CVE-2026-93984

OpenPanel tracking API through commit bad75bddc74d12d36cfb843f4531d3b830a8d994 fails to verify client secret cryptographic hash before authorizing revenue events and bot filtering. Attackers with only a public client ID can supply arbitrary dummy secrets to inject forged revenue metrics and bypas...

CVE-2026-93984

OpenPanel tracking API, through commit bad75bddc74d12d36cfb843f4531d3b830a8d994 , fails to verify the client secret cryptographic hash before authorizing revenue events and bot filtering. An attacker possessing only a public client ID can supply arbitrary dummy secrets to inject forged revenue me...

EUVD-2026-83589

OpenPanel tracking API through commit bad75bddc74d12d36cfb843f4531d3b830a8d994 fails to verify client secret cryptographic hash before authorizing revenue events and bot filtering. Attackers with only a public client ID can supply arbitrary dummy secrets to inject forged revenue metrics and bypas...

CyberThreatIntel

CyberThreatIntel Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups Summary 2020-01-20 - Transparent Tribe APT 2020-01-03 - MAAS Terraloader 2019-12-28 - SideWinder same targets, same TTPs, time to counter-attack ! 2019-11-18 - APT33 continue to target US companies...

snapchange

Snapchange Lightweight fuzzing of a memory snapshot using KVM Snapchange provides the ability to load a raw memory dump and register state into a KVM virtual machine VM for execution. At a point in execution, this VM can be reset to its initial state by resetting the dirty pages found by KVM or...

CVE-2026-85271

Open edX Platform (versions from Redwood until Ulmo and Verawood.1) contains a stored CSS injection vulnerability in email digest notifications. The add_additional_attributes_to_notifications function in openedx/core/djangoapps/notifications/email/utils.py fails to sanitize discussion-title value...

EUVD-2026-83443

Open edX Platform enables the authoring and delivery of online learning at any scale. From Redwood until Ulmo and Verawood.1, the addadditionalattributestonotifications function in openedx/core/djangoapps/notifications/email/utils.py assigns notification content without sanitizing discussion-titl...

CVE-2026-85271 Open edX Platform: Stored CSS Injection in Email Digest Notifications via Unsanitized Thread Title (incomplete patch of CVE-2026-42857)

Open edX Platform enables the authoring and delivery of online learning at any scale. From Redwood until Ulmo and Verawood.1, the addadditionalattributestonotifications function in openedx/core/djangoapps/notifications/email/utils.py assigns notification content without sanitizing discussion-titl...

ransomwatch

ransomwatch 👀 🦅 ransomwatch 追踪勒索软件组织使用的勒索网站，并汇总呈现所有勒索声明 提交新组织时，请使用 issue 模板 ⚠️ ransomwatch.telemetry.ltd、posts.json、groups.json 以及 docs/ 和 source/ 目录中的内容，是基于真实世界威胁行为者的托管选择，以近乎实时的方式动态生成的。 尽管已采取净化措施，但通过查看或访问 ransomwatch，即表示您承认自行承担相关风险 如果您在商业平台中使用 ransomwatch，请考虑成为赞助者 💞 主要输出 web://...

ransomwatch

ransomwatch 👀 🦅 ransomwatch trails the extortion sites used by ransomware groups and surfaces an aggregated feed of claims please use the issue template when submitting new groups ⚠️ content withinransomwatch.telemetry.ltd, posts.json, groups.json alongside the docs/ & source/ directories is...

Blind-XSS-Manager

Blind-XSS-Manager Never forget where you inject. Description A Chrome extension that keeps track of the injected URL with Blind XSS payloads. It adds a unique value for each payload assigned to the URL and recorded by the extension when it gets coppied. The payloads are almost the same as the...

canarytokens-docker

Dockerized Canarytokens by Thinkst Applied Research Overview Canarytokens help track activity and actions on your network. If you have any issues please check out our FAQ over here, or create an issue and we'll try to get back to you as soon as possible. Table of Contents Code of Conduct...

trackers

Web tracking is the practice by which websites identify and collect information about users. This is generally in the form of some subset of web browsing history. With more of us now using streaming services, mobile devices, laptops, wearables and indeed Internet of Things IoT at home and at work...

CVE-2026-79713 Breeze Cache 1.2.5 - 2.5.14 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

CVE-2026-79713 Breeze Cache 1.2.5 - 2.5.14 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

EUVD-2026-82684

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

CVE-2026-79713

Breeze Cache (WordPress plugin, versions 1.2.5 through 2.5.14 ) is vulnerable to unauthenticated cache poisoning caused by a missing set of tracking-related query parameters in its page-cache key . Because pages requested with those parameters are still cached and served from the clean URL's cach...

gokart

GoKart - Análisis Estático de Seguridad para Go GoKart es una herramienta de análisis estático para Go que encuentra vulnerabilidades utilizando la forma SSA asignación única estática del código fuente Go. Es capaz de rastrear el origen de variables y argumentos de funciones para determinar si la...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

usbrip

usbrip heredado de "USB Ripper", no "USB R.I.P." es una herramienta forense simple con interfaz de línea de comandos que le permite rastrear artefactos de dispositivos USB es decir, historial de eventos USB en máquinas Linux. Índice: Descripción Inicio Rápido Demostración Estructura del Registro...