LinusWare-Source-Code-Internal

Linusware 1.2 — Source Code & Engine Architecture Reconstructed, Reverse-Engineered & Documented by tekkenbugatti Target Platform: Linux x8664 / Luau / Roblox Runtime Engine Overview Linusware 1.2 is a native Linux x8664 runtime extension and execution engine for Roblox / Luau. This repository...

Nimbus Vestige

Nimbus Vestige NV Un motor de reconstrucción forense para la respuesta a incidentes en la nube y de identidad. Dada una telemetría fragmentada de la nube, SaaS e identidad — registros del plano de control, eventos de inicio de sesión, actividad de tokens y consentimiento — NV reconstruye cómo una...

Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access Digital Credentials

Summary Security vulnerabilities have been addressed in IBM Verify Identity Access Digital Credentials Vulnerability Details CVEID:CVE-2026-75899 DESCRIPTION: fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a secon...

CVE-2026-94534

lamp-cloud through 5.10.0 fails to validate user identity in PUT /anyone/baseInfo and PUT /anyone/avatar endpoints, allowing authenticated attackers to modify arbitrary user profiles. Attackers can supply target user IDs in request bodies to rewrite profile fields including nickname, ID card, sex...

keycloak__keycloak_CVE-2014-3656_1-0-5-Final

Gestión de identidad y acceso de código abierto Añada autenticación a las aplicaciones y proteja los servicios con el mínimo esfuerzo. No hay que ocuparse de almacenar usuarios ni de autenticarlos. Keycloak proporciona federación de usuarios, autenticación sólida, gestión de usuarios, autorizació...

CVE-2026-63329

Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to version 0.25.6 , the copy_server_request function in warpgate-protocol-http/src/proxy.rs forwards a client-supplied x-warpgate-username header before the authenticated username is injected via inject_own_headers. Be...

CVE-2026-63329 Warpgate: x-warpgate-username Header Not Stripped from Client Requests Enables Identity Spoofing to WebSocket Backend Targets

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.6, copyserverrequest in warpgate-protocol-http/src/proxy.rs forwards a client-supplied x-warpgate-username header before injectownheaders appends the authenticated username. Because the request builder preserves...

CVE-2026-63329 Warpgate: x-warpgate-username Header Not Stripped from Client Requests Enables Identity Spoofing to WebSocket Backend Targets

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.6, copyserverrequest in warpgate-protocol-http/src/proxy.rs forwards a client-supplied x-warpgate-username header before injectownheaders appends the authenticated username. Because the request builder preserves...

MAL-2026-16353 Malicious code in @insiderintelligence/componentlibrary (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4451c41559202c6bce3218de9af47cabe20288af5f3a9240076f25b3b2b5993 The package declares scripts.install: node index.js, so npm install auto-executes index.js which loads runtime/support/telemetry/probe/impl.js. That...

CVE-2020-25769

GOG Galaxy Local Privilege Escalation - CVE-2020-25769 GOG Galaxy 2.0 es una plataforma desarrollada por CD Project diseñada como tienda, entrega de software, red social y como un lanzador de juegos unificado. En Windows, el cliente depende del componente GalaxyClientService para manejar tareas...

CVE-2022-29464

CVE-2022-29464 CVE-2022-29464 es una vulnerabilidad crítica en WSO2 Identity Server, una plataforma de gestión de identidad y acceso de código abierto. La vulnerabilidad permite a atacantes remotos cargar archivos JSP maliciosos que pueden ejecutar comandos arbitrarios en el sistema objetivo con...

CVE-2026-71543

OpenBao , an open-source identity-based secrets management system, is vulnerable to privilege escalation and unauthorized certificate issuance prior to version 2.6.0. The root cause is that templated ACL , PKI , and SSH policies could substitute attacker-controlled identity data without rejecting...

ldapsdk

UnboundID LDAP SDK para Java Descargue la última versión del LDAP SDK aquí El UnboundID LDAP SDK para Java es una biblioteca Java rápida, potente, fácil de usar y completamente gratuita y de código abierto para comunicarse con servidores de directorio LDAP. Ofrece mejor rendimiento, mejor facilid...

Oracle-Identity-Manager-CVE-2025-61757

Herramienta de detección de vulnerabilidades CVE-2025-61757 para Oracle Identity Manager v2.2 🔥 Contexto de la vulnerabilidad Recientemente, Oracle Identity Manager ha revelado una grave vulnerabilidad de ejecución remota de código CVE-2025-61757. Esta vulnerabilidad se debe a un manejo inadecuad...

CVE-2022-22954

Análisis de CVE-2022-22954 Resumen Workspace ONE Access modelo de provisión de espacio de trabajo como servicio ofrece autenticación multifactor, inicio de sesión único y acceso condicional para SaaS, aplicaciones web y móviles. CVE-2022-22954 es una vulnerabilidad de Server-side Template Injecti...

Mandating-Honeypots-Project

Mandating-Honeypots-Project As laws like the Parents Decide Act H.R.8250 and California's Digital Age Assurance Act Assembly Bill 1043 move through legislative bodies, privacy, anonymity, and data security becomes laden with systemic threats and new security architecture with unexamined attack...

CVE-2026-94213

CVE-2026-94213 affects the Authorization Services component of Keycloak , an open-source identity and access management solution. The flaw resides in the policy evaluation endpoint , used by administrators to test how access policies apply to specific users. Due to missing authorization checks , ...

Malicious code in @baanx/solana-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6462ecac2764fc9cf78d47ee57fec1fd3d6a0cf573ee02eaddcc2e5b5f3f0d7e The package declares scripts.install = node index.js, so npm install @baanx/solana-lib automatically executes index.js, which loads lib/core.js. That...

CVE-2026-82842

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an attacker who can have the site's identit...

CVE-2026-82842: Improper Privilege Management

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an attacker who can have the site's identit...