562 matches found
SecureCodingDojo
About the Secure Coding Dojo The Secure Coding Dojo is a platform for delivering secure coding training. While it comes with its own vulnerable training application the Insecure.Inc website the training portal can be used in conjunction with other training applications. The strength of the platfo...
ssh-audit
ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...
Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak System
Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2020-5258 DESCRIPTION: In affected versions of dojo NPM package, the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject...
Astra Linux – Vulnerability in dojo
All versions of the dojo package are vulnerable to Prototype Pollution through the setObject function...
rekono v2.0.0-1
Rekono combines other hacking tools and its results to execute complete pentesting processes against a target in an automated way. The findings obtained during the executions will be sent to the user via email or Telegram notifications and also can be imported in Defect-Dojo if an advanced...
Malicious code in dojo-rn-interview (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dcf2c659fc0c8b63b90671ae2a865a7811d5eeaaf321aab8355358117be47d [email protected] declares a preinstall script that runs index.js on npm install. The script collects host identifiers via os.hostname,...
MAL-2026-13549 Malicious code in dojo-rn-interview (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dcf2c659fc0c8b63b90671ae2a865a7811d5eeaaf321aab8355358117be47d [email protected] declares a preinstall script that runs index.js on npm install. The script collects host identifiers via os.hostname,...
EUVD-2026-48439
A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/apiv2/serializers.py of the component API/Web. Such manipulation of the argument isstaff leads to improper privilege management. The attack may be performed from remote. The...
Twin Agent: Context Residual Compression for Privilege Separated Agents
Large language model LLM agents are vulnerable to security risks, such as prompt injection attacks from untrusted context that manipulate downstream reasoning and tool use. Existing secure-by-design approaches mitigate this risk by separating untrusted observations from privileged execution and...
Security Bulletin: Vulnerability in Dojo affects IBM Integrated Analytics System[CVE-2021-23450]
Summary The Dojo package is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addresed the applicable CVE CVE-2021-23450. Vulnerability Details CVEID:CVE-2021-23450 DESCRIPTION: All versions of package dojo are vulnerable to Prototype Pollution via the setObject functio...
Security Bulletin: Security vulnerability has been identified in dojo library shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2018-1000665)
Summary Security vulnerability has been addressed in IBM Guardium Key Lifecycle Manager SKLM/GKLM Vulnerability Details CVEID:CVE-2018-1000665 DESCRIPTION: Dojo Dojo Objective Harness DOH version prior to version 1.14 contains a Cross Site Scripting XSS vulnerability in unit.html and...
CVE-2026-48547 KanaDojo < 0.1.18 Command Injection via patchNotesData.json in release.yml
KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into the version or changes fields of patchNotesData.json, which are interpolated unsanitized into a childprocess.execSync cal...
CVE-2026-48546 KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs
KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js vm.runInNewContext sandbox context in the issue-auto-respond.yml workflow. Attackers can submit a pull...
Kernel-Exploit-Dojo-248
Kernel-Exploit-Dojo-248 CTF kernel exploitation notes, PoCs,...
Kernel-Dojo-Labs
Kernel-Dojo Lab An interactive practice environment for the...
bryaktestgrid (>=0.0.1, <=0.0.6), dijit (>=1.11.0-rc1, <=1.11.5) +3 more potentially affected by unknown CVE via dojo (>=1.11.0-rc1, <=1.11.5)
dojo NPM version =1.11.0-rc1, =0.0.1, =1.11.0-rc1, =0.1.0, =1.11.0-rc1, =0.0.1, =0.5.24 Source cves: unknown CVE Source advisory: MEND:WS-2018-0168...
@agrc/helpers (>=1.0.0, <=1.0.1), @dojo/interop (>=4.0.0-alpha.1, <=7.0.0) +3 more potentially affected by unknown CVE via dojo (1.13.0)
dojo NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on dojo and may be impacted: - @agrc/helpers =1.0.0, =4.0.0-alpha.1, =0.1.10, =0.1.12 - dijit 1.13.0 - dojox 1.13.0 Source cves: unknown CVE Source advisory: MEND:WS-2018-0168...
dijit (>=1.9.8, <=1.10.7), dojox (>=1.9.9, <=1.10.3) +2 more potentially affected by unknown CVE via dojo (>=1.9.1, <=1.10.7)
dojo NPM version =1.9.1, =1.9.8, =1.9.9, =1.2.0, =0.3.0-alpha.1, =0.3.0-alpha.32 Source cves: unknown CVE Source advisory: MEND:WS-2018-0168...
dijit (>=1.12.1, <=1.12.3), dojox (>=1.12.1, <=1.12.3) potentially affected by unknown CVE via dojo (>=1.12.1, <=1.12.3)
dojo NPM version =1.12.1, =1.12.1, =1.12.1, =1.12.3 Source cves: unknown CVE Source advisory: MEND:WS-2018-0168...