CLEANSTART-2026-CF02971 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Security vulnerability affects the argo-cd package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595...

CVE-2026-108591: External Control of File Name or Path

InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with filescreate permission to read server files by abusing the AI Core MCP fileupload tool's source argument. Attackers can supply file:// or php:// stream wrappers passed to filegetcontents,...

CVE-2026-108164: Authorization Bypass Through User-Controlled Key

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossncom.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequentia...

CVE-2026-104754: Improper Neutralization of Input During Web Page Generation

The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections Administrators by default to store JavaScript that executes in the session of any user who later open...

PT-2026-117912

Security vulnerability affects the n8n package. source-map-js through 1...

CVE-2026-78015

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

EUVD-2026-95565

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-78015

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , is affected by a Use of Less Trusted Source vulnerability (CWE-348). An unauthenticated attacker with remote access could potentially exploit this flaw to cause information tampering . No specific exploit details or ...

CVE-2026-78015

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

raptor

Raptor es un escáner de vulnerabilidades de código fuente centrado en GitHub, basado en web servicio web + interfaz de usuario, es decir, escanea un repositorio con solo la URL del repositorio de GitHub. Puedes configurar webhooks para garantizar escaneos automáticos cada vez que realizas un comm...

pafish

Pafish Pafish es una herramienta de prueba que utiliza diferentes técnicas para detectar máquinas virtuales y entornos de análisis de malware, de la misma manera que lo hacen las familias de malware. El proyecto es gratuito y de código abierto; el código de todas las técnicas de anti-análisis est...

malice

malice La misión de Malice es ser una versión gratuita de código abierto de VirusTotal que cualquiera pueda usar a cualquier escala, desde un investigador independiente hasta una empresa Fortune 500. Pruébalo DEMOSTRACIÓN: demo.malice.io nombre de usuario : malice contraseña : ecilam Requisitos...

Maryam

OWASP Maryam OWASP Maryam es un marco de trabajo modular de código abierto basado en OSINT y recopilación de datos. Está diseñado para proporcionar un entorno robusto para recolectar datos de fuentes abiertas y motores de búsqueda de forma rápida y exhaustiva. Instalación Sistemas operativos...

reposaur

Reposaur Reposaur es la herramienta de cumplimiento de código abierto para plataformas de desarrollo. Audita, verifica y reporta tus datos y configuraciones fácilmente con políticas predefinidas y/o personalizadas. Soporta GitHub. Soporte para GitLab, BitBucket y Gitea próximamente. ⚠️ antes de...

abaddon

Abaddon Las operaciones de red team implican habilidades variadas, duran varios meses y son políticamente sensibles; requieren mucha monitorización, consolidación y precaución. El software de gestión de operaciones de red team de Wavestone, Abaddon, ha sido diseñado para hacer las operaciones de...

Source

Repositorio Fuente de LibreWolf Este repositorio contiene todos los parches y temas que componen LibreWolf, así como scripts y un Makefile para compilar LibreWolf. También está el repositorio de Configuración, que contiene las preferencias de LibreWolf. Resumen de LibreWolf graph LR FFSRCFirefox...

training-security-awareness

Free Security Awareness Training for Employees — Open Source Interactive SCORM Library 130+ free, open-source security awareness training exercises for employees — hands-on, interactive SCORM modules covering phishing awareness training, phishing simulation, GDPR training, EU AI Act compliance, A...

CLEANSTART-2026-VA40669 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...

CVE-2026-78015: Use of Less Trusted Source

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

Aiohttp HTTP Client Source Verification Confidential Data Access

The vulnerability of the Aiohttp HTTP client is related to a lack of mechanisms for verifying the source of the connection. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...