no-gdid — Updated!

no-gdid Read, understand, and silence the Windows Global Device Identifier GDID — the hidden per-account device ID that helped the FBI locate a suspect who was using a VPN. ⚠️ Honest disclaimer up front: this tool does not erase your GDID and does not make you anonymous. The GDID lives on...

CVE-2026-18059

The PixelYourSite – Your smart PIXEL TAG & API Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.2.1 via the getWooPurchaseEventParams. This makes it possible for unauthenticated attackers to extract WooCommerce purchase metadata...

EUVD-2026-36589

@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag...

monitor v0.34.0

BetterDB Monitor The monitoring layer that Valkey deserves. BetterDB persists what Valkey throws away - slowlogs, command patterns, client activity, anomaly signals - so you can debug what happened at 3am, not just what's happening now. Built for Valkey 8.x with native support for COMMANDLOG,...

django-DefectDojo v3.1.303

DefectDojo | ---|--- DefectDojo is a DevSecOps, ASPM application security posture management, and vulnerability management tool. DefectDojo orchestrates end-to-end security testing, vulnerability tracking, deduplication, remediation, and reporting. Demo Pro Edition: pro.demo.defectdojo.com OWASP...

Top 7 Enterprise IT Asset Management Software for 2027

Compare 7 enterprise IT asset management platforms for 2027, covering security, automation, cost, compliance, lifecycle tracking and business requirements...

SUSE CVE-2026-35600

Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, task titles are embedded directly into Markdown link syntax in overdue email notifications without escaping Markdown special characters. When rendered by goldmark and sanitized by bluemonday which allows and tags,...

brave-browser v1.95.24

Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...

kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup

A flaw was found in the Linux kernel's netfilter subsystem, specifically within the nfconntrackhelper. When a connection tracking helper is unregistered, its associated expectations are not properly cleaned up. This oversight can lead to a use-after-free vulnerability, where the system attempts t...

CNVD-2022-60632

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:00+00:00| seen| https://t.me/CVEhub/2472 2026-07-29 12:01:01+00:00| seen| https://t.me/CVEhub/2204 2026-07-30 00:01:39+00:00| seen| https://t.me/CVEhub/2472 2026-07-30 00:01:40+00:00| seen| https://t.me/CVEhub/2204 2026-08-01...

brave-browser v1.95.16

Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...

Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave

Between January and June 2026, TrendAI™ tracked more than 35,000 fake sites exploiting the 2026 FIFA World Cup, spanning counterfeit merchandise shops, cloned ticket pages, and bogus free-streaming sites, which together drew roughly 1.48 million visits from Japan...

CVE-2026-12935: Stack-based Buffer Overflow

The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates a connection to a malicious RTSP server controlled by an attacker. A specially crafted RTSP message may trigger...

WordPress Advanced Shipment Tracking for WooCommerce plugin <= 3.9 - Authenticated (Shop Manager+) SQL Injection vulnerability

Authenticated Shop Manager+ SQL Injection vulnerability discovered by Nguyen Truong Roll in WordPress Plugin Advanced Shipment Tracking for WooCommerce versions = 3.9...

Tautulli Panel - Detect

A Python based monitoring and tracking tool for Plex Media Server. !/usr/bin/env python3 -- coding: utf-8 -- """A Python based monitoring and tracking tool for Plex Media Server.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Analytify <4.2.1 - Cross-Site Scripting Detection

WordPress Analytify 4.2.1 does not escape the current URL before outputting it back in a 404 page when the 404 tracking feature is enabled, leading to reflected cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Analytify 4.""" from kittysploit import from...

FirstPromoter - Detect

Detects FirstPromoter affiliate and referral tracking artifacts. !/usr/bin/env python3 -- coding: utf-8 -- """Detects FirstPromoter affiliate and referral tracking artifacts.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

pretix-tracking-scripts (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-18028 via pretix (>=2024.11.0, <=2026.2.2)

pretix PYPI version =2024.11.0, =1.0.0, =1.0.2 Source cves: CVE-2026-18028 Source advisory: MEND:CVE-2026-18028...

brave-browser v1.95.12

Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...

Malicious Package

Overview request-tracking-sqlite is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...