opentaint

The open source taint analysis engine for the AI era Formal taint analysis for application security — finds what AST-pattern matchers miss, lets LLM agents enact rules from vulnerabilities, scales where neither can alone. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dan...

btr

Branch Target Reuse BTR Artifacts This repository contains the artifacts for the paper "Branch Target Reuse: Practical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries" accepted at ACM CCS 2026. For more information about the BTR attack, see our project-page and our paper! bt...

cats

CATS documentation is available at https://endava.github.io/cats/ REST API fuzzer and negative testing tool. Run thousands of self-healing API tests within minutes with no coding effort! Comprehensive : tests are generated automatically based on a large number scenarios and cover every field and...

Orkes Conductor 3.21.21-3.30.1 - Remote Code Execution

Orkes Conductor from 3.21.21 before 3.30.2 is vulnerable to unauthenticated remote code execution. The INLINE workflow task evaluates a user-supplied JavaScript expression in a GraalVM context created with HostAccess.ALL, so an unauthenticated attacker can reflect from the bound input object to...

CVE-2026-58138

🚨 CVE-2026-58138 — Unauthenticated Remote Code Execution 🔥 Critical Unauthenticated Remote Code Execution in Conductor Affected versions:3.21.21 → 3.30.2 📌 Overview CVE-2026-58138 is a critical unauthenticated Remote Code Execution RCE...

CVE-2026-91402

Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Ent...

CVE-2026-91382

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr...

CVE-2026-91374

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr...

CVE-2026-91380

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr...

CVE-2026-91381

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition...

UBUNTU-CVE-2026-91403

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and...

CVE-2026-91417

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition...

CVE-2026-87290

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr...

CVE-2026-91335

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr...

CVE-2026-87294

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr...

CVE-2026-83380

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr...

CVE-2026-83376

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr...

CVE-2026-91461

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr...

CVE-2026-91403

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and...

CVE-2026-67340_exploit

CVE-2026-67340 — ArcadeDB JAVASCRIPT Trigger-Script RCE post-auth Post-authentication remote code execution in ArcadeDB a Java multi-model database via a JAVASCRIPT trigger that reaches host classes. A trigger's GraalVM polyglot engine is built with a host-class allow-list that includes java.lang...