41 matches found
domain-locker
Domain Locker Il centro centrale per tutti i tuoi nomi di dominio 🌐domain-locker.com Contenuti Informazioni Screenshot Caratteristiche Demo dal vivo Inizia Domain-Locker.com Self-hosting Sviluppo Impostazione del progetto Architettura Contribuire Attribuzioni Licenza Informazioni L'obiettivo di...
pwndrop
pwndrop è un servizio di hosting file auto-distribuibile per inviare payload di red team o condividere in modo sicuro i tuoi file privati tramite HTTP e WebDAV. Se hai mai avuto bisogno di configurare rapidamente un server web nginx/apache per ospitare i tuoi file e non sei mai stato soddisfatto...
interactsh
An OOB interaction gathering server and client library Features • Usage • • • •...
zdr
Zero Data Retention ZDR per Fornitori di LLM Ultimo aggiornamento: Aprile 2026 Una guida pratica per mantenere privati i tuoi dati quando utilizzi API LLM. Copre endpoint a zero conservazione, self-hosting, requisiti di conformità e pattern di protezione dei dati per ingegneri in settori...
bore
bore A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That's all it does: no more, and no less. root@kitploit: Installation requires Rust, see alternatives below cargo install bore-cli On your local machine bore local 80...
authentik
Cos'è authentik? authentik è un Identity Provider IdP open-source per il moderno SSO. Supporta SAML, OAuth2/OIDC, LDAP, RADIUS e altro, progettato per l'auto-hosting da piccoli laboratori a grandi cluster di produzione. La nostra offerta enterprise è disponibile per le organizzazioni per sostitui...
app
Standard Notes Standard Notes è un'app per prendere note con crittografia end-to-end per digitalisti e professionisti. Conserva note, file e il lavoro della tua vita in un unico luogo sicuro. Perché Standard Notes? Sincronizzazione crittografata end-to-end. Solo tu puoi leggere le tue note...
Next.js: Next.js: Denial of Service via Image Optimization API
A flaw was found in Next.js. When self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. A remote attacker could exploit this by requesting large local assets from the /next/image endpoint...
CVE-2026-64644
A flaw was found in Next.js, a React framework. When self-hosting Next.js with the default image loader and configured to optimize remotely hosted images, a remote attacker could exploit the Image Optimization API. By providing malicious images, the attacker can cause CPU exhaustion, leading to a...
EUVD-2026-49388
Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 through 16.2.10, when self-hosting Next.js with the default image loader, the Image Optimization API can optimize remotely hosted images if configured not enabled by default. If...
CVE-2026-64644 Next.js: Denial of Service in the Image Optimization API using SVGs
Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 through 16.2.10, when self-hosting Next.js with the default image loader, the Image Optimization API can optimize remotely hosted images if configured not enabled by default. If...
CVE-2026-44577 Next.js: Denial of Service in the Image Optimization API
Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. An attacker could...
CVE-2026-44577 Next.js: Denial of Service in the Image Optimization API
Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. An attacker could...
CVE-2025-23214
Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7...
EUVD-2025-26598
Malicious code in bioql PyPI...
EUVD-2025-23660
Malicious code in bioql PyPI...
CVE-2025-58351 Outline's Local File Storage Feature can Cause CSP Bypass
Outline is a service that allows for collaborative documentation. In versions 0.72.0 through 0.83.0, Outline introduced a feature which facilitates local file system storage capabilities as an optional file storage strategy. This feature allowed a CSP bypass as well as a ContentType bypass that...
CVE-2025-58351 Outline's Local File Storage Feature can Cause CSP Bypass
Outline is a service that allows for collaborative documentation. In versions 0.72.0 through 0.83.0, Outline introduced a feature which facilitates local file system storage capabilities as an optional file storage strategy. This feature allowed a CSP bypass as well as a ContentType bypass that...
PT-2025-35656
Name of the Vulnerable Software and Affected Versions: Outline versions 0.72.0 through 0.83.0 Description: Outline, a collaborative documentation service, introduced a local file system storage feature in versions 0.72.0 through 0.83.0. This feature introduced a Content-Type bypass and a Cross-Si...