11782 matches found
bbrecon
This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...
ossem-power-up
OSSEM データ品質を評価するツールです。素晴らしい OSSEM プロジェクトをベースに構築されています。 ミッション 「ATT&CK のテクニックをハンティングしたい。どのログソースやイベントが適しているか？」という質問に答える ログソースの強みと弱みの透明性を生み出す ログを簡単に評価する方法を提供する OSSEM Power-up 概要 Power-up は、データ品質評価の基盤として OSSEM Detection Data Model DDM を使用します。その主な理由は、ATT&CK Data Sources、Common Information Model のエンティティ...
SpiMitm
+OPTIONS: ^: SpiMitm - 用于反固件取证的 SPI flash 读取中间人（MitM）攻击 PoC 该 PoC 针对 https://up-board.org/upsquared/specifications/UP Squared。 使用方法 将所有文件复制到 edk2-platforms 文件夹后，按照 Alan Sguigna...
CVE-2025-7404-CalibreWeb-0.6.24-BlindCommandInjection
CVE-2025-7404-CalibreWeb-0.6.24-BlindCommandInjection CVE-2025-7404 エクスプロイト...
PT-2026-83638
Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp versions prior to 6.0.3 Description A heap-based buffer overflow occurs when manipulating the iNewIndex argument within the MD5Importer::MakeDataUnique function located in the code/AssetLib/MD5/MD5Loader.cpp...
WordPress Smart Marketing SMS and Newsletters Forms plugin <= 5.1.24 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Smart Marketing SMS and Newsletters Forms versions = 5.1.24...
CVE-2026-80716
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink sndpcmdrain on a linked stream parks an on-stack wait entry on the drained peer's runtime-sleep, and after scheduletimeout removes it only if that peer is still found in the caller's...
CVE-2026-78271
Editor Privilege Escalation in FluentCRM Pro = 3.1.12 versions...
CVE-2026-32550
Subscriber SQL Injection in Kadence Shop Kit = 3.0.6 versions...
EUVD-2026-66944
Unauthenticated SQL Injection in Beautiful Taxonomy Filters = 2.4.6 versions...
EUVD-2026-66664
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery SSRF vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...
CVE-2026-15365
A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app...
CVE-2026-15365
A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app...
EUVD-2026-66295
A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app...
CVE-2026-15365
CVE-2026-15365 affects vivo Kids Mode , where a pop-up logic flaw in a certain feature allows users to bypass password verification and access Quick Apps outside the app. The vulnerability requires a physical attack vector and is scored CVSS 4.0 Base 2.4 (LOW) , with low impact on confidentiality...
EUVD-2026-65160
Subscriber Broken Access Control in Style Kits = 2.6.5 versions...
CVE-2026-75421
CVE-2026-75421 is a stack-buffer-underflow in the IOFile::getLine() function of aria2 versions up to and including 1.37.0 . The flaw is triggered locally without privileges or user interaction, leading to a low availability impact (potential crash) with no confidentiality or integrity impact (CVS...
CVE-2026-28153
Unauthenticated Broken Access Control in Notification Master Real-Time WordPress Notifications With Email, SMS, Webhooks & More = 1.7.1 versions...
CVE-2026-28165
Unauthenticated Privilege Escalation in the WordPress Digits plugin (versions <= 9.2), discovered by VanTastic via Patchstack. The flaw requires no authentication or user interaction, is network-exploitable with low complexity, and carries a CVSS 9.8 (CRITICAL) score with high impact on confid...