kit-oauth

kit-oauth 用于Kit应用程序的OAuth 2.0客户端库 TOC 文件 文件| 描述 ---|--- .editorconfig| 编辑器格式配置 .gitignore| 构建产物和依赖的Git忽略规则 .tool-versions| asdf工具版本（Zig, Kit） LICENSE| MIT许可证文件 README.md| 本文件 examples/client-credentials.kit| 客户端凭据示例（模拟运行） examples/github.kit| GitHub授权码示例（模拟运行） kit.toml| 包清单（包含元数据、能力和任务）...

kit-policy

kit-policy 一个灵活、可组合的授权框架，适用于Kit，灵感来自Ruby的Action Policy。 TOC 文件 文件| 描述 ---|--- .editorconfig| 编辑器格式配置 .gitignore| 构建产物和依赖的Git忽略规则 .tool-versions| asdf工具版本 Zig, Kit LICENSE| MIT许可证文件 README.md| 本文件 examples/blog-policy.kit| 博客授权示例 kit.toml| 包含元数据、任务和lint配置的包清单 src/core.kit| 核心授权辅助函数 src/error.kit|...

kit-jwt

kit-jwt 用于Kit的JSON Web Token JWT 编码与解码 TOC 文件 文件| 描述 ---|--- .editorconfig| 编辑器格式配置 .gitignore| 构建产物和依赖的Git忽略规则 .tool-versions| asdf工具版本（Zig, Kit） LICENSE| MIT许可证文件 README.md| 本文件 examples/basic.kit| 基本HS256使用示例 kit.toml| 包含元数据、功能和依赖的包清单 src/jwt.kit| JWT编码、解码、验证和辅助API zig/jwtrsa.zig|...

koyane-framework

Koyane-Framework :: 词表锻造与分析工具包（早期阶段） | | / /| |\ \ / / / \ | \ | || | | || \ / \ | / || || | | || || | | / / | |/ / | | | | \ V / / /\ | | || | | | | |/ // /\ | . . || | | | | || | | || |/ /| |/ / | \ | | | | \ / | || . || | ||| | | / | || |/| || | | |/| || | | || / | \ | |\ \ / / | | | |...

PT-2026-107643

Name of the Vulnerable Software and Affected Versions Excelize versions 2.1.0 through 2.11.0 Description This issue occurs when the library processes a crafted worksheet containing an oversized row number following a valid row. The Rows.Columns function accepts a look-ahead row number that exceed...

PT-2026-107647

Name of the Vulnerable Software and Affected Versions Excelize versions 2.8.1 through 2.11.0 Description In the Excelize Go library, the ANCHORARRAY function recursively calls the exported CalcCellValue function. This process creates a new calculation context at each cycle, which bypasses iterati...

PT-2026-107642

Name of the Vulnerable Software and Affected Versions Excelize versions 2.8.1 through 2.11.0 Description This issue occurs when separately parsed pivot-table field indices are used to index the pivot-cache field-name slice without bounds checks. The extractPivotTableFields function uses the outpu...

PT-2026-107646

Name of the Vulnerable Software and Affected Versions Excelize versions 2.3.1 through 2.11.0 Description The extractPart function allocates a byte slice using a CFB directory-entry size provided by the user before validating the sector chain or size domain. Specifically, the function trusts the...

CVE-2026-105800

A flaw was found in i18next-http-backend. A remote attacker can supply crafted language or namespace values to applications configured with custom translation path templates that begin directly with placeholders. This manipulation causes the application to generate unintended external web...

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

Overview A critical Arbitrary Code Execution ACE vulnerability exists in the Knowns Language Server Protocol LSP detection and startup pipeline. The system blindly trusts the settings.lsp.languages..binary field defined in the project-level .knowns/config.json file. Because this field is never...

CVE-2026-77050

A flaw was found in Django. A remote, unauthenticated attacker could cause a Denial of Service DoS by submitting requests containing numerous distinct, excessively long language codes. Because Django's translation component caches these codes in memory without length restrictions, continuous...

CVE-2026-2586

经过身份验证的GlassFish EL注入RCE（CVE-2026-2586） GlassFish管理控制台中存在一个表达式语言注入漏洞，允许经过身份验证的用户将恶意的EL表达式注入到管理Web界面处理的参数中。成功利用该漏洞可能导致在受影响服务器上远程执行命令。 该漏洞在服务器虚拟配置编辑流程中被发现，在此流程中，用户可控的参数被应用程序不安全地解释。 原因如下： 管理界面在处理EL表达式时使用了用户可控的参数。 输入在后端解释之前未经过适当的验证或清理。 管理控制台中经过身份验证的用户可以滥用此漏洞行为来调用Java类和方法。...

i18next-http-backend incomplete URL validation permits SSRF

There is an SSRF vulnerability when using i18next-http-backend. A colon in an attacker-controlled language value can make a custom path template request an unintended origin. This is reachable under the following conditions: Attacker controls i18next language or namespace input that is interpolat...

CVE-2026-77050

A potential denial-of-service (DoS) vulnerability exists in the Django web framework within the django.utils.translation.get_supported_language_variant() function. The issue is caused by the application processing numerous distinct and very long language codes, which are stored as keys in an in-m...

EUVD-2026-93416

An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. django.utils.translation.getsupportedlanguagevariant is subject to a potential denial-of-service attack when processing many distinct, very long language codes, which are retained as keys in an in-memory...

CVE-2026-77050 Potential denial-of-service vulnerability in get_supported_language_variant()

An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. django.utils.translation.getsupportedlanguagevariant is subject to a potential denial-of-service attack when processing many distinct, very long language codes, which are retained as keys in an in-memory...

NimDllSideload

Sideloading de DLL en Nim Este repositorio te permite generar fácilmente DLLs de Nim que puedes usar para sideloading/proxy loading. Si no estás familiarizado con lo que es el sideloading de DLL, échale un vistazo a esta entrada de blog. ¿Cómo uso esto? Pon la DLL legítima o varias DLLs a las que...

SynGhost

Syntactic-Ghost SynGhost SynGhost: Ataque de puerta trasera invisible y universal agnóstico a la tarea mediante transferencia sintáctica Contribuciones y características SynGhost tiene las siguientes contribuciones Para mitigar los riesgos de las puertas traseras agnósticas a la tarea existentes,...

rats-re

Reconstrucción del código fuente de Rats! con LLM locales Este repositorio es una reconstrucción en curso del código fuente de RATS.EXE, la versión original para Windows de Rats! 1994 de Sean O'Connor. Compila un ejecutable Win32 con Microsoft Visual C++ 4.1 bajo wibo y puede probarse en DREAMM. ...

CLEANSTART-2026-UP81071 Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0

Security vulnerability affects the temporal-server package. Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0...