Dependency Scanning

Component for Dependency and License Scanning This component generates a CycloneDX Software Bill of Materials, which is used by GitLab to identify a project's dependencies, and their licenses. This CycloneDX Software Bill of Materials is compatible with the GitLab taxonomy. Additionally, this...

dependency-track

OWASP Dependency-Track Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials SBO...

CVE-2018-2628-MultiThreading

WebLogic WLS Core Component Deserialization Vulnerability CVE-2018-2628 Usage: Place the 'ip:port' to be detected into the url.txt file in the same directory. Then run: Modify the thread count at line 93 of code python CVE-2018-2628-MultiThreading.py Usage: Place the 'ip:port' to be detected into...

Invoke-PSObfuscation

Invoke-PSObfuscation Traditional obfuscation techniques tend to add layers to encapsulate standing code, such as base64 or compression. These payloads do continue to have a varied degree of success, but they have become trivial to extract the intended payload and some launchers get detected often...

CVE-2023-1177-rebuild

...

AutomatedLab

AutomatedLab...

CVE-2026-88038

creationtimestamp| type| source ---|---|--- 2026-09-10 12:20:57+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mv5zzxtm4c2j...

FACT_core

The Firmware Analysis and Comparison Tool FACT Contents Why FACT? Setup Usage Documentation Contribute Additional plugins Analysis Import/Export Presentations Social Acknowledgments License Why FACT? Firmware analysis can be used to achieve several interesting goals. Chief among those are...

https-nj.gov---CVE-2018-14040

https-nj.gov---CVE-2018-14040 Vulnearability Report of the New Jersey official site In Bootstrap prior to 4.1.2, XSS is possible in the main collapse data attribute. The data-target attribute and the data-parent attribute is vulnerable to Cross-Site Scripting attacks. Test RECOMMENDATION The fix...

CVE-2018-10388

This repository does not have a README...

CVE-2018-8032

Axis Apache eXtensible Interaction System ------------------------------------------- Welcome to Axis! You'll find documentation in the docs/ directory. Please read the release notes release-notes.html in this directory for details on the current release. Thanks from all of us on the Axis team fo...

CVE-2025-51868

CVE-2025-51868 Vulnerability description Dippyis a popular website to chat with millions of proactive AI characters. Dippy allows users to chat with characters based on LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to...

CVE-2026-75898

CVE-2026-75898 — RAGFlow Invoke component SSRF Server-Side Request Forgery CWE-918 in RAGFlow's agent workflow "Invoke" component, before 0.26.3...

log4j-log4shell-affected

log4j-log4shell-affected Lists of affected components and affected apps/vendors by CVE-2021-44228 aka Log4shell or Log4j RCE for security responders. We believe it is important to classify the vendors and products between: 1. Internal risk - what you need to patch first to remove risk internally ...

external_tcpdump_CVE-2018-14469

tcpdump To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the file CONTRIBUTING in the tcpdump source tree root. TCPDUMP 4.x.y Now maintained by "The Tcpdump...

CVE-2024-45265

CVE-2024-45265 Suggested description A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3132 allows remote attackers to execute arbitrary SQL commands via the psid parameter. Vulnerability Type CWE-89 | SQL Injection Vendor of Product SkySystem https://skyss.ru/...

CVE-2025-2135

CVE-2025-2135...

CVE-2021-40346

CVE-2021-40346...

CVE-2025-70545

PPC Belden ONT 2K05X router Author : Jeyabalaji Affected Product Code Base: PPC 2K05X Router - V1.1.9206L Tested on : Windows 11 CVE : CVE-2025-70545 Description: A stored cross-site scripting XSS vulnerability exists in the web management interface of the PPC Belden ONT 2K05X router running...

Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion

A directory traversal vulnerability in the givesight PowerMail Pro compowermail component 1.5.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1532 info: name: Joomla!...