scorecard

OpenSSF Scorecard...

zaproxy

Checkmarx 的 Zed Attack Proxy ZAP 是全球使用最广泛的 Web 应用程序扫描器。 免费且开源。这是一个社区驱动的 GitHub Top 1000 项目，任何人都可以为其做出贡献。 它可以帮助您在开发和测试应用程序时自动发现 Web 应用程序中的安全漏洞。 对于经验丰富的渗透测试人员来说，它也是一款用于手动安全测试的出色工具。 !https://assets.kitploit.com/production/public/readmes/398/d136b5...

coreruleset

分支| 状态 ---|--- main| 🛡️ OWASP CRS OWASP CRS 是一套通用攻击检测规则，用于 OWASP ModSecurity、OWASP Coraza 或其他兼容的 Web 应用防火墙。CRS 旨在保护 Web 应用免受广泛攻击（包括 OWASP Top Ten），同时最大限度减少误报。 📚 CRS 资源、相关项目与工具 请访问 OWASP CRS 页面 了解 CRS 的入门介绍，获取安装、配置及使用 CRS 的资源。该页面还提供了 CRS 相关项目列表 以及适用于开发者和用户的 工具列表。 🤝 为 CRS 做贡献 我们努力让 OWASP CRS...

ROS-20260922-73-0042

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the TLS protocol implementation in the Linux operating system is related to incorrect access to elements of the structure. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality...

ROS-20260922-73-0049

The vulnerability of the ip6parsetlv function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260922-73-0047

The vulnerability of the dwc2hcdurbdequeue function in the driver module/dwc2/hcd.c of the Linux operating system’s USB device driver framework is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260918-73-0120

The vulnerability of the scarlett2usbgetconfig function in the sound/usb/mixerscarlett2.c module, which supports USB audio devices in Linux operating systems, is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the amdgpu_hmm_range_get_pages() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c driver for the Direct Rendering Infrastructure (DRI) of AMD GPU cores in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuhmmrangegetpages function in the drivers/gpu/drm/amd/amdgpu/amdgpuhmm.c driver for the Direct Rendering Infrastructure DRI of AMD GPUs in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an...

The vulnerability of the function ieee80211_invoke_fast_rx() in the module net/mac80211/rx.c, part of the mac80211 stack in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function ieee80211invokefastrx in the net/mac80211/rx.c module of the mac80211 stack in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the make_task_dead() function in the kernel/exit.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the maketaskdead function in the kernel/exit.c module of the Linux operating system’s kernel relates to the simultaneous release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the biovec_phys_mergeable() function in the block/blk.h module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the biovecphysmergeable function in the block/blk.h module of the Linux kernel is related to an incorrect definition of its internal state. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the pressure_write() function in the kernel/cgroup/cgroup.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pressurewrite function in the Linux kernel/cgroup/cgroup.c module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the net/netfilter/nft_set_pipapo_avx2.c module of the Linux kernel’s netfilter component, which allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the net/netfilter/nftsetpipapoavx2.c module of the Linux kernel’s netfilter component is related to a violation of expected behavior. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the...

ROS-20260826-73-0007

The vulnerability of the txmacroputdecenum function in the sound/soc/codecs/lpass-tx-macro.c module related to the Linux operating system’s SoC audio support is associated with out-of-buffer writing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the amdgpu_amdkfd_submit_ib() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c driver for AMD GPU cores in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuamdkfdsubmitib function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfd.c driver for AMD GPU cores in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerabilities of the functions nft_rbtree_gc_elem() and __nft_rbtree_insert() in the module net/netfilter/nft_set_rbtree.c of the netfilter component of the Linux operating system’s kernel allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions nftrbtreegcelem and nftrbtreeinsert in the net/netfilter/nftsetrbtree.c module of the netfilter component of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the...

Malicious code in @zalastax/nolb-cii (npm)

The package @zalastax/nolb-cii was found to contain malicious code...

MAL-2025-10911 Malicious code in @zalastax/nolb-cii (npm)

The package @zalastax/nolb-cii was found to contain malicious code...

SUSE SLED12 / SLES12 Security Update : libseccomp (SUSE-SU-2019:2941-1)

This update for libseccomp fixes the following issues : Update to new upstream release 2.4.1 : Fix a BPF generation bug where the optimizer mistakenly identified duplicate BPF code blocks. Updated to 2.4.0 bsc1128828 CVE-2019-9893: Update the syscall table for Linux v5.0-rc5 Added support for the...

NCIIPC: It's Time to Step Forward And Protect Our Critical Infrastructures from Cyber Attacks

The IT threat landscape has changed dramatically over the last three-four years. With no shortage of threat actors, from hacktivists to nation-states, criminals to terrorists, all of them are now after something new. It's no more just about stealing your money, credit cards and defacing websites,...