EUVD-2026-68219

A flaw has been found in wger-project wger up to 2.6.0-alpha2. This issue affects the function resetuserpassword of the file wger/gym/views/gym.py of the component Password Reset. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. This...

CVE-2025-25461

📌 CVE-2025-25461 - Stored Cross-Site Scripting XSS in SeedDMS 6.0.29 📝 Description A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is...

CVE-2025-26202-Details

CVE-2025-26202-Details CVE-2025-26202: Cross-Site Scripting XSS in DZS Router Web Interface Description A Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in the DZS Router Web Interface. An authenticated attacker...

CVE-2026-82543

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function updatefileusage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

CVE-2026-82542

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out...

radar

Radar Radar is a small but efficient network scanner written in Rust heavily inspired by masscan. These are the main features: Userspace TCP, UDP, DHCP and ARP implementations, thanks to pnet Being asynchronous Randomized IP/ports scanning with no pre-allocation/shuffling Rate limiting Monitor mo...

CVE-2025-60751

CVE-2025-60751: GeographicLib Stack-based Buffer Overflow 📌 This repository contains the analysis and technical documentation of vulnerability CVE-2025-60751 , a stack-based buffer overflow flaw located in the C++ library GeographicLib. 📝 Description The vulnerability is located in the function...

CVE-2022-24654

CVE-2022-24654 PoC of CVE-2022-24654 - INTELBRAS ATA 200 Firmware 74.19.10.21 Authenticated stored Cross Site Scripting Steps to Reproduce: 1. Log in the equipment via your web browser 2. Go to Management Syslog 3. In the "Field Server Address" inject the payload "-prompt"XSS"-" 4. Click Save 5...

shirocrack

shirocrack Simple hash cracker for Apache Shiro hashes written in Golang. Useful for exploiting CVE-2024-4956. Let's keep this short CVE-2024-4956 is a path traversal vulnerability in Sonatype Nexus Repository that allows an unauthenticated attacker with network access to the server to read...

CVE-2025-32463

CVE-2025-32463 - Sudo Chroot Privilege Escalation Exploit Overview CVE-2025-32463 is a critical local privilege escalation vulnerability in sudo versions 1.9.14 through 1.9.17. This vulnerability allows attackers with sudo privileges to escalate to root access by exploiting a design flaw in the...

CVE-2026-82543 vastsa FileCodeBox Pickup Limit views.py update_file_usage race condition

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function updatefileusage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

EUVD-2026-68203

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function updatefileusage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

CVE-2026-82543

vastsa FileCodeBox (up to version 2.3) contains a race condition in the update_file_usage function located in apps/base/views.py, within the Pickup Limit Handler component. The vulnerability is exploitable remotely with no privileges required and no user interaction , yielding low impact on confi...

CVE-2026-82543 vastsa FileCodeBox Pickup Limit views.py update_file_usage race condition

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function updatefileusage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

CVE-2026-82543 vastsa FileCodeBox Pickup Limit views.py update_file_usage race condition

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function updatefileusage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

CVE-2026-82542 Tenda HG10 Boa Web Server formIPv6Routing buffer overflow

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out...

EUVD-2026-68200

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out...

CVE-2026-82542

A buffer overflow in the Boa Web Server component of Tenda HG10 (version 300001138) affects the function formIPv6Routing in the file /boaform/admin/formIPv6Routing. The overflow is triggered by manipulating the destNet argument and is exploitable remotely with no authentication required , yieldin...

grapefruit

Grapefruit: Open-source mobile security testing suite Runtime mobile application instrumentation toolkit powered by Frida. Inspect, hook, and modify mobile apps through a web-based interface. Now it supports both iOS and Android! Quick Start Requires Frida server running on your device. Follow th...

auth

Auth - Authentication and User Management by Supabase Auth is a user management and authentication server written in Go that powers Supabase's features such as: Issuing JWTs Row Level Security with PostgREST User management Sign in with email, password, magic link, phone number Sign in with...