyzer, Project, SCA101 ChipWhisperer 7.0 is bringing major improvements to projects, analyzer, as well as a new online course, SCA101. These changes include: New Zarr based projects with...

timesketch

Timesketch Indice 1. Informazioni su Timesketch 2. Per iniziare 3. Community 4. Contribuire Informazioni su Timesketch Timesketch è uno strumento open-source per l'analisi collaborativa di timeline forensi. Utilizzando gli sketch, tu e i tuoi collaboratori potete organizzare facilmente le vostre...

EUVD-2026-96397

Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3...

authentik

What is authentik? authentik is an open-source Identity Provider IdP for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters. Our enterprise offering is available for organizations to securely replace existing...

Pentest-Collaboration-Framework

Pentest Collaboration Framework Pentest Collaboration Framework - un toolkit open source, multipiattaforma e portatile per automatizzare i processi di routine nell'esecuzione di vari lavori di test! Esplora la documentazione » ‼️ Link importanti Link | ---|--- 📖Guida all'installazione | 🌐Wiki...

CVE-2026-108164

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...

EUVD-2026-96319

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...

CVE-2026-108164 Open Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...

CVE-2026-108164

Open Source Social Network (OSSN) versions up to and including 10.1 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability in the components/OssnMessages/ossn_com.php component. This flaw allows authenticated users to bypass sender and recipient verification by requesting the ...

CVE-2026-108164 Open Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...

payloads

payloads Git All the Payloads! Eine Sammlung von Web-Angriffs-Payloads. Pull-Requests sind willkommen! Verwendung Führe ./get.sh aus, um externe Payloads herunterzuladen und komprimierte Payload-Dateien zu entpacken. Payload-Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...

pocsploit

pocsploit 中文 README pocsploit è un framework di verifica POC open source, leggero, flessibile e innovativo Punti critici del framework POC sul mercato 1. Ci sono troppi parametri, non so da dove iniziare, ma solo alcuni sono comunemente usati. 2. Il framework POC YAML come nuclei e xray non è...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, cert-manager, kubernetes, openbao, argo-cd, flux, grafana-alloy, kube-arangodb, loki, prometheus-adapter, spire-server, aactl, external-dns, grafana, flux-source-controller, opencost, filebrowser, rclone, cert-manager-webhook-pdns, k6, rancher,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, cert-manager, kubernetes, openbao, argo-cd, flux, grafana-alloy, kube-arangodb, loki, prometheus-adapter, spire-server, aactl, external-dns, grafana, flux-source-controller, opencost, filebrowser, rclone, cert-manager-webhook-pdns, k6, rancher,...

CVE-2026-104754

The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections Administrators by default to store JavaScript that executes in the session of any user who later open...

EUVD-2026-96120

The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections Administrators by default to store JavaScript that executes in the session of any user who later open...

CVE-2026-104754 Rank Math SEO < 1.0.280 - Admin+ Stored XSS via Redirection Source URL

The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections Administrators by default to store JavaScript that executes in the session of any user who later open...

CVE-2026-104754

The Rank Math SEO WordPress plugin (versions before 1.0.280 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to a failure to escape a stored redirection source value. An attacker with permissions to manage redirections (typically Administrators ) can inject malicious JavaScript that execu...

CLEANSTART-2026-XM40960 source-map-js through 1

Security vulnerability affects the n8n package. source-map-js through 1...

CLEANSTART-2026-CF02971 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Security vulnerability affects the argo-cd package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595...