esm.sh <= v136 - Local File Inclusion

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. id: CVE-2025-59341 info: name: esm.sh = v136 - Local File Inclusion author: 0xAkoko severity: high description:...

SuperWebMailer 9.00.0.01710 - Cross-Site Scripting

An issue was discovered in SuperWebMailer 9.00.0.01710 allowing XSS via crafted incorrect passwords. id: CVE-2023-38192 info: name: SuperWebMailer 9.00.0.01710 - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 allowi...

rustsec

Crates de RustSec 🦀🛡️📦 La Base de Datos de Avisos de Seguridad de RustSec es un repositorio de avisos de seguridad presentados contra crates de Rust publicados a través de crates.io. La base de datos de avisos en sí se puede encontrar en: https://github.com/RustSec/advisory-db Acerca de este...

security-research

Investigación de Seguridad Este proyecto alberga avisos de seguridad y sus correspondientes pruebas de concepto relacionadas con la investigación realizada en Google que afecta a código que no es propiedad de Google. Creemos que la divulgación de vulnerabilidades es una vía de doble sentido. Tant...

vuln-list-aqua

vuln-list-aqua Avisos de seguridad de Aqua Security...

vuln-list-redhat

vuln-list-redhat Avisos de seguridad de Red Hat...

security-advisories

Avisos de seguridad Avisos de seguridad públicos por Greg Durys...

Aninda-security-advisories

This repository does not have a README...

advisories

SBA Research Security Advisories Security advisories published by SBA Research...

advisories

Enable Security Advisories This repository contains reproduction code, proof-of-concept scripts, and supporting files for security advisories published by Enable Security. Full advisories: https://www.enablesecurity.com/advisories/ The complete advisory content descriptions, impact, timeline, etc...

advisories

Advisories Security advisories from Kelly Kaoudis @kaoudis and friends. In general, I'll publish here either after the vendor has patched, or after 90 days from vulnerability discovery. Happy reading! Advisories are numbered in discovery order & by year; discovery enumeration starts at 0...

vuln-list-backup

vuln-list Recopila información de vulnerabilidades y guárdala automáticamente en un formato analizable Fuente Directorio| SO| Fuente| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux Errata| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine secdb|...

security-advisories

security-advisories Public security advisories published by Me Chidubem ChukwuTerminal Venom, including CVE disclosures and vulnerability reports for open-source and third-party softwares...

security-advisories

Avisos de seguridad Este repositorio es la fuente autorizada de avisos de seguridad del proyecto Nextcloud: Los avisos posteriores a mayo de 2021 se publican en la sección Aviso de seguridad de GitHub Los avisos anteriores a mayo de 2021 se pueden encontrar en la carpeta old/ archivada como...

vulnerability_advisories

Avisos de seguridad de Onapsis Este repositorio contiene avisos de seguridad para vulnerabilidades reportadas por el equipo de Onapsis Research Labs Resumen de avisos La siguiente tabla es un resumen de las vulnerabilidades descritas en este repositorio:...

CVEs

Mis avisos de seguridad publicados públicamente...

security-advisories

Threat Lance Security Advisories Public security advisory repository by Threat Lance. CVE| Title ---|---...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, cadvisor, cadvisor-fips, sriov-network-device-plugin-fips, buildah, prometheus-podman-exporter-fips, nvidia-container-toolkit-fips, node-feature-discovery-fips, podman-fips, nvidia-container-toolkit, k8s-device-plugin-fips, podman,...

GO-2026-5856 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme-fips, polaris-fips, kubernetes-csi-driver-nfs, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-azure-solutions, helm, src, crossplane-provider-aws-appconfig, trivy-operator-fips, frp, nri-discovery-kubernetes-fips, mcp-grafana,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, vitess, mattermost, commercial-expanso-edge, kube-state-metrics, helm, podman-fips, prometheus, elastic-agent-fips, frankenphp-8.4, zitadel, tekton-pipelines-fips, gatekeeper, argo-workflows-fips, teleport-operator-fips, docker-cli-buildx-fips,...