90901 matches found
grype v0.120.0
Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...
Karma Pro 0.13
Karma Pro is an open source code review tool written in Swift that can assist code reviewers with a multitude of useful tools. Karma Pro is a macOS source-code security scanner AST base and Heuristics that statically analyses projects in multiple languages. It's backed by an ML classifier trained...
Scapy Packet Manipulation Tool 2.8.0
Scapy is a powerful interactive packet manipulation tool, packet generator, network scanner, network discovery tool, and packet sniffer. It provides classes to interactively create packets or sets of packets, manipulate them, send them over the wire, sniff other packets from the wire, match answe...
CVE-2026-95102: Missing Authentication for Critical Function
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorized access to sensitive data or perform unauthorized actions. Given that no authentication is required, this can lead t...
CVE-2026-103097: Use of Hard-coded Credentials
An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...
CVE-2026-103096: Use of Hard-coded Credentials
API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...
CVE-2026-97363: Improper Restriction of Excessive Authentication Attempts
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access...
CVE-2026-103098: Cleartext Transmission of Sensitive Information
Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key...
CVE-2026-104861: Uncontrolled Resource Consumption
probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parsesync/svg.js and lib/parsestream/svg.js use the searching regular expression //, which repeatedly scans to the end of input when attacker-controlled data contains many less-than characters without ...
advanced-port-scanner
Advanced Port Scanner — Live CVE + SearchSploit Edition A Pyt...
trivy v0.75.0
📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image Filesystem Git Repository remote Virtual Machine Image Kubernetes...
INtrack
INtrack - 인터넷 크롤러 및 보안 스캐너 INtrack은 네트워크 정찰, 취약점 탐지, 보안 평가를 위해 설계된 강력한 멀티스레드 보안 스캐너이자 인터넷 크롤러입니다. 다양한 인스턴스, 취약점, IoT 기기, 노출 항목 등을 스캔할 수 있습니다. 기능 🔍 포괄적 스캔 : 웹 서버, 애플리케이션, 취약한 서비스 등을 탐지 🌐 유연한 대상 선택 : 단일 호스트, 서브넷, 무작위 인터넷 IP 또는 파일의 대상 스캔 🛠️ 다양한 스캐너 유형 : 알려진 CVE에 대한 취약점 스캐너 인스턴스 탐지 WordPress, Jira,...
CLEANSTART-2024-LB76268 Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90
Security vulnerability affects the chromium package. Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90...
CamTRON
CamTRON - Escáner de Cámaras Una herramienta automatizada para detectar dispositivos de vigilancia cámaras en redes. Características Detección multimarca : Compatible con más de 30 marcas de cámaras, incluyendo Hikvision, Dahua, Axis, CCTV y más Escaneo de alto rendimiento : Escaneo concurrente c...
CVE-2026-82826: Cleartext Transmission of Sensitive Information
Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information which allows an attacker to eavesdrop on with authentication credentials and sensitive data in transit. This issue affects Hitachi Coding Software Suite: through 3.3.0...
CVE-2026-103495: Missing Authorization
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...
CVE-2026-7176: Improper Neutralization of Input During Web Page Generation
CVE-2026-7176: the Help text and Title parameters in the endpoint /events/ - /customform/edit during the process of creating or modifying forms associated with ticket sales for an event, which allows for the injection of JavaScript that will execute on the public ticket purchase page for the even...
CVE-2026-103497: Server-Side Request Forgery (SSRF)
In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...