13092 matches found
guac
GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...
threat-modeling-playbook
Introduzione Il nostro obiettivo è migliorare la sicurezza di prodotti e software con il nostro nuovo playbook per il threat modeling. Consideriamo il threat modeling un'attività fondamentale per migliorare la garanzia del vostro software. Siamo convinti che una buona pratica di threat modeling...
MOVEit Transfer - Remote Code Execution
In Progress MOVEit Transfer before 2021.0.6 13.0.6, 2021.1.4 13.1.4, 2022.0.4 14.0.4, 2022.1.5 14.1.5, and 2023.0.1 15.0.1, a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database...
Gitea 1.1.0 - 1.12.5 - Remote Code Execution
Gitea 1.1.0 through 1.12.5 is susceptible to authenticated remote code execution, via the git hook functionality, in customer environments where the documentation is not understood e.g., one viewpoint is that the dangerousness of this feature should be documented immediately above the...
rbndr
rbndr Simple DNS Rebinding Service rbndr is a very simple, non-conforming, name server for testing software against DNS rebinding vulnerabilities. The server responds to queries by randomly selecting one of the addresses specified in the hostname and returning it as the answer with a very low ttl...
DirtyPipe-CVE-2022-0847
DirtyPipe-CVE-2022-0847 Questa repository è sviluppata per analizzare e comprendere l'exploit DirtyPipe CVE-2022-0847 per il mio assignment di sistemi software sicuri del 3° anno, 1° anno. Paper che ho scritto il paper sarà disponibile dopo la fine del mio semestre...
GHSA-Q496-Q274-JGH9 vulnerabilities
Vulnerabilities for packages: exim...
MINI-6VGX-C24M-5JJG
Bulletin has no description...
MINI-WVG2-F9XQ-2JP6
Bulletin has no description...
CVE-2026-19489
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21...
Dahua IPC/VTH/VTO - Authentication Bypass
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. id: CVE-2021-33045 info: name: Dahua IPC/VTH/VTO - Authentication Bypass author: phantomowl severity:...
CVE-2026-62462
Oracle E-Business Suite Work in Process (component: Internal Operations) versions 12.2.3-12.2.15 is vulnerable. A low-privileged attacker with network access via HTTP can exploit it for full CIA impact (CVSS 8.8 HIGH). Oracle's August 2026 CPU advisory is referenced for patch details; no exploit ...
GHSA-FHGH-WQ4Q-R37X
creationtimestamp| type| source ---|---|--- 2026-08-17 20:32:43+00:00| seen| https://gist.github.com/alon710/714a45d6d9776f210b84a676518696fb...
MINI-35F4-968R-PGMF
Bulletin has no description...
MINI-PJ28-7G45-5439
Bulletin has no description...
MINI-HW33-HVF2-6PGJ
Bulletin has no description...
MINI-PGP2-85MF-4WM8
Bulletin has no description...
MINI-JHH7-GR22-9MJJ
Bulletin has no description...