apkleaks

APKLeaks Escaneando archivo APK en busca de URIs, endpoints y secretos. Instalación desde PyPi desde el código fuente desde Docker Uso Opciones Salida Patrón Argumentos para descompilador Licencia Agradecimientos Instalación Es bastante sencillo instalar APKLeaks : desde PyPi $ pip3 install...

CLSA-2026-1791629263 TuxCare security update for fast-uri (3 CVEs)

TuxCare rebuilt fast-uri to address 3 CVEs. Fixed in 3.1.0-tuxcare.2...

CLSA-2026-1791627179 TuxCare security update for fast-uri (1 CVE)

TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.0.1-tuxcare.6...

CLSA-2026-1791626480 TuxCare security update for fast-uri (1 CVE)

TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.0.3-tuxcare.5...

CLEANSTART-2026-BZ85863 fast-uri is a URI parser for Node

Security vulnerability affects the n8n package. fast-uri is a URI parser for Node...

CLEANSTART-2026-OU85538 fast-uri is a URI parser for Node

Security vulnerability affects the n8n package. fast-uri is a URI parser for Node...

CLEANSTART-2026-PV08936 fast-uri is a URI parser for Node

Security vulnerability affects the n8n package. fast-uri is a URI parser for Node...

CLEANSTART-2026-US61275 fast-uri is a URI parser for Node

Security vulnerability affects the n8n package. fast-uri is a URI parser for Node...

CLEANSTART-2026-SN03087 Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs

Security vulnerability affects the apache-nifi package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...

CLEANSTART-2026-BC80499 In Eclipse Jetty, an HTTP URI of this form: /public;/

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, an HTTP URI of this form: /public;/...

PT-2026-117854

Security vulnerability affects the apache-nifi package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...

PT-2026-117719

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, an HTTP URI of this form: /public;/...

EUVD-2026-95924

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessURI in internal/corazawaf/transaction.go handles a url.ParseRequestURI failure by retaining the raw URI but leaving QUERYSTRING, ARGSGET, ARGSGETNAMES, and the GET-derived portion ...

CVE-2026-107825

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessURI in internal/corazawaf/transaction.go handles a url.ParseRequestURI failure by retaining the raw URI but leaving QUERYSTRING, ARGSGET, ARGSGETNAMES, and the GET-derived portion ...

Security Bulletin: Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2026-21933 DESCRIPTION: Java SE could allow a remote attacker to bypass security controls and perform unauthorized update, insert, delete, or read operations on...

CVE-2026-79650

The Apache CXF OIDC relying-party component is vulnerable to an open redirect (CWE-601) where users can be redirected to an attacker-controlled URL after successful authentication. The root cause is that attacker-controlled state parameters are preserved and used as redirect targets without verif...

CLEANSTART-2026-BM33422 crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user

Security vulnerability affects the apache2 package. A crafted request uri-path can cause modproxy to forward the request to an origin server choosen by the remote user...

CLEANSTART-2026-WN13169 carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS)

Security vulnerability affects the apache2 package. A carefully crafted request uri-path can cause modproxyuwsgi to read above the allocated memory and crash DoS...

openSUSE 16: jackson-annotations / jackson-annotations-javadoc / jackson-core / etc (openSUSE-SU-2026:22034-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22034-1 advisory. - CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues bsc1273856. - CVE-2026-19032:...

CVE-2026-107334

Malcolm's nginx Lua role-based access control RBAC layer decides whether an authenticated user may reach a role-restricted path e.g. /htadmin, /auth, /adminlogin, /arkime/api/esadmin, NetBox, upload endpoints by pattern-matching the raw, percent-encoded request URI. Nginx itself, however, selects...