joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

CVE-2026-107174

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107174

A security boundary bypass vulnerability exists in source-to-image due to improper sanitization of symbolic links during archive unpacking. An attacker providing a malicious builder image can embed absolute symbolic links pointing outside the extraction directory. This flaw allows the attacker to...

EUVD-2026-94367

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107174 Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107174

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

VulnHunter

VulnHunter !NOTE 一个持续维护的分支 ，源自 Capital One 的 VulnHunter（Apache-2.0）——旨在 运行于任何 agent harness ，而不仅仅是 Claude Code。本分支的重点： harness 可移植性 、沙箱化（容器化）漏洞利用验证 ， 以及可量化影响的 PoC 。参见 为何做出这些更改 · 本分支更改了什么 · 数据。 从模式匹配到可证明性。 VulnHunter 是一款开源的 agentic AI 安全工具 ，将主动的、攻击者优先的分析直接应用于源代码。 与传统的被动式 SAST...

Intelbras WIN 300/WRN 342 - Credentials Disclosure

Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code. id: CVE-2021-3017 info: name: Intelbras WIN 300/WRN 342 - Credentials Disclosure author: pikpikcu severity: high description:...

LG Supersign EZ CMS - Remote Code Execution

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail. id: CVE-2018-17173 info: name: LG Supersign EZ CMS - Remote Code Execution author: pussycat0x severity: critical description: | LG SuperSign CMS allows remote attackers...

Kyocera TASKalfa printer - Path Traversal

CCRX has a Path Traversal vulnerability. Path Traversal is an attack on web applications. By manipulating the value of the file path, an attacker can gain access to the file system, including source code and critical system settings. id: CVE-2023-34259 info: name: Kyocera TASKalfa printer - Path...

wraithwall-toolkit

WraithWall 开源工具包 四款欺骗工程工具，从一套处理实时互联网流量的生产安全平台中提取出来， 清除了所有产品/密钥耦合，并以 MIT 许可证发布。 这不是实验室演示。每个工具都是 WraithWall 的一部分 —— 一个 由个人独立构建的欺骗平台，运行在反向代理之后，并由一个全天候为其提供数据的蜜罐支撑。这些是真正可以独立复用的部分：如果你运行蜜罐、埋设金丝雀令牌，或者希望像管理代码一样对欺骗配置进行版本控制，它们就是为你准备的。 每个项目都是一个独立的、可通过 pip install 安装的包，拥有自己的 README、示例、 测试和 CLI。不依赖该平台 —— 没有...

PT-2026-107537

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass (cisco-sa-aci-epgcbp-SfDU7NLf)

According to its self-reported version, Cisco NX-OS System Software in ACI Mode is affected by a vulnerability. - A vulnerability in the endpoint group EPG contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass...

Debian dla-4826 : puma - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4826 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4826-1 [email protected]...

PT-2026-107698

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10 Description A low-privileged user without admin or power roles can retrieve the original source code for the...

CVE-2025-492025

CVE-2025-492025 セキュリティ勧告: CVE-2025-492025 概要 Copilot AIにおいて、ウェブクエリを取得するたびに「リンクソース」セクションに意図しないハイパーリンクが含まれる脆弱性が確認されました。この問題により、トピックに関係なくユーザーが https://www.collectingflags.com へのリンクをクリックすることになり、誤った情報や意図しないナビゲーションを引き起こす可能性があります。 影響を受けるソフトウェア 現在のすべてのCoPilotデプロイメント 脆弱性の詳細 CVE-ID: CVE-2025-492025 深刻度:...

CVE-2026-106503

Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by scaffolder action input authorization bypass. An authenticated user with access to affected Scaffolder templates could bypass...

CVE-2026-106503 Backstage: Scaffolder action input authorization bypass

Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by scaffolder action input authorization bypass. An authenticated user with access to affected Scaffolder templates could bypass...

CVE-2026-106462

Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integration credentials and perform operation...

CVE-2026-105812

Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to execute arbitrary code when a user imports and runs or deploys a Bedrock Agent, via crafted configuration values...