1436982 matches found
BIT-TOMCAT-2026-65182 Apache Tomcat: Bypass longest prefix security constraint
Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1....
GHSA-FFG3-P8FM-MJX2 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-FFG3-P8FM-MJX2 vulnerabilities
Vulnerabilities for packages: open-webui, litellm...
LLM-MCP-Security-Field-Guide
🛡️ AI 보안 현장 가이드 — LLM + MCP 보안 LLM 애플리케이션 및 MCP모델 컨텍스트 프로토콜 배포를 위한 가장 포괄적이고 최신의 실무자 중심 보안 참고 자료입니다. 실제 CVE, 실시간 공격 패턴, OWASP 프레임워크, 레드팀 도구 및 실행 가능한 체크리스트를 다룹니다 — 매주 업데이트됩니다. 이 가이드가 존재하는 이유 AI 보안 환경은 20252026년에 극적으로 변화했습니다: 🔴 인증 없이 공개적으로 노출된 492개의 MCP 서버 Trend Micro, 2026 🔴 CVE-2025-6514 가...
ROOT-OS-DEBIAN-11-CVE-2026-55693 CVE-2026-55693 in vim - Patched by Root
Root has patched CVE-2026-55693 in the vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-43961 CVE-2026-43961 in vim - Patched by Root
Root has patched CVE-2026-43961 in the vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-34982 CVE-2026-34982 in vim - Patched by Root
Root has patched CVE-2026-34982 in the vim package for Root:Debian:11. Multiple fixed versions available...
SecAssessment-GapDetection-Thesis
D3FENDer - MITRE ATT&CK 및 D3FEND 프레임워크를 사용한 보안 평가 및 갭 탐지 도구 D3FENDer는 Michael이 자신의 논문 'MITRE ATT&CK 및 D3FEND 프레임워크를 사용한 보안 평가 및 갭 탐지 시스템 개발'을 위해 개발한 규칙 기반 CLI 도구입니다. 이 도구는 조직의 기존 방어 조치를 평가하고, 보안 갭을 식별하며, 다양한 공격 벡터를 탐지하고 MITRE ATT&CK 및 D3FEND 지식 베이스를 기반으로 완화 방안을 제안하도록 설계되었습니다. 이 프로젝트는 학술 논문의 일부이며...
CVE-2026-82838
The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set...
CVE-2022-37969
CVE-2022-37969...
CVE-2026-82631
A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys Subsystem. The manipulation results in use after free. The attack may be performed from remote. A high complexit...
CVE-2026-82838
Venueless 's default Docker image had a vulnerability where uploaded SVG files could be served with executable JavaScript content, potentially allowing stored XSS. The root cause was the absence of a proper Content Security Policy (CSP) in the image's default configuration. The fix sets a valid C...
EUVD-2026-68392
The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set...
CVE-2026-82838 Default webserver configuration with incorrect CSP
The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set...
Exploits
エクスプロイト Outflank B.V.のチームメンバーによって開発されたエクスプロイト...
cc.py
cc.py 根据 "commoncrawl.org" 的结果提取特定目标的 URL。 已更新至 v.0.3 | 更新内容： 处理速度快 65% 通过 -y/--year 指定年份，例如：-y 2018 通过 -o/--out 指定输出文件，例如：-o whatever.txt 为特定索引爬取所有页面 -i/--index，例如：cc.py army.mil -i CC-MAIN-2018-05 列出所有可用索引 -l/--list，例如：cc.py army.mil -l 待办事项 为特定索引爬取 实现多线程 允许输入年份范围 实现 direct-grep 临时文件写入 用法...
Laravel-Security
Laravel Security Laravel Security は Graham Campbell によって作成され、現在もメンテナンスされています。voku/anti-xss を Laravel 用にラップしたもので、graham-campbell/security-core を使用しています。変更ログ、リリース、セキュリティポリシー、ライセンス、行動規範、コントリビューションガイドライン をぜひご確認ください。 インストール このバージョンには PHP 8.0〜8.3 が必要で、Laravel 9〜11 をサポートしています。 最新バージョンを入手するには、Composer...
libsrtp
Introduction to libSRTP This package provides an implementation of the Secure Real-time Transport Protocol SRTP, the Universal Security Transform UST, and a supporting cryptographic kernel. The SRTP API is documented in include/srtp.h, and the library is in libsrtp2.a after compilation. This...