302372 matches found
CVE-2022-35914
CVE-2022-35914 PoC References https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr https://github.com/cosad3s/CVE-2022-35914-poc Credit to Sébastien Copin for the PoC I adapted here Check out my full writeup here: https://link.medium.com/tBwDlpQl3Ib Usage pip install -r...
xwiki__xwiki-commons_CVE-2022-24897_12-6-6
XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...
CVE-2026-108551 openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates
openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...
CVE-2009-5147
CVE-2009-5147 and CVE-2015-7551 PoC to run it: make foo export FOO=./foo.so ruby -v foo.rb with different versions of ruby you should get different results: vpereira@kimura:/poc rvm use 2.1.7 vpereira@kimura:/poc ruby -v foo.rb ruby 2.1.7p400 2015-08-18 revision 51632 x8664-linux some trash fom...
hapifhir__org_hl7_fhir_core_CVE-2023-28465_5-6-1055
HAPI FHIR - HL7 FHIR Core Artifacts CI Status master --- !Build StatusBadge-BuildPipelineLink-AzureMasterPipeline This is the java core object handling code, with utilities including validator, for the FHIR specification. included in this repo: org.fhir.fhir.utilities: Shared code used by all the...
DEBIAN-CVE-2013-10076
ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call avextend av, len-1 . On an empty list, this undeflows, and avextend will allocate an array with 2^32 slots, leading to memory exhaustion...
Openssl_G2.5_CVE-2014-8275
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
CVE-2018-6574
This repository holds a PoC of the CVE-2018-6574 "go get RCE", that allowed to execute commands when downloading a 3rd party package. This could be done, as the cflags allowed to set an external library. In this PoC, the external library executes a command on the constructor...
ane
Asahi Neural Engine Reverse engineered Linux driver for the Apple Neural Engine ANE. All things Linux here. ane/: Kernel module ane.ko. Should move into tree soon. docs/: Documentation. WIP. Please don't look. libane/: Userspace lib. python/: Python bindings for libane...
OpenSSL_1_1_1_g
OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
CVE-2020-26258
Description XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, a Server-Side Forgery Request vulnerability can be activated when unmarshalling. The vulnerability may allow a remote attacker to request data from internal resources that are not...
Malicious code in @library-wide/library-shell (npm)
Source: ossf-package-analysis 40f52e7af5c6b8f0c78b5100b561b799fc6acd9fa9c5372982a14bb5c1b42da1 The OpenSSF Package Analysis project identified '@library-wide/library-shell' @ 99.9.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...
aco-prompt-shield
aco-prompt-shield 🛡️ Stop prompt injection attacks before they reach your LLM — zero API costs, runs entirely locally, integrates in 2 minutes. Prompt injection is the 1 security risk for LLM applications. aco-prompt-shield catches known jailbreak patterns, understands semantic intent via ML, and...
CLSA-2026-1791633202 TuxCare security update for postcss (4 CVEs)
TuxCare rebuilt postcss to address 4 CVEs. Fixed in 8.4.49-tuxcare.1...
openssl-1.1.1g_CVE-2021-23840
OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
Openssl-1.1.1g_CVE-2022-4304
OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
openssl-1.1.1g_CVE-2022-0778
OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
foolbox
home: true heroImage: /logo.png heroText: Foolbox tagline: "Foolbox: attacchi adversarial veloci per valutare la robustezza dei modelli di machine learning in PyTorch, TensorFlow e JAX" actionText: Inizia → actionLink: /guide/ features: title: Prestazioni native details: Foolbox 3 è basata su...
the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex
CVE-2026-68749 / CVE-2026-68750 — PoC Quadratic denial of service in htmlsanitizeex run of word chars with a trailing : CVE-2026-68750| HtmlSanitizeEx.Traverser.traverse/2| CWE-407 quadratic traversal| flat run of allowed sibling tags e.g. a × 20,000 CVE-2026-68749 is only reachable via html5/1 o...