1168 matches found
owasp-top10-2025-labs
OWASP Top 10:2025 — Labs Repositorio de portafolio: replica y...
CVE-2026-27875 Simplex Incident Manager Clear Test
Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data. This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05...
BIT-DJANGO-2026-15337 Potential denial-of-service vulnerability in check_for_language()
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
Extract Embedded ZIP (Zig)
Native in-memory ZIP extraction before callback !/usr/bin/env python3 -- coding: utf-8 -- """Extract an embedded ZIP archive before callback Zig emitter.""" from typing import Any, Dict from kittysploit import from core.payloadgeneration.prestage.emitters.zig import emitextractzip class...
PT-2026-79852
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.check for language is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
com.coiney:akka-rabbit-core_2.10 (0.3.0), com.coiney:akka-rabbit-core_2.11 (0.3.0) +7 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.3.3)
com.rabbitmq:amqp-client MAVEN version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.coiney:akka-rabbit-core2.10 0.3.0 - com.coiney:akka-rabbit-core2.11 0.3.0 - net.roboconf:roboconf-agent =0....
Akamai Valkey Managed Database: Real-Time Memory for Enterprise AI
Introducing Akamai Valkey Managed Database: a low-latency, in-memory data layer to optimize AI inference costs, accelerate RAG, and power real-time AI agents...
dyen macOS In-Memory Mach-O Loader
dyen is a macOS in-memory Mach-O dynamic library loader designed to execute a dylib using the stock Python interpreter without writing the decrypted Mach-O to disk or registering the payload with dyld. It supports encrypted standalone payloads and encrypted dylibs appended to otherwise valid cove...
PYSEC-2026-3757
opensslencrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is not shared across workers and is lost on server restart. Attackers can distribute authentication attempts across multiple server instances or retry immediately after a restart to bypass rate...
PYSEC-2026-3757
opensslencrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is not shared across workers and is lost on server restart. Attackers can distribute authentication attempts across multiple server instances or retry immediately after a restart to bypass rate...
CVE-2026-74799
SiYuan before 3.7.4 registers Go net/http/pprof debug endpoints including heap and goroutine dumps without authentication when --mode flag is not set to exactly prod. Attackers can access /debug/pprof/heap and related endpoints to extract in-memory secrets including AccessAuthCode and AI provider...
PT-2026-76598
SiYuan before 3.7.4 registers Go net/http/pprof debug endpoints including heap and goroutine dumps without authentication when --mode flag is not set to exactly prod. Attackers can access /debug/pprof/heap and related endpoints to extract in-memory secrets including AccessAuthCode and AI provider...
CVE-2026-74566
In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...
YAVIN: A Unified Architecture for Secure Edge Processing in Memory
Secure, private multi-tenant execution spanning processors, memory, and accelerators remains one of the most significant challenges in modern edge computing systems. Simultaneously, processing-in-memory PIM has emerged as an effective approach for reducing the Von Neumann bottleneck by moving...
TinyLoad v7.3
TinyLoad v7.3 - PE packer for windows TinyLoad is an pe crypter/packer for x64 executables it packs an input exe with varying protection layers to prevent it from being reverse engineered. Its 1 single .cpp file and does not have any external dependencies. how it works TinyLoad appends your paylo...
LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores
SummaryThe Postgres and SQLite stores persist hierarchical namespaces as a dot-joined string "memories", "alice" becomes memories.alice and scoped reads by matching that string with LIKE '%'. Because LIKE has no notion of the . separator, a scoped search or listnamespaces also matched sibling...
Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Rejetto Http_File_Server
CVE-2024-23692 - Rejetto HFS Remote Code Execution RCE A ta...
GHSA-47PJ-3JCM-6WHG LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores
Summary The Postgres and SQLite stores persist hierarchical namespaces as a dot-joined string "memories", "alice" becomes memories.alice and scoped reads by matching that string with LIKE '%'. Because LIKE has no notion of the . separator, a scoped search or listnamespaces also matched sibling...
Fritter v1.3
Fritter The evasive cousin of Donut. Fritter is a heavily modified fork of TheWover and Odzhan's Donut shellcode generator. It generates position-independent shellcode for in-memory execution of VBScript, JScript, EXE, DLL, and .NET assemblies, with a focus on evasion and signature resistance. Th...
CVE-2026-15337
A flaw was found in Django. A remote attacker could trigger a denial-of-service DoS condition by sending many distinct, very long language codes to the django.utils.translation.checkforlanguage function. These codes are stored in an in-memory cache, leading to excessive memory consumption. While...