239 matches found
CVE-2024-23741
CVE-2024-23741 An issue in Hyper through 3.4.1 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. There is a tool designed to automate the process of searching for vulnerabilities in electron:...
heapinspect
HeapInspect Pwnning is an art. HeapInspect is designed to make heap much more prettier. Now this tool is a plugin ofnadbg. Try it! Features Free of gdb and other requirement Multi glibc support 2.19, 2.23-2.27 currently tested both 32bit and 64bit Nice UI to show heap HeapShower detailed...
AZL-98220 CVE-2026-75758 affecting package elixir 1.16.1-2
Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to inspect/1, List.tostring/1, or List.tocharlist/1 to exhaust a BEAM node's memory. Inspect.List's charlist branch in lib/elixir/lib/inspect.ex classifies a list as a charlist using...
CVE-2026-75758
Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to inspect/1, List.tostring/1, or List.tocharlist/1 to exhaust a BEAM node's memory. Inspect.List's charlist branch in lib/elixir/lib/inspect.ex classifies a list as a charlist using...
EUVD-2026-67707
Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to inspect/1, List.tostring/1, or List.tocharlist/1 to exhaust a BEAM node's memory. Inspect.List's charlist branch in lib/elixir/lib/inspect.ex classifies a list as a charlist using...
CVE-2026-75758
Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to inspect/1, List.tostring/1, or List.tocharlist/1 to exhaust a BEAM node's memory. Inspect.List's charlist branch in lib/elixir/lib/inspect.ex classifies a list as a charlist using...
PT-2026-83142
Name of the Vulnerable Software and Affected Versions Elixir versions 1.15.0-rc.0 through 1.18.4 Elixir versions 1.19.0-rc.0 through 1.19.5 Elixir versions 1.20.0-rc.0 through 1.20.3 Description An uncontrolled recursion issue in the standard library allows an attacker who controls a list passed ...
CVE-2024-23740
CVE-2024-23740 Un problema in Kap fino alla versione 3.6.0 su macOS permette a un attaccante remoto di eseguire codice arbitrario tramite le impostazioni RunAsNode e enableNodeClilnspectArguments. Esiste uno strumento progettato per automatizzare il processo di ricerca di vulnerabilità in Electro...
inspect_petri
Inspect Petri Benvenuto in Inspect Petri, un agente di auditing che permette il monitoraggio automatizzato e l'interazione con modelli linguistici per rilevare potenziali problemi di allineamento, reward hacking e altri comportamenti preoccupanti. Petri ti aiuta a testare rapidamente ipotesi di...
CVE-2024-23742
CVE-2024-23742 Un problema in Loom fino alla versione 0.196.1 su macOS consente a un attaccante remoto di eseguire codice arbitrario tramite le impostazioni RunAsNode e enableNodeClilnspectArguments. Con questo strumento possiamo verificare se l'App è vulnerabile: Dopo la validazione, possiamo...
CVE-2026-75485 Must-gather: must-gather: cluster proxy object dumped raw, bypassing inspect redaction of proxy basic-auth credentials
A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. The cluster Proxy object is dumped in raw form, bypassing the oc inspect redaction that would normally sanitize sensitive fields. This exposes proxy basic-auth credentials in the must-gather...
SUSE CVE-2026-40090
Zarf is an Airgap Native Packager Manager for Kubernetes. Versions 0.23.0 through 0.74.1 contain an arbitrary file write vulnerability in the zarf package inspect sbom and zarf package inspect documentation subcommands. These subcommands output file paths are constructed by joining a...
CVE-2026-66919
Pivotick contains a cross-site scripting vulnerability in the inspect and edit node modals. Node labels and descriptions originating from graph data were interpolated directly into HTML used to construct the modal headers. An attacker able to supply or modify graph data could insert a malicious...
[SECURITY] Fedora 43 Update: skopeo-1.22.2-2.fc43
Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...
[SECURITY] Fedora 44 Update: skopeo-1.22.2-2.fc44
Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...
CVE-2026-6423
A local privilege escalation vulnerability in ESET Inspect Connector. The vulnerability was caused by improper authentication in an IPC channel...
EUVD-2026-44895
A local privilege escalation vulnerability in ESET Inspect Connector. The vulnerability was caused by improper authentication in an IPC channel...
CVE-2026-6423
CVE-2026-6423 concerns a local privilege escalation in the ESET Inspect Connector caused by improper authentication on an ALPC IPC channel. The CVSS 4.0 vector (AV:L/AC:L/PR:L/UI:N/ATT:N/VC:H/VI:H/SA:N/SI:N/VA:H) yields a base score of 8.5 (HIGH). Reported impact indicates elevated confidentialit...
CVE-2026-6423 Local privilege escalation via unauthenticated ALPC in ESET Inspect Connector
A local privilege escalation vulnerability in ESET Inspect Connector. The vulnerability was caused by improper authentication in an IPC channel...
CVE-2026-13763
Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only a partial body is inspected. This iss...