python-tuf

用于保护软件更新系统的框架 The Update Framework TUF 是一个用于安全内容交付和更新的框架。它能抵御多种类型的供应链攻击，并具备对妥协的恢复能力。本仓库是用 Python 编写的参考实现 ，旨在符合 TUF 规范 的 1.0 版本。 Python-TUF 提供了以下 API： tuf.api.metadata，一个“底层”API，旨在提供对 TUF 元数据的简便、安全访问，并处理从/到文件的（反）序列化。 tuf.ngclient，一个基于元数据 API 构建的客户端实现。 tuf.repository，一个同样基于元数据 API 构建的仓库库。该模块目前不被视为...

CrackAVFee

CVE 2022 3368 Vulnerabilidad en la actualización de software Descubierto por: @Wh04m1001 - @pxcs https://github.com/Wh04m1001/CVE-2022-3368 ¡Solo con fines educativos!...

Webnus Inc. Modern Events Calendar - Broken Access Control

Webnus Inc. Modern Events Calendar = 7.29.0 contains a broken access control vulnerability caused by incorrectly configured access control security levels, letting attackers bypass authorization, exploit requires no special privileges. id: CVE-2026-32583 info: name: Webnus Inc. Modern Events...

CVE-2022-3368

CVE-2022-3368 PoC para la vulnerabilidad de movimiento arbitrario de archivos en el componente de actualización de software de Avira Security. Los usuarios tienen la opción de usar esta función para actualizar cualquier software desactualizado en su PC; cuando se utiliza esta función, el servicio...

firepwner

CVE-2015-6357: Exploit FirePWNER para la vulnerabilidad de validación SSL de Cisco FireSIGHT Management Center Introducción Por sí sola, la Vulnerabilidad de validación de certificados de Cisco FireSIGHT Management Center3 es una vulnerabilidad de gravedad media con un CVSS de 5.1. Sin embargo,...

CVE-2024-22026

CVE-2024-22026 POC de exploit para CVE-2024-22026 que afecta a Ivanti EPMM "MobileIron Core" CVE-2024-22026 es una vulnerabilidad de escalada de privilegios local en las versiones del servidor Ivanti EPMM anteriormente MobileIron anteriores a 12.1.0.0, 12.0.0.0 y 11.12.0.1. Esta vulnerabilidad...

CVE-2026-86109

The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures because the workflow does not restrict the digest algorithm used for artifact verification. An attacker with either sufficient privileges to upload packages to VeloCloud Orchestrator...

PT-2026-93263

The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures because the workflow does not restrict the digest algorithm used for artifact verification. An attacker with either sufficient privileges to upload packages to VeloCloud Orchestrator...

RHBA-2024:2413 Red Hat Bug Fix Advisory: glibc bug fix and enhancement update

Bulletin has no description...

Security Advisory 0182

Security Advisory 0182 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-86109 CVSSv3.1 Base Score: 6.6...

Cisco IOS XR Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. Thes...

[SECURITY] Fedora 43 Update: rust-cargo-util-0.2.30-1.fc43

Miscellaneous support code used by Cargo...

EUVD-2026-64950

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities...

ROOT-APP-NPM-CVE-2026-6402 CVE-2026-6402 in webpack-dev-server - Patched by Root

Root has patched CVE-2026-6402 in the webpack-dev-server package for Root:npm. Multiple fixed versions available...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (rocm)

Red Hat AI Inference 3.4.4 rocm is now available. Red Hat AI Inference...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (spyre)

Red Hat AI Inference 3.4.4 spyre is now available. Red Hat AI Inference...

Moderate: Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.4 (cuda)

Red Hat AI Inference Model Optimization Tools 3.4.4 cuda is now available. Red Hat AI Inference Model Optimization Tools...

Important: Red Hat Security Advisory: Migration Toolkit for Applications

A new version of Migration Toolkit for Applications MTA is now available. Migration Toolkit for Applications MTA accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. This solution provides insight throughout the adoption process, at both...

CLEANSTART-2026-GY63167 Security fixes in thingsboard 4.3.1.3-r1

Package thingsboard version 4.3.1.3-r1 fixes 82 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...

CLEANSTART-2026-SE70344 Security fixes in thingsboard 4.2.2.3-r1

Package thingsboard version 4.2.2.3-r1 fixes 84 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...