EUVD-2026-90588

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

CVE-2026-103497

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

CVE-2026-103497

The JetBrains YouTrack application is affected by a Server-Side Request Forgery (sSRF) vulnerability in versions prior to 2026.2.19422 . The flaw exists within the GitHub VCS integration , potentially allowing an attacker to make requests from the server. No specific exploit details or proof-of-c...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 - チェッカー ここから 1. 最も簡単な確認方法は、以下を実行するだけです。 curl -Ls https://raw.githubusercontent.com/pentestfunctions/CVE-2024-3094/main/checker.sh | sh...

PoC-CVE-2025-62222

PoC: CVE-2025-62222 - GitHub Copilot Chat RCE このリポジトリは、脆弱性 CVE-2025-62222 の概念実証（PoC）を含んでいます。VS Code の GitHub Copilot Chat のコンテキストを操作し、コメント内に隠されたプロンプトインジェクションによって、開発者のマシンでリモートコード実行（RCE）を達成する方法を示しています。 ⚠️ 免責事項 ⚠️ 教育目的専用。...

001-Malware-Analysis-CVE-2017-11882

このリポジトリには README がありません。...

captain4554.github.io

このリポジトリには README がありません。...

gahoole77.github.io

이 저장소에는 README가 없습니다...

Rocky Linux 10.2 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc Multiple Vulnerabilities (crlsa-2026_19144)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619144 advisory. crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 golang:...

CVE-2026-103497: Server-Side Request Forgery (SSRF)

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

Rocky Linux 10.2 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc Multiple Vulnerabilities (crlsa-2026_62631)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202662631 advisory. mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header CVE-2026-42504 encoding/asn1: golang: Go encoding/asn1: Denial of...

Rocky Linux 10.1 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc (crlsa-2026_7992)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20267992 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Tenable has extracted the preceding description block directly from the CIQ security...

Autonomous OSS Threat Detection Via Taxonomy-Aligned LLMs

Open source software OSS ecosystems face growing threats from sophisticated supply chain attacks including typosquatting, dependency confusion, Trojan Source obfuscation, malicious build injection, and CI/CD pipeline poisoning. Existing detection approaches rely on signature-based tools and...

Rocky Linux 10.2 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc (crlsa-2026_27740)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202627740 advisory. crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 Tenable has extracted the preceding descripti...

Rocky Linux 10.1 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc (crlsa-2026_1715)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20261715 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding descripti...

soc-investigation-powershell-edrfreeze

PowerShell EDRFreeze 調査 LetsDefend ケーススタディ このリポジトリには、不審な PowerShell アクティビティ、GitHub でホストされたペイロード、EDRFreeze ツールの実行を含む LetsDefend シナリオに基づいた SOC 調査の記録が含まれています。 このリポジトリに含まれるもの 完全なレポート: report.md タイムライン: timeline.md 侵害指標: iocs.md MITRE ATT&CK マッピング: mitre.md 調査スクリーンショット: screenshots ケース概要 調査により、ホストが...

pedrocruz2202.github.io

此存储库没有 README。...

CVE-2026-102906

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...

Malicious code in bfox-build-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cae53348f8261653938b39ae3cb79101baff666c4216ecaeb635e34b42ba8293 At install time, setup.py harvests the installer's GitHub credential and uses it to modify the installer's own repository. The script reads...

CVE-2026-102906

The 0xshariq github-mcp-server is vulnerable to an OS command injection in the Git Remove MCP Tool component. The flaw exists within the child_process.exec function of the src/github.ts file, where manipulation of the File argument allows for remote code execution. The exploit is publicly availab...