CVE-2025-29927

CVE-2025-29927 Next.js CVE-2025-29927용 비동기 Python 스캐너입니다. aiohttp 및 aiofiles를 사용하여 대규모 URL 목록을 효율적으로 처리하고, 취약점을 탐지하며, 결과를 저장합니다. 연결 풀링, 캐싱 및 청크 처리를 통해 빠른 성능을 제공합니다...

sandbox

Concave AI サンドボックス AIコードを安全・高速・信頼せずに実行 Firecracker マイクロVM をベースとした、セルフホスト可能なコード実行サンドボックスプラットフォームです。スナップショットベースのウォームプーリングにより、200ms未満の起動時間を実現します。 概要 Concave は、信頼できないコードを実行するための、安全で隔離されたコード実行環境を提供します。Firecracker マイクロVM、gRPC オーケストレーション、最新のインフラツールを使用して構築されています。 ゴールデンスナップショットによる高速なVMプロビジョニング...

CallstackSpoofingPOC

コールスタックスプーフィング + 間接システムコール POC このプロジェクトは、EDR回避に焦点を当てたPOCである、シンプルなC++製のセルフインジェクションドロッパーで構成されています。これを実装するために、コールスタックを隠すための Windows Thread Pooling と、NTDLLでのフッキングを回避するための 間接システムコール の使用を組み合わせました。 2023-10-08-23-22-35-Trim image image image image...

craw

CRAW: Codec Robust Audio Watermarking Source code for CRAW , a robust audio watermarking method built on STFT-magnitude-domain embedding. An encoder embeds a binary message into an audio clip's magnitude spectrogram phase is preserved from the clean signal; a decoder recovers the message under a...

GHSA-V2J5-22FR-J62R AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins

Impact The fix for GHSA-vvp4-63h8-v5pm in 3.0.13 folded the authenticated principal into the HTTP/1.1 connection pool key, so that a connection one principal authenticated with NTLM, Kerberos or SPNEGO is not handed to another. It left three cases out. In each, a socket that one identity...

cp30_XXE_partial_fix

c3p0 c3p0は、成熟した、高度に並行処理可能なJDBCコネクションプーリングライブラリであり、PreparedStatementのキャッシュと再利用をサポートしています。これは、LGPL v.2.1 または EPL v.1.0 のいずれかのライセンスの下で提供されており、お客様の選択に委ねられています。 c3p0は現在githubでメンテナンスされています。 c3p0は、Sonatypeのオープンソースソフトウェアリポジトリに管理依存関係として利用可能で、groupId: com.mchange, artifactId: c3p0...

propox

Propox 🛡️🚀 Propox 는 Rust로 작성된 고성능, 안전하며 관찰 가능한 HTTP/HTTPS 프록시입니다. 고급 보안 메커니즘을 사용하여 악의적인 클라이언트로부터 적극적으로 방어하면서 높은 처리량의 트래픽을 처리하도록 설계되었습니다. ✨ 주요 기능 🚀 극한의 성능 최적화된 동시성 : 비차단 I/O를 위해 Tokio 와 Hyper 기반. Lock-Free 상태 : 핫 경로에서 락 경합을 제거하기 위해 DashMap 사용. 연결 풀링 : 백엔드 TCP 연결 재사용 Keep-Alive. 벤치마크 : 표준 모드 : 14,00...

CVE-2025-67733

RESP プロトコルインジェクション PoC Valkey/Redis の Lua スクリプトエラーメッセージを介した RESP プロトコルインジェクションの脆弱性を実証する概念実証です。 ファイル backend.py 共有 Valkey 接続（コネクションプーリング）を使用する Web アプリケーションを模した Flask バックエンド。 エンドポイント: メソッド| エンドポイント| 説明 ---|---|--- POST| /api/user/role| ユーザーロールを設定 GET| /api/user/role| ユーザーロールを取得 POST| /api/process|...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / dotnet / etc (crlsa-2022_0496)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20220496 advisory. dotnet: ASP.NET Core Krestel HTTP headers pooling denial of service CVE-2022-219862 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-devel / etc Multiple Vulnerabilities (crlsa-2026_5580)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20265580 advisory. mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21941 mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21948 mysql: InnoDB...

Rocky Linux 9 [CIQ] Security Update: mysql / mysql-common / mysql-debuginfo / mysql-debugsource / etc Multiple Vulnerabilities (crlsa-2026_4828)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264828 advisory. mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21941 mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21948 mysql: InnoDB...

Rocky Linux 8 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-devel / etc Multiple Vulnerabilities (crlsa-2026_6391)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266391 advisory. mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21941 mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21948 mysql: InnoDB...

Rocky Linux 10.1 [CIQ] Security Update: mysql8.4 / mysql8.4-common / mysql8.4-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_4162)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264162 advisory. mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21941 mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21948 mysql:...

Rocky Linux 9 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-devel / etc Multiple Vulnerabilities (crlsa-2026_5640)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20265640 advisory. mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21941 mysql: Optimizer unspecified vulnerability CPU Jan 2026 CVE-2026-21948 mysql: InnoDB...

AlmaLinux 9.6 [TuxCare] Security Update: mysql / mysql-common / mysql-devel / mysql-errmsg / mysql-libs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1773050223)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1773050223 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.44...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-5.0 / aspnetcore-targeting-pack-5.0 / etc (crlsa-2022_0495)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20220495 advisory. dotnet: ASP.NET Core Krestel HTTP headers pooling denial of service CVE-2022-219862 Tenable has extracted the preceding description block directly from the CIQ...

curl: libcurl: Unauthorized connection reuse due to a logical error

A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...

CVE-2026-93592

A flaw was found in vLLM. An unauthenticated attacker can exploit an input validation vulnerability by submitting negative token IDs to the /v1/embeddings and /pooling endpoints. This action triggers a CUDA device-side assertion, which poisons the GPU context and causes the engine to crash...

curl: libcurl: Unauthorized connection reuse due to a logical error

A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...

curl: libcurl: Unauthorized connection reuse due to a logical error

A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...