german-owasp-day

Немецкий OWASP день Сайт конференции German OWASP Day & архив презентаций Вы можете найти страницу по адресу god.owasp.de Пожалуйста, создайте папку для каждого года, а затем укажите перенаправление с главного индекса на эту папку...

MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting

paintballrefjosh/MaNGOSWebV4 4.0.8 contains a reflected XSS caused by unsanitized input in install/index.php step parameter, letting attackers execute arbitrary scripts in the victim's browser, exploit requires victim to visit a maliciously crafted URL id: CVE-2017-6478 info: name: MaNGOSWebV4...

OfficeWeb365 Indexs Interface - Arbitrary File Read

There is any file reading in the officeWeb365 Indexs interface. id: CVE-2024-37728 info: name: OfficeWeb365 Indexs Interface - Arbitrary File Read author: DhiyaneshDK severity: high description: | There is any file reading in the officeWeb365 Indexs interface. impact: | Unauthenticated attackers...

Vite dev server - Cross-Site Scripting

Vite's dev server, when used with appType: 'custom' and manually invoking server.transformIndexHtml using the unmodified request URL, is vulnerable to XSS via a crafted URL payload. If the HTML being served includes an inline module script ..., an attacker can inject a script via the URL,...

CVE-2026-103007

A flaw was found in Elasticsearch. An authorization flaw in delegated role-management permissions allows an authenticated user with delegated administrative access to escalate privileges. Because authorization checks fail to strictly enforce index scoping restrictions, a user with this privilege...

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

EUVD-2026-93937

Incorrect Authorization CWE-863 in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch contains an incorrect authorization weakness in a configurable, non-default privilege that lets a...

dirhunt

.. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/v0.2.0/images/dirhunt.png | .. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/pip-rating-badge/pip-rating-badge.svg :target: https://github.com/Nekmo/dirhunt/actions/workflows/pip-rating.yml :alt: Badge pip-rating .. image::...

google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a...

ROOT-APP-PYPI-CVE-2026-54280 CVE-2026-54280 in aiohttp - Patched by Root

Root has patched CVE-2026-54280 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-47265 CVE-2026-47265 in aiohttp - Patched by Root

Root has patched CVE-2026-47265 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-34993 CVE-2026-34993 in aiohttp - Patched by Root

Root has patched CVE-2026-34993 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-34518 CVE-2026-34518 in aiohttp - Patched by Root

Root has patched CVE-2026-34518 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-49082 CVE-2023-49082 in aiohttp - Patched by Root

Root has patched CVE-2023-49082 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-34520 CVE-2026-34520 in aiohttp - Patched by Root

Root has patched CVE-2026-34520 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

CVE-2026-98238

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate the netif index in t7xxccmnirecvskb The netif index carried in the DPMAIF PIT header is five bits wide, but ccmniinst only has room for NICDEVMAX 21 entries. t7xxccmnirecvskb indexes the array without a...

CVE-2026-105315

A flaw was found in django-haystack. This flaw allows a remote attacker to achieve arbitrary code execution on the hosting server by supplying crafted data to the search index. Due to improper input handling, the Elasticsearch backend unsafely evaluates raw search result values as executable code...

ROOT-APP-PYPI-CVE-2023-50782 CVE-2023-50782 in cryptography - Patched by Root

Root has patched CVE-2023-50782 in the cryptography package for Root:PyPI. Multiple fixed versions available...

PT-2026-107166

Incorrect Authorization CWE-863 in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch contains an incorrect authorization weakness in a configurable, non-default privilege that lets a...

BARE-AI: Bit-Flip Attack Resilience in AI Hardware through Built-In Performance Monitors

Deep Neural Networks DNNs are integral to many safety critical systems, yet they remain highly vulnerable to bit-flip attacks BFAs, where a few memory level perturbations can drastically degrade accuracy. Existing defenses incur significant hardware overhead, depend on retraining, or fail against...