social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

dependency-track

OWASP Dependency-Track Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials SBO...

cve-2026-25676

CVE-2026-25676 Research DLL Search Path Hijacking in M-Track Duo HD Installer Overview This repository contains initial research and a proof-of-concept related to CVE-2026-25676, a DLL search path hijacking vulnerability affecting the installer of M-Track Duo HD 1.0.0. The goal of this project is...

privacybadger

Privacy Badger Privacy Badger es una extensión de navegador que aprende automáticamente a bloquear rastreadores ocultos. Privacy Badger está creado por la principal organización sin fines de lucro de derechos digitales EFF para impedir que las empresas te espíen. Privacy Badger envía la señal...

VLC_CVE-2021-25804_Analysis

An AVI file can have multiple tracks. For example an audio track and a video track. In order to parse an arbitrary number of tracks VLC first must determine if a given track is finished and playable. Two variables are set up with this purpose in mind. Both named itrack. The variable psys...

sbom-sentinel

sbom-sentinel !CIhttps://github.com/MUGHEESM/sbom-sentine...

CVE-2026-82811

A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. The manipulation leads to origin validation error. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...

CVE-2026-82811

CVE-2026-82811 affects the Toggl Track Chrome extension (version 4.11.16 ). The vulnerability resides in the extension's postMessage Handler , which fails to properly validate message origins, allowing an attacker to accept forged session-state messages through an unauthenticated handler. The att...

EUVD-2026-68679

A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. The manipulation leads to origin validation error. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...

CVE-2026-82811 Toggl OÜ Toggl Track Extension postMessage origin validation

A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. The manipulation leads to origin validation error. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...

ripple20-digi-connect-exploit

استغلال Ripple20: Digi Connect ME 9210 المؤلفان: Moshe Kol, Shlomi Oberman يحتوي هذا المستودع على استغلال PoC لـ CVE-2020-11896، وهي ثغرة أمنية خطيرة من نوع تجاوز سعة المخزن المؤقت في الكومة heap-based buffer overflow في حزمة Track TCP/IP جزء من مجموعة ثغرات Ripple20. يحقق هذا الاستغلال تنفيذًا ع...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: x86/mm/pat: fixed the handling of VMPAT in COW mappings. The handling of VMPAT does not work correctly in COW mappings: the first PTE or, in fact, all PTEs can be replaced during write faults, causing them to point to anonymou...

CVE-2026-73386

Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 = 3.0.2 versions...

EUVD-2026-62387

Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 = 3.0.2 versions...

CVE-2026-73386 WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 = 3.0.2 versions...

CVE-2026-73386

The WordPress plugin "Track Geolocation Of Users Using Contact Form 7" through version 3.0.2 exposes sensitive data to unauthenticated users over the network (CVSS 7.5 HIGH, C:H/I:N/A:N). No exploitation status or remediation details are provided in the documents. Monitor for plugin updates. Patc...

GHSA-HJCP-JMPX-G3QM vulnerabilities

Vulnerabilities for packages: thingsboard, akhq, cloudwatch-exporter, sonarqube, opensearch, druid, dependency-track, trino, wavefront-proxy, nrjmx, logstash, cassandra-reaper, kserve-modelmesh, apicurio-registry...

CVE-2026-64607 vulnerabilities

Vulnerabilities for packages: thingsboard, akhq, cloudwatch-exporter, sonarqube, opensearch, druid, dependency-track, trino, wavefront-proxy, nrjmx, logstash, cassandra-reaper, kserve-modelmesh, apicurio-registry...

CVE-2026-54428 vulnerabilities

Vulnerabilities for packages: sonarqube, opensearch, pinot-fips, wavefront-proxy, logstash, airbyte-platform-fips, dependency-track-apiserver, apache-hop, elasticsearch, kserve-modelmesh, airbyte-server-fips, reposilite, nacos-docker, hadoop-fips, floci-az, logstash-fips, airbyte-server, druid,...