1437451 matches found
arp-scan
arp-scan About arp-scan is a network scanning tool that uses the ARP protocol to discover and fingerprint IPv4 hosts on the local network. It is available for Linux, BSD, macOS and Solaris under the GPLv3 licence. This is README.md for arp-scan version 1.10.1-git. Installation Building and...
CVE-2020-1472
CVE-2020-1472...
CVE-2026-84658
Jenkins Script Security Plugin versions 1412.v7737b_3405f86 and earlier are affected by an improper access control vulnerability (SECURITY-3986). The plugin uses the @DataBoundConstructor annotation on a constructor that loads script approval configuration but is not intended to be invoked by use...
CVE-2026-84659
Jenkins Script Security Plugin versions 1412.v7737b_3405f86 and earlier are affected by an improper access control vulnerability. A @DataBoundSetter annotated method controlling the "Force the use of the sandbox globally in the system" setting does not enforce a permission check, allowing an auth...
CVE-2026-84658
Jenkins Script Security Plugin 1412.v7737b3405f86 and earlier uses the @DataBoundConstructor annotation on a constructor that loads script approval configuration, allowing attackers able to submit certain forms to read that configuration...
EUVD-2026-70125
Jenkins Script Security Plugin 1412.v7737b3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the system" setting, allowing attackers to disable it through Stapler data binding...
EUVD-2026-70124
Jenkins Script Security Plugin 1412.v7737b3405f86 and earlier uses the @DataBoundConstructor annotation on a constructor that loads script approval configuration, allowing attackers able to submit certain forms to read that configuration...
CVE-2026-84659
Jenkins Script Security Plugin 1412.v7737b3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the system" setting, allowing attackers to disable it through Stapler data binding...
EUVD-2026-64336
NLTK: Default ENFORCE=False Disables All pathsec Security Controls...
uafuzz
UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 stati...
Tomcat-AJP-CVE-2020-1938
本プロジェクトは 00theway の魔改造版をベースにしています。...
behave
Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...
CVE-2026-25924
CVE-2026-25924 PoC - Kanboard 管理者RCE セキュリティコントロールバイパスによる管理者RCEの概念実証 開示: GHSA-grch-p7vf-vc4f を通じて私が最初に報告しました ⚠️ 許可されたペネトレーションテスト/研究目的のみで使用してください。 脆弱性情報...
kubescape v4.0.13
Kubescape Comprehensive Kubernetes Security from Development to Runtime Kubescape is an open-source Kubernetes security platform that pr...
CVE-2024-3773
The LiveJournal Shortcode WordPress plugin through version 1.1.1 fails to validate and escape certain shortcode attributes before outputting them in a page or post. This allows users with the Contributor role or above to inject arbitrary JavaScript, resulting in a Stored Cross-Site Scripting (XSS...
CVE-2026-27940
CVE-2026-27940...
ECHO-919E-C4AD-AAA6
Bulletin has no description...