snorby

Snorby github.com/Snorby/snorby github.com/Snorby/snorby/issues github.com/Snorby/snorby/wiki irc.freenode.net snorby Descrizione Snorby è un'applicazione web in Ruby on Rails per il monitoraggio della sicurezza di rete che si interfaccia con i più diffusi sistemi di rilevamento delle intrusioni...

Pocket-ID has an Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none

Summary The OIDC authorization page in the pocket-id frontend redirects the browser to an attacker-controlled URL without consulting the backend redirecturi allow-list when the request uses prompt=none. An attacker who knows a valid clientid can craft an /authorize link that sends a victim or a...

GHSA-2WVM-8MVP-22QV Pocket-ID has an Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none

Summary The OIDC authorization page in the pocket-id frontend redirects the browser to an attacker-controlled URL without consulting the backend redirecturi allow-list when the request uses prompt=none. An attacker who knows a valid clientid can craft an /authorize link that sends a victim or a...

CVE-2026-55834

Pocket ID (an OIDC provider for passkey-based authentication), versions 2.6.0 through 2.9.0 , contains an open redirect in its OIDC /authorize page. When a request uses prompt=none and silent authorization cannot complete, the SvelteKit frontend constructs a callback URL directly from the raw red...

CVE-2026-55834 Pocket ID: Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.6.0 until 2.9.0, frontend/src/routes/authorize/+page.ts reads the redirecturi query parameter and frontend/src/routes/authorize/+page.svelte uses the raw callbackURL in redirectWithError when...

CVE-2026-55834 Pocket ID: Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.6.0 until 2.9.0, frontend/src/routes/authorize/+page.ts reads the redirecturi query parameter and frontend/src/routes/authorize/+page.svelte uses the raw callbackURL in redirectWithError when...

EUVD-2026-67828

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.6.0 until 2.9.0, frontend/src/routes/authorize/+page.ts reads the redirecturi query parameter and frontend/src/routes/authorize/+page.svelte uses the raw callbackURL in redirectWithError when...

CVE-2026-20660

Bundle PoC CVE-2026-20660 Questa cartella contiene un proof-of-concept autonomo per: CVE-2026-20660 Path traversal in NSGZipDecoder di CFNetwork tramite FNAME del gzip Impatto su Safari macOS vulnerabile con apertura automatica abilitata 1. Struttura della directory server.py: server PoC...

CVE-2026-82274 Twenty Open Redirect via OAuth Propagator Callback

Twenty through 2.35.0 contains an open redirect vulnerability in the OAuthPropagatorController.propagateOAuthCallback endpoint that treats the state query parameter as a redirect URL. Attackers can craft malicious requests to redirect users to arbitrary hosts while forwarding OAuth authorization...

CVE-2026-82274 Twenty Open Redirect via OAuth Propagator Callback

Twenty through 2.35.0 contains an open redirect vulnerability in the OAuthPropagatorController.propagateOAuthCallback endpoint that treats the state query parameter as a redirect URL. Attackers can craft malicious requests to redirect users to arbitrary hosts while forwarding OAuth authorization...

CVE-2026-82274

Twenty through version 2.35.0 contains an open redirect vulnerability in the OAuthPropagatorController.propagateOAuthCallback endpoint. The root cause is that the state query parameter is treated as a redirect URL, allowing attackers to craft malicious requests that redirect users to arbitrary ho...

EUVD-2026-67805

Twenty through 2.35.0 contains an open redirect vulnerability in the OAuthPropagatorController.propagateOAuthCallback endpoint that treats the state query parameter as a redirect URL. Attackers can craft malicious requests to redirect users to arbitrary hosts while forwarding OAuth authorization...

CVE-2026-34486

CVE-2026-34486 Bypass fail-open di EncryptInterceptor nel clustering di Apache Tomcat Tribes che porta a RCE non autenticata tramite deserializzazione Java. Versioni interessate: 11.0.19+, 10.1.53+, 9.0.116+. Corretto in: 11.0.21, 10.1.54, 9.0.117. Trovata e segnalata da Bartlomiej Dmitruk...

CVE-2026-22241

🚨 CVE-2026-22241 - Open eClass - Esecuzione Remota di Codice nell'Importazione Tema 📌 Riepilogo della Vulnerabilità Open eClass noto anche come GUnet eClass, un sistema di gestione dell'apprendimento LMS open-source ampiamente utilizzato, contiene una vulnerabilità critica di Upload File Non...

CVE-2022-24637

CVE-2022-24637 Nicht authentifizierte RCE in Open Web Analytics Version / newPassword YourIp YourPort Möglicherweise müssen Sie es mehrmals ausführen, um eine Shell zu erhalten. Das Skript kann verbessert werden...

PanelShock

Este repositorio nao tem um README...

CVE-2019-13288

Xpdf version 4.02 2019-sep-25 The Xpdf software and documentation are copyright 1996-2019 Glyph & Cog, LLC. Email: [email protected] WWW: http://www.xpdfreader.com/ The PDF data structures, operators, and specification are documented in ISO 32000-2:2017. What is Xpdf? Xpdf is an open source...

CVE-2022-24637

Applicazione Vulnerabile Open Web Analytics OWA prima della versione 1.7.4 consente a un attaccante remoto non autenticato di ottenere informazioni sensibili sugli utenti, che possono essere utilizzate per ottenere privilegi di amministratore sfruttando gli hash della cache. Ciò accade perché i...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

armadito-av

Armadito core Armadito è un antivirus open-source. Questo repository contiene la libreria core di Armadito, il daemon e il servizio. Copyright C Teclib', 2015, 2016 Home del progetto : http://www.teclib-edition.com/teclib-products/armadito-antivirus Vedi la documentazione online all'indirizzo :...