CyberQRM

CyberQRM – Gestion Quantitative des Risques Cyber Une plateforme locale open-source pour l'évaluation quantitative des risques de cybersécurité utilisant le framework FAIR v3.1 Factor Analysis of Information Risk. Modélisez les menaces, exécutez des simulations Monte Carlo, mesurez l'efficacité d...

CVE-2026-51564

CVE-2026-51564 Уведомление о безопасности для CVE-2026-51564 Описание Проблема в параметре redirect в Milk admin =0.9.8 позволяет удалённым злоумышленникам перенаправлять пользователей на произвольные внешние URL-адреса с помощью специально сформированного запроса. Затронутые компоненты:...

enforcement-coverage

Покрытие контроля Находит API-маршруты, которые несут более слабый контроль авторизации, чем их соседние маршруты. Он нашёл CVE-2026-45316 в Open WebUI по одному только исходному коду, без сведений из бюллетеней безопасности: MISMATCH POST /notes/id/pin notes.py:pinnotebyid 3/3 comparable write...

xalgorix

Xalgorix — 脆弱性を 証明 するオープンソースAIペネトレーションテスター ほとんどのスキャナーは検出するだけ。Xalgorixは証明します。 自律型LLMエージェントが完全なペネトレーションテスト手法を実行し、その後独立した検証者がすべての検出結果を再エクスプロイト してから報告するため、トリアージが必要な不確かなものの山ではなく、証拠が得られます。セルフホスト、プライベート、そしてBring-Your-Own-LLM。Go + TypeScriptで構築。 🚀 クイックスタート · 💡 Xalgorixを選ぶ理由 · ✨ 機能 · 🎯 ユースケース · ☁️ ホステッドクラウ...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

CVE-2026-102778

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...

CVE-2026-102778 Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...

EUVD-2026-92453

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...

CVE-2026-102778 Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...

CVE-2026-102778

The Joomla Extension - svenbluege.de (Event Gallery extension) is vulnerable to Cross-Site Scripting (XSS) and Open Redirect in versions prior to 6.6.0 . When the "Share article links" option is enabled, the share mini page takes the article address from a shared link and prints it into the page ...

CVE-2021-3130

CVE-2021-3130 Description suggérée Dans l'application Open-AudIT jusqu'à la version 4.0.2, l'interface web masque les secrets SSH, les mots de passe Windows et les chaînes SNMP des utilisateurs en utilisant l'obscurcissement par « champ de mot de passe » HTML. En utilisant les outils de...

asf__nifi_CVE-2023-36542_1-22-0

Apache NiFi Статус Ресурсы Контакты !Track Issueshttps://img.s...

easysec

EasySec - Easy security for SME's Introduction EasySec is a repository that includes a variety of roles, documentation, and tools designed to help small and medium-sized enterprises SMEs implement security measures within their own organizations, as well as promoting penetration testing and red...

CVE-2024-37888

CVE-2024-37888 Ce dépôt documente les détails de la vulnérabilité et l'exploit pour CVE-2024-37888 découvert et signalé par moi-même. Métriques CWE-79 : Neutralisation incorrecte de l'entrée lors de la génération de pages Web 'Cross-site Scripting' CVSS : 6.1 MOYEN Aperçu de la vulnérabilité Cett...

cve-2025-11953-vulnerability-demo

Démonstration d'injection de commande dans React Native CLI CVE-2025-11953 ⚠️ DÉMONSTRATION DE VULNÉRABILITÉ ⚠️ JFSA-2025-001495618 - Injection de commande critique dans React Native CLI CVE : CVE-2025-11953 Score CVSS : 9.8 Critique Paquet affecté : @react-native-community/cli-server-api Versions...

ldapsdk

SDK LDAP UnboundID pour Java Télécharger la dernière version du SDK LDAP ici Le SDK LDAP UnboundID pour Java est une bibliothèque Java rapide, puissante, conviviale, totalement gratuite et open source pour communiquer avec les serveurs d'annuaire LDAP. Il offre de meilleures performances, une...

syswarden

SysWarden Защита Linux. Ваш хост. Ваши правила. Локальная защита хоста Linux с проверяемым применением по принципу fail-closed. Сайт | Документация | Сборка из исходного кода | План...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: ohci-nxp: Fixed the refcount leak in ohcihcdnxpprobe. ofparsephandle returns a node pointer with a refcount incremented; we should use ofnodeput on it when it is no longer needed. Add ofnodeput to avoid the refcount leak...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: smb/server: fixed a potential null-ptr-deref of leasectxinfo in smb2open A null-ptr-deref will occur when reqoplevel == SMB2OPLOCKLEVELLEASE and parseleasestate returns NULL. This issue was fixed by checking whether...

Astra Linux – Vulnerability in OpenLDAP

In OpenLDAP versions 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function due to a malicious packet. This leads to a denial of service daemon exits caused by a short timestamp. This issue is related to the schemainit.c file and the...