Free Security Tools & CVE Database

Track CVE vulnerabilities, run security tools, and stay informed with expert cybersecurity guides.

🛡️ CVE Vulnerability Database (8,987+ CVEs tracked) Browse all →

🔴 Critical (831) 🟠 High (2,811) 🟡 Medium 🟢 Low 📅 2026

STER uses unencrypted TCP traffic to transmit data over the network. It allows an attacker to conduct a Man-In-The-Middle attack and obtain sensitive data such as passwords, personal data, or authentication tokens. This issue was fixed in version 9.5.

Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after analyzing how passwords with known values are encoded. This issue was fixed in version 9.5.

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the app...

CVE-2026-9011 7.5

The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.65. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated...

CVE-2026-8692 4.3

The Vedrixa Forms – User Registration Form, Signup Form & Drag & Drop Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it po...

CVE-2026-8684 5.3

The MotoPress Hotel Booking plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrite or de...

🏢 Browse CVEs by Vendor:

Google (134) Microsoft (115) Openclaw (110) Apache (89) Linux (81) Mozilla (80) Axiomthemes (58) Tenda (45)

🛠️ Security Tools View all →

Password Checker

Test your password strength

Password Generator

Generate secure passwords

Privacy Score Quiz

Rate your digital privacy habits

Phishing Detector

Analyze suspicious emails

Data Breach Info

What to do after a breach

Compare top VPN services

Encryption Strength

Evaluate algorithm security

Audit your WiFi settings

2FA support by service

Social Privacy Audit

Lock down your social accounts

📝 Latest Articles

I Switched 63 Accounts to Passkeys in Four Months and the Password Era Is Over — Here Is Exactly How to Do It

How-To Guides

I Switched 63 Accounts to Passkeys in Four Months and the Password Era Is Over — Here Is Exactly How to Do It

A hands-on guide to setting up passkeys on Google, Apple, Microsoft, banks, and social media — with real problems I hit and how to fix them.

Apr 6, 2026 8 min read

Your Cisco Server Has a 9.8 Severity Backdoor That Lets Anyone Reset the Admin Password Without Logging In — Here Is How to Check and Patch It Today

How-To Guides

Your Cisco Server Has a 9.8 Severity Backdoor That Lets Anyone Reset the Admin Password Without Logging In — Here Is How to Check and Patch It Today

CVE-2026-20093 lets attackers reset any Cisco IMC admin password without authentication. Here is the step-by-step guide to check your servers and patch before someone else does it for you.

Apr 5, 2026 6 min read

SparkCat Malware Is Hiding in Normal Apps and Scanning Your Photos for Crypto Wallet Recovery Phrases — Here Is How to Check If Your Phone Is Infected Right Now

How-To Guides

SparkCat Malware Is Hiding in Normal Apps and Scanning Your Photos for Crypto Wallet Recovery Phrases — Here Is How to Check If Your Phone Is Infected Right Now

Kaspersky found SparkCat trojan in App Store and Play Store apps. It uses OCR to scan your photo gallery for cryptocurrency seed phrases. Five steps to check your phone.

Apr 4, 2026 6 min read

766 Next.js Servers Just Got Robbed Blind by React2Shell — Here Is the Five-Step Scan I Ran Before My Coffee Got Cold

Threat Analysis

766 Next.js Servers Just Got Robbed Blind by React2Shell — Here Is the Five-Step Scan I Ran Before My Coffee Got Cold

CVE-2025-55182 lets attackers steal every credential your Next.js app touches. Cisco Talos found 766 compromised hosts. Here is exactly how I scanned my own infrastructure and what you should do right now.

Apr 3, 2026 6 min read

A Poisoned Python Package Just Exposed Thousands of Companies — Here Is How to Audit Every Open Source Dependency Before It Steals Your Cloud Keys

Threat Analysis

A Poisoned Python Package Just Exposed Thousands of Companies — Here Is How to Audit Every Open Source Dependency Before It Steals Your Cloud Keys

The LiteLLM supply chain attack hit Mercor and thousands of other companies through a single poisoned Python package. Here is a practical 5-step checklist to audit your open source dependencies before the next attack hits you.

Apr 2, 2026 8 min read

Cloudflare Turnstile Reads ChatGPT React State Before You Type a Single Word — I Decrypted What 55 Browser Properties It Collects

Privacy Tools

Cloudflare Turnstile Reads ChatGPT React State Before You Type a Single Word — I Decrypted What 55 Browser Properties It Collects

A security researcher decrypted 377 Cloudflare Turnstile programs and found ChatGPT fingerprints 55 browser properties including your GPU, fonts, and React app internal state.

Mar 30, 2026 5 min read