CVE-2021-4154

CVE-2021-4154 This bug was fix in https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b0462726e7ef281c35a7a4ae33e93ee2bc9975b This exploit works on most pre-patch kernels for: CentOS 8 kernels higher than linux-4.18.0-305.el8 Debian 11 kernels higher than 5.10.0-8 Fedor...

packages_apps_Settings_AOSP10_r33_CVE-2020-0188_CVE-0219

This repository does not have a README...

packages_apps_Nfc_AOSP10_r33_CVE-2020-0215

This repository does not have a README...

GroupPolicyBackdoor

GroupPolicyBackdoor GroupPolicyBackdoor is a python utility for Group Policy Objects GPOs manipulation and exploitation. GPO attack vectors can very often lead to impactful privilege escalation scenarios in Active Directory environments. And yet, offensive security professionals may be reluctant ...

[SECURITY] Fedora 45 Update: ocaml-psmt2-frontend-0.4.0-33.fc45

This package contains a library to parse and typecheck a conservative extension of the SMT-LIB 2 standard with prenex polymorphism...

OPENSUSE-SU-2026:11934-1 libIex-3_4-33-3.4.15-1.1 on GA media

These are all security issues fixed in the libIex-34-33-3.4.15-1.1 package on the GA media of openSUSE Tumbleweed...

Robustness of Local Energy Markets to Cyberattacks: Case Study of False Data Injection

Market clearing in community-based local energy markets relies on power demand and PV forecasts, making it vulnerable to coordinated false data injection FDI attacks. This paper proposes a bilevel optimization framework to identify worst-case bus-level FDI against interconnected multi-community...

CLSA-2026-1790089638 TuxCare security update for org.springframework (33 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 33 CVEs. Fixed in 5.3.9-tuxcare.1...

CLSA-2026-1790069975 TuxCare security update for org.springframework (33 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 33 CVEs. Fixed in 5.3.18-tuxcare.1...

CLSA-2026-1790069660 TuxCare security update for org.springframework (33 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 33 CVEs. Fixed in 5.3.19-tuxcare.1...

CLSA-2026-1790068919 TuxCare security update for org.springframework (33 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 33 CVEs. Fixed in 6.2.14-tuxcare.1...

CVE-2026-84304 affecting package telegraf for versions less than 1.31.0-33

CVE-2026-84304 affecting package telegraf for versions less than 1.31.0-33. An upgraded version of the package is available that resolves this issue...

CVE-2026-84445 affecting package telegraf for versions less than 1.31.0-33

CVE-2026-84445 affecting package telegraf for versions less than 1.31.0-33. An upgraded version of the package is available that resolves this issue...

CVE-2026-37236 affecting package telegraf for versions less than 1.31.0-33

CVE-2026-37236 affecting package telegraf for versions less than 1.31.0-33. A patched version of the package is available...

Claude-Skills-Governance-Risk-and-Compliance v1.9.0

Claude Skills for Governance, Risk & Compliance GRC Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, TSA Cybersecurity, ISO 42001 AI Management System, ISO 27701 Privacy Information Management, DORA Digital Operational Resilience, India's Digital...

Malicious Package

Overview aril-33 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CVE-2026-78605 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

CVE-2026-78605: Inconsistent Interpretation of HTTP Requests

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

OPENSUSE-SU-2026:11612-1 libIex-3_4-33-3.4.14-1.1 on GA media

These are all security issues fixed in the libIex-34-33-3.4.14-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2026-14017 Malicious code in bs58-33 (npm)

npm/bs58-33 is a typosquat of the popular bs58 base58 codec cryptocoinjs. The package contains no malicious code of its own: its src/cjs/index.cjs simply does require"base65-33x" and re-exports it. Its sole purpose is to pull in the malicious sink package base65-33x as a runtime dependency declar...