826 matches found
GO-2026-4412 vulnerabilities
Vulnerabilities for packages: cg, wolfictl...
GO-2025-3678 vulnerabilities
Vulnerabilities for packages: lychee, zizmor, zola, qdrant, wasmcloud, wash, xh, rustls-ffi, rustup, uv, samply, tealdeer, linkerd-extension-init, fnm, pixi, oranda, sccache, wadm, sqlx, zed, kdash, ntpd-rs, ztunnel, rye, shadowsocks-rust, nushell, cargo-audit, wasm-pack, buck2, ztunnel-fips,...
GO-2026-5327 vulnerabilities
Vulnerabilities for packages: juicefs, prometheus-mongodb-exporter-fips, reports-server, kubescape, consul-k8s, virt-api, vcluster-fips, external-secrets-operator, authentik, amazon-cloudwatch-agent-fips, kyverno, packer, percona-backup-mongodb, datadog-agent, thanos, bento, ferretdb, grafana-fip...
GO-2024-2453 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-elasticache, vexctl, crossplane-provider-aws-cloudformation, gitness, kubescape, crossplane-provider-aws-iam, pulumi-language-dotnet, melange, crossplane-provider-aws-lambda, cosign-fips, flux-notification-controller, pulumi-kubernetes-operato...
GO-2026-5019 vulnerabilities
Vulnerabilities for packages: apply-cve-bump, prometheus-elasticsearch-exporter, grype-db, crossplane-provider-azure-servicefabric, juicefs, gitlab-kas, crossplane-provider-azure-managedidentity, reports-server, kubescape, melange, kubernetes-dashboard, external-secrets-operator, gitlab-runner,...
GO-2025-3563 vulnerabilities
Vulnerabilities for packages: rclone-fips, gke-gcloud-auth-plugin, node-problem-detector-fips, crossplane-provider-azure-managedidentity, protoc-gen-go-grpc, cert-manager-webhook-pdns, modelmesh-runtime-adapter, prometheus-nats-exporter, terraform-provider-azapi-fips,...
JumpServer > 3.6.4 - Information Disclosure
JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...
TP-Link-TL-WR841ND-Security-Audit
...
Decidim: CSV census record endpoints improper authorization
Description A participant manager can access and modify the CSV census record admin forms. Technical description The CSV census admin record-management surface under /admin/csvcensus/censuslogs does not enforce admin-only authorization before rendering or mutating Decidim::Verifications::CsvDatum...
PT-2026-60064
Name of the Vulnerable Software and Affected Versions Decidim versions 0.31.1 through 0.31.4 Decidim version 0.32.0.rc1 Description An authorization bypass allows a normal participant to access the demographics questionnaire editor without the required administrator privileges. By directly loadin...
igracias-audit
🎯 iGracias Security Audit — Telkom University Comprehensive s...
Malicious Package
Overview apple-internal-security-audit-v99 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
Exploit for Missing Authentication for Critical Function in Cpanel
🔒 cPanel CVE-2026-41940 / nuclear.x86 Security Audit & Cleanup...
Malicious code in apple-internal-security-audit-v99 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85c1a320034eadbc47dbe12b147164f4b003babca198b527d6b725a9f891f188 The package apple-internal-security-audit-v99 was found to contain malicious code. Source: ghsa-malware...
Beyond Code Reasoning: A Specification-Anchored Audit Framework for Expert-Augmented Security Verification
Security-critical software is routinely audited by tools that reason about vulnerabilities as repository-local code patterns. Yet specification-governed systems -- protocol stacks, consensus implementations, cryptographic libraries -- are constrained by invariants and correctness conditions defin...
EspoCRM 9.3.3 API Security Audit Tool
This Python script is a lightweight, non-invasive security audit tool designed to test the API surface of EspoCRM version 9.3.3...
FreeScout 1.8.206 Network Reachability and HTTP Security Audit Scanner
The provided PHP script is a network reconnaissance and auditing tool designed to scan a local IP range and identify reachable hosts potentially running web services such as FreeScout...
CVE-2026-35366 uutils coreutils printenv Security Inspection Bypass via UTF-8 Enforcement
The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences. While POSIX permits arbitrary bytes in environment strings, the uutils implementation silently skips these entries rather than printing the raw bytes. This vulnerability allows...
Hidden Passenger? How Taboola Routes Logged-In Banking Sessions to Temu
A bank approved a Taboola pixel. That pixel quietly redirected logged-in users to a Temu tracking endpoint. This occurred without the bank’s knowledge, without user consent, and without a single security control registering a violation. Read the full technical breakdown in the Security Intelligen...