snorby

Snorby github.com/Snorby/snorby github.com/Snorby/snorby/issues github.com/Snorby/snorby/wiki irc.freenode.net snorby Description Snorby est une application web Ruby on Rails pour la surveillance de la sécurité réseau qui s'interface avec les systèmes de détection d'intrusion populaires actuels...

RockLoader-source

Ce depot n’a pas de fichier README...

android_kernel_oneplus_avicii

OnePlus Nord avicii — исходный код ядра NeverSettle OnePlus Nord кодовое имя: avicii — первый нефлагманский смартфон верхнего среднего сегмента от OnePlus Technology Co., Ltd., выпущенный в 2020 году. Телефон доступен в 2 вариантах в зависимости от региона: AC2001 Индия и AC2003 Европа и глобальн...

cgiemail-exploit

Cgiemail - раскрытие исходного кода / эксплойт локального включения файлов cgiecho — скрипт, входящий в состав cgiemail, вернёт любой файл в пределах корня документов веб-сайта, если файл содержит квадратные скобки, а текст внутри скобок можно угадать. cgiemail в настоящее время поставляется с...

CVE-2026-94486 Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-94486 Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

SecureCivic

SecureCivic SecureCivic est une plateforme de vérification d'identité open source, construite par des citoyens, conçue pour permettre à la Social Security Administration SSA d'adopter un système de vérification moderne privilégiant la confidentialité. Elle élimine la dépendance aux courtiers priv...

CVE-2026-64561-Kernel-Fix

中文 | English 中文 Руководство по обновлению ядра Linux для устранения CVE-2026-64561 Дисклеймер: В этом материале описан лишь процесс устранения проблемы в моём серверном окружении; это не профессиональный анализ безопасности. Буду рад исправлениям, если найдёте неточности. I. Введение В этом...

armadito-av

Ядро Armadito ============= Armadito — это антивирус с открытым исходным кодом. Этот репозиторий содержит основную библиотеку Armadito, демон и службу. Copyright C Teclib', 2015, 2016 Домашняя страница проекта : http://www.teclib-edition.com/teclib-products/armadito-antivirus См...

FUCK-CDN

FUCK-CDN Исчерпывающими методами срываем покровы с CDN и находим реальный IP. Автоматизированный навык Skill для Claude Code, предназначенный для отслеживания источника CDN. Введите целевой домен — и он автоматически выполнит 40+ методов OSINT в порядке приоритета, построит цепочку доказательств ...

CLEANSTART-2026-MP17411 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...

Security vulnerability affects the consul package. Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...

CVE-2026-94485: Origin Validation Error

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

PT-2026-104378

Name of the Vulnerable Software and Affected Versions Next.js versions 16.0.0 through 16.3.7 Description The development server in this React framework for building full-stack web applications exposes a Model Context Protocol endpoint that does not reliably restrict cross-site requests. This allo...

Fedora 45 : buildstream (2026-d77557766a)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d77557766a advisory. CVE-2026-82331 CWE-59: tar source plugin symlink escape while fetching a malicious tarball Python = 3.12, so the packaged /usr/bin/bst was already using...

Grafana Labs 11.6.x < 12.4.12 / 13.0.x < 13.0.10 / 13.1.x < 13.1.7 / 13.2.x < 13.2.3 Missing Authorization (CVE-2026-81841)

The version of Grafana Labs installed on the remote host is 11.6.x through 12.4.x prior to 12.4.12, or 13.0.x prior to 13.0.10, or 13.1.x prior to 13.1.7, or 13.2.x prior to 13.2.3. It is, therefore, affected by a missing authorization vulnerability: - Pausing a shared public dashboard did not...

Give yourself room to be human

Welcome to this week's edition of the Threat Source newsletter. Fall is officially here in Maryland, and I can't be more relieved. I flourish in 50 degree weather, where it feels natural to burrow under blankets, knit sweaters, and listen to an audiobook. Beyond that, though, can I say that I'm...

postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

A flaw was found in PostCSS, a tool that processes CSS files. An attacker who provides specially crafted CSS input containing a malicious source map comment can cause the system to read arbitrary files from the local filesystem. This can lead to the disclosure of sensitive information, specifical...

BIT-AUTHENTIK-2026-94613 authentik: Denial of Service via Document Type Declarations in SAML Messages

authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an unauthenticated attacker can submit a malformed SAML message to an authentik deployment using SAML in either the identity-provider or SAML source role. The message can stop the worker handling...

BIT-AUTHENTIK-2026-94612 authentik: Authentication bypass via assertion confusion in SAML sources

authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an authentik SAML Source verifies an assertion's signature and validity period but does not ensure that the identity provider issued the assertion for that Source or in response to a login request from that...

CLEANSTART-2024-UG11230 WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support

Security vulnerability affects the exempi package. The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBPSupport...