CVE-2026-74993

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Starnet Computer and Network Systems Inventory Tracking Application allows SQL Injection. This issue affects Inventory Tracking Application: through 2026-10-16...

CVE-2026-74993 SQL Injection in Starnet Computer Systems' Inventory Tracking Application

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Starnet Computer and Network Systems Inventory Tracking Application allows SQL Injection. This issue affects Inventory Tracking Application: through 2026-10-16...

CVE-2026-74993

The Starnet Computer and Network Systems Inventory Tracking Application contains an SQL injection vulnerability due to the improper neutralization of special elements used in an SQL command. This flaw allows an attacker to perform SQL injection attacks against the application. The vulnerability a...

CVE-2026-74993 SQL Injection in Starnet Computer Systems' Inventory Tracking Application

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Starnet Computer and Network Systems Inventory Tracking Application allows SQL Injection. This issue affects Inventory Tracking Application: through 2026-10-16...

EUVD-2026-115183

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Starnet Computer and Network Systems Inventory Tracking Application allows SQL Injection. This issue affects Inventory Tracking Application: through 2026-10-16...

Malicious code in wallet-tracking (PyPI)

Malicious package. wallet-tracking is a PyPI cryptocurrency-wallet information stealer. It collects wallet data on the victim host and exfiltrates it to an attacker-controlled Discord webhook. The source also still contains an unconfigured placeholder webhook URL .../api/webhooks/YOURURL beside t...

tomcat: Apache Tomcat: Denial of Service via HTTP/2 allocation leak

A flaw was found in Apache Tomcat. This vulnerability, an uncontrolled resource consumption issue, arises from an allocation leak in the HTTP/2 backlog tracking when a stream is reset. A remote attacker could exploit this to cause a Denial of Service DoS, making the server unresponsive or...

data-breach

Latest Data Breaches Repository This repository provides a comprehensive and continuously maintained list of confirmed data breaches from around the world. Each breach entry includes the breach name, which typically reflects the affected organization, along with the date of the incident. These tw...

PT-2026-135436

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Starnet Computer and Network Systems Inventory Tracking Application allows SQL Injection. This issue affects Inventory Tracking Application: through 2026-10-16...

CVE-2026-74993: Starnet Computer and Network Systems Inventory Tracking Application: Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Starnet Computer…

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Starnet Computer and Network Systems Inventory Tracking Application allows SQL Injection. This issue affects Inventory Tracking Application: through 2026-10-16...

CVE-Reverse

Reverse N Days!!! Just to keep track of all the CVE we find & reverse, should have done it way earlier xD...

securitylab

GitHub Security Lab This is the main git repository of GitHub Security Lab. We use it for these main purposes: We share with our community some best practices about security research and vulnerability disclosures in our docs We use issues on this repo to track CodeQL bounty requests. We use it fo...

no-gdid

no-gdid Read, understand, and silence the Windows Global Device Identifier GDID — the hidden per-account device ID that helped the FBI locate a suspect who was using a VPN. ⚠️ Honest disclaimer up front: this tool does not erase your GDID and does not make you anonymous. The GDID lives on...

dump1090

Dump1090 README Dump 1090 is a Mode S decoder specifically designed for RTLSDR devices. The main features are: Robust decoding of weak messages, with mode1090 many users observed improved range compared to other popular decoders. Network support: TCP30003 stream MSG5..., Raw packets, HTTP. Embedd...

traccar

Traccar Overview Traccar is an open source GPS tracking system. This repository contains Java-based back-end service. It supports more than 200 GPS protocols and more than 2000 models of GPS tracking devices. Traccar can be used with any major SQL database system. It also provides easy to use RES...

btrpa-scan

btrpa-scan A Bluetooth Low Energy BLE scanner with advanced Resolvable Private Address RPA resolution. Discover nearby BLE devices, track a specific device by MAC address, or resolve privacy-randomized addresses using an Identity Resolving Key IRK. Written by: David Kennedy @HackingDave Company:...

vuln-list-redhat

vuln-list-redhat Red Hat security advisories...

agentsh

agentsh macOS note: Native macOS enforcement via ESF Endpoint Security Framework + NE Network Extension is in Alpha. It works end-to-end — file, process, and network events flow through the system extension to the Go policy engine — but expect rough edges and breaking changes between releases. Fo...

whisper-pair

Fast Pair Vulnerability Scanner Security research tool for detecting Bluetooth accessories vulnerable to WhisperPair attacks 🌐 WhisperPair Research • 📦 Installation • 🚀 Usage • 🔬 Technical Details ⚠️ Disclaimer This tool is for authorized security testing and research only. Testing devices without...

Anthropic-Credited-CVEs

ANTHROPIC CVE TRACKER Overview Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by Project Glasswing. CURRENT CVE COUNT: 333 Fixed Anthropic Findings w/o CVE: 128 Findings Withdrawn by Anthropic: 243 Distributions | ---|--- Anthropic Research Tracking...