name_reverser

== Welcome to Rails Rails is a web-application framework that includes everything needed to create database-backed web applications according to the Model-View-Control pattern. This pattern splits the view also called the presentation into "dumb" templates that are primarily responsible for...

Ruby on Rails - Open Redirect via Host Header Injection

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...

openSUSE 16: grok-build / grok-build-bash-completion / etc (openSUSE-SU-2026:22130-1)

"The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22130-1 advisory. Changes in grok-build: - CVE-2026-109349: gix-pack pack version 3 header assertion failure boo1285155 - CVE-2026-109350: gix-pack ofs-delta...

EUVD-2026-106754

Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate component: EM Plugin. Supported versions that are affected are 13.4.1.0.1-13.5.2.0.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment...

Linux Distros Unpatched Vulnerability : CVE-2026-109349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::newfromheader: the pack header decoder accepts version 3, but a...

Linux Distros Unpatched Vulnerability : CVE-2026-109351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that allows remote attackers to abort the process by supplying a huge...

Linux Distros Unpatched Vulnerability : CVE-2026-109350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch operations by sending crafted thin-pack...

CVE-2026-91517

Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate component: EM Plugin. Supported versions that are affected are 13.4.1.0.1-13.5.2.0.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment...

CVE-2026-91517

A vulnerability exists in the Oracle Management Pack for Oracle GoldenGate product (specifically the EM Plugin component) affecting supported versions 13.4.1.0.1-13.5.2.0.6 . An unauthenticated attacker with access to the physical communication segment attached to the hardware where the software ...

Malicious code in animate-twcss-pack (npm)

animate-twcss-pack 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by enterprise0908 on 2026-09-28. src/motion.js:5 requires the private scoped package...

Security update for grok-build (important)

openSUSE security update: security update for grok-build ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22130-1 Rating: important References: bsc1285155 Cross-References: CVE-2026-109349 CVE-2026-109350 CVE-2026-109351 CVSS scores: CVE-2026-109349...

PT-2026-120031

Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate component: EM Plugin. Supported versions that are affected are 13.4.1.0.1-13.5.2.0.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment...

Security vulnerabilities in Oracle Management Pack for Oracle GoldenGate

A security vulnerability exists in Oracle Management Pack for Oracle GoldenGate versions 13.4.1.0.1 through 13.5.2.0.6. This vulnerability stems from an issue within the EM Plugin component and may allow unauthenticated attackers to gain access via physical communication channels, thereby taking...

Malicious Package

Overview animate-twcss-pack is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

OPENSUSE-SU-2026:22130-1 Security update for grok-build

This update for grok-build fixes the following issues: Changes in grok-build: - CVE-2026-109349: gix-pack pack version 3 header assertion failure boo1285155 - CVE-2026-109350: gix-pack ofs-delta base-distance handling flaw boo1285155 - CVE-2026-109351: gix-pack header object-count denial of servi...

MAL-2026-18067 Malicious code in animate-twcss-pack (npm)

animate-twcss-pack 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by enterprise0908 on 2026-09-28. src/motion.js:5 requires the private scoped package...

Malicious code in animate-twcss-pack (npm)

animate-twcss-pack 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by enterprise0908 on 2026-09-28. src/motion.js:5 requires the private scoped package...

gix-pack: gix-pack: Denial of Service via crafted pack header

A flaw was found in gix-pack. A malicious remote server can trigger a Denial of Service DoS by returning a crafted pack header declaring version 3 during a repository clone or fetch operation. Because the header decoder triggers an internal assertion failure when encountering this version, the...

gix-pack: gix-pack: Denial of Service via malformed packfile delta entries

A flaw was found in gix-pack. A malicious remote repository can cause a Denial of Service DoS by serving a crafted Git packfile containing malformed delta offset entries during a fetch operation. Processing these entries leads to an unhandled application crash, abruptly terminating the fetch...

gix-pack: gix-pack: Denial of Service via crafted pack-header object count

A flaw was found in the gix-pack component of Gitoxide. A malicious remote repository can cause a Denial of Service DoS by providing a crafted pack header with an excessively large object count during clone or fetch operations. This forces the client to attempt an uncontrolled memory allocation,...