870 matches found
cso-vibecheck
cso-vibecheck root@kitploit: ██████╗███████╗ ██████╗ ██╗ ██╗██╗██████╗ ███████╗ ██╔════╝██╔════╝██╔═══██╗ ██║ ██║██║██╔══██╗██╔════╝ ██║ ███████╗██║ ██║ ██║ ██║██║██████╔╝█████╗ ██║ ╚════██║██║ ██║ ╚██╗ ██╔╝██║██╔══██╗██╔══╝ ╚██████╗███████║╚██████╔╝ ╚████╔╝ ██║██████╔╝███████╗ ╚═════╝╚══════╝...
BlockChainConstruction
Preface In this article, we mainly introduce several aspects of public chain audit which are worthy of attention. For security auditors and public chain developers, this is a project worthy of reference and thinking. Architecture Before introducing the construction of public chain system, let's...
GHSA-7236-3392-C5C6 vulnerabilities
Vulnerabilities for packages: conftest, podman, guac, kubescape, trivy, kaniko, scorecard, skaffold, zot...
GHSA-C974-W86C-VPFW vulnerabilities
Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, redpanda-operator, nrdot-collector-k8s, prometheus-alertmanager-fips, jfrog-cli, terraform-provider-sendgrid-fips, agentbeat-fips, grafana-pyroscope, crossplane-provider-aws-codepipeline-fips, virt-controller-fips,...
GO-2026-6090 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, nrdot-collector-k8s, virt-controller-fips, crossplane-provider-aws-emr, crossplane-provider-aws-licensemanager, jaeger-operator-fips, k8s-metacollector-fips, crossplane-provider-aws-cloud9-fips, seaweedfs, docker-cli-buildx-fips,...
GO-2026-4412 vulnerabilities
Vulnerabilities for packages: wolfictl, cg...
GO-2025-3678 vulnerabilities
Vulnerabilities for packages: sdp-k8s-injector, wasmcloud, fnm, shadowsocks-rust, rustup, parseable, ztunnel-fips, linkerd2-proxy, rustls-ffi, tealdeer, nushell, zizmor, rye, kdash, pixi, sqlx, uv, wasmtime, atuin, xh, zed, wash, lychee, wadm, cargo-audit, wasm-pack, ztunnel, oranda, buck2,...
GO-2026-5327 vulnerabilities
Vulnerabilities for packages: teleport-operator-fips, vault-fips, agentbeat-fips, grafana-pyroscope, grafana-mimir, kubescape, trident-fips, terraform-provider-pagerduty, virt-api-fips, kubescape-server, prometheus-fips, kubescape-server-fips, thanos, opentelemetry-collector-contrib-fips,...
GO-2024-2453 vulnerabilities
Vulnerabilities for packages: syft, crossplane-provider-aws-kms, gomplate, melange, crossplane-provider-aws-ec2, wolfictl, tekton-chains, crossplane, crossplane-provider-aws-iam, crossplane-provider-family-aws, crossplane-provider-aws-lambda, pulumi-language-yaml, slsa-verifier,...
GO-2026-5019 vulnerabilities
Vulnerabilities for packages: teleport-operator-fips, prometheus-elasticsearch-exporter, vault-fips, crossplane-provider-azure-netapp, buildkitd, buildah, act, gitlab-rails-ce-fips, jfrog-cli, ko, kubernetes, trivy-operator, mattermost-fips, crossplane-provider-azure-authorization,...
GO-2025-3563 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, helm-docs, agentbeat-fips, kuberay-operator-fips, kubernetes-csi-external-attacher, configmap-reload-fips, thanos-operator-fips, crossplane-provider-azure-authorization, jaeger-operator-fips, nri-jmx, terraform-provider-azapi-fips,...
GHSA-FM2F-4339-4P2F Flowise: Missing Authorization on Execution Update Endpoint
Flowise Security Audit Report Date: 2026-03-17 Researcher: Dimpal Jadhav [email protected] GitHub: https://github.com/Dimpyj1604 Target: FlowiseAI/Flowise latest main branch Version: [email protected] FINDING 1: Missing Authorization on Execution Update Endpoint Severity: HIGH CVSS 7.5...
TP-Link-TL-WR841ND-Security-Audit
...
Exploit for Signal Handler Race Condition in Sonicwall Sma_6200_Firmware
OpenSSH Security Auditor regreSSHion & 2026 Flaws A lightwe...
SVG `href` attribute bypasses local-reference restriction in Loofah
Summary Loofah's HTML5 sanitizer restricted only the xlink:href attribute on certain SVG elements to local, same-document references. Browsers also accept a plain href attribute as an alternative to the deprecated xlink:href per the SVG 2 spec, but Loofah did not apply the same restriction to it,...
Decidim: CSV census record endpoints improper authorization
Description A participant manager can access and modify the CSV census record admin forms. Technical description The CSV census admin record-management surface under /admin/csvcensus/censuslogs does not enforce admin-only authorization before rendering or mutating Decidim::Verifications::CsvDatum...
PT-2026-60064
Name of the Vulnerable Software and Affected Versions Decidim versions 0.31.1 through 0.31.4 Decidim version 0.32.0.rc1 Description An authorization bypass allows a normal participant to access the demographics questionnaire editor without the required administrator privileges. By directly loadin...
igracias-audit
🎯 iGracias Security Audit — Telkom University Comprehensive s...
Malicious Package
Overview apple-internal-security-audit-v99 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...