web2py-e94946d-CVE-2016-3957

Readme web2py is a free open source full-stack framework for rapid development of fast, scalable, secure and portable database-driven web-based applications. It is written and programmable in Python. LGPLv3 License Learn more at http://web2py.com Google App Engine deployment cp examples/app.yaml ...

SindriKit

SindriKit Offensive Development Deserves Better Architecture. A C library for building offensive capabilities. Core Concept Most offensive utilities hardcode their execution mechanics inside the technique's logic. A reflective loader doesn't just map an image; it maps it using a specific, hardcod...

Reproducing-ConnMan-1.34

Connection Manager Copyright C 2007-2012 Intel Corporation. All rights reserved. Functionality and features The following features are built-in into Connection Manager: - Generic plugin infrastructure - Device and network abstraction with basic storage support - IPv4, IPv4-LL link-local and DHCP...

miasm

What is Miasm? Miasm is a free and open source GPLv2 reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a non exhaustive list of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE Assembling / Disassembling X86 / ARM / MIPS / SH4 /...

cve-2026-9082

CVE-2026-9082 Type : SQL Injection CWE-89 Affected Product : Drupal Core Database Abstraction API Drupal Advisory : SA-CORE-2026-004 Published : May 20, 2026 Severity : Highly Critical Drupal 20/25 | NVD CVSS 6.5 What Is It? CVE-2026-9082 is a SQL Injection vulnerability in Drupal's core database...

taser

Taser TASER Testing and Security Resource is an abstraction library used to simplify the process of creating offensive security tooling. The various protocols and classes help streamline development of custom tooling during engagements. The examples directory contains a number of scripts...

CVE-2026-9082

🚨 CVE-2026-9082 : SQL Injection Vulnerability in Drupal Core High-Impact SQL Injection Vulnerability in Drupal Core PostgreSQL 📋 Overview CVE-2026-9082 is a SQL Injection vulnerability in Drupal Core’s database abstraction layer. It affects only sites using PostgreSQL as the database backend. The...

kestrel-lang

.. image:: https://github.com/opencybersecurityalliance/kestrel-lang/raw/develop/logo/logowtext.png :width: 460 :alt: Kestrel Threat Hunting Language |readthedocs| |pypi| |downloads| |codecoverage| |black| | Hunt with Native Query/Script left or Kestrel right? An end-to-end cyber threat hunt...

CLEANSTART-2026-TX09096 Billy is an interface filesystem abstraction for Go

Security vulnerability affects the argo-cd package. Billy is an interface filesystem abstraction for Go...

Astra Linux - vulnerability in linux

In Linux kernels up to and including version 5.13.5 on the powerpc platform, arch/powerpc/kvm/book3srtas.c allows KVM guest OS users to cause host OS memory corruption via rtasargs.nargs, which corresponds to CID-f62f3c20647e...

[SECURITY] Fedora 45 Update: kf6-kio-6.30.0-2.fc45

KDE Frameworks 6 Tier 3 solution for filesystem abstraction...

[SECURITY] Fedora 45 Update: kf5-kio-5.116.0-8.fc45

KDE Frameworks 5 Tier 3 solution for filesystem abstraction...

XPhysICS: Cross-Physical-Domain Threat Grounding for Industrial Control Systems Security

Industrial control system ICS threats documented for one plant can express cyber-physical effects relevant to another, but semantic similarity alone does not establish whether those effects are structurally admissible or evaluable on a target. We present XPhysICS, a provenance-aware,...

Automated Abstraction Refinement for Information Flow Security in Embedded Systems

Information flow analysis IFA is a powerful technique for verifying confidentiality and integrity and is therefore highly desirable for security-sensitive embedded systems. However, as these systems are inherently concurrent and time-dependent, existing IFA for embedded systems tend to be either...

Astra Linux – Vulnerability in Linux

A flaw was discovered in the way RTAS handled memory accesses in user space for kernel communication. In a guest system that is under lockdown usually due to Secure Boot, running on top of PowerVM or KVM hypervisors pseries platform, a root-like local user could exploit this flaw to further...

[SECURITY] Fedora 45 Update: PackageKit-1.4.0-1.fc45

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...

Malicious code in f0-abstraction-resolver (npm)

Source: amazon-inspector 224dc9dfb692343ce6baa1f2e8ce95e413f8a4d8d9991bea7c7272923cd7498c The package f0-abstraction-resolver was found to contain malicious code. Source: ossf-package-analysis 56fcc957050122de02ae6bde3390433a7df94f0b3b66d2cb83847e49a50252d8 The OpenSSF Package Analysis project...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-104992)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104992 advisory. Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input,...

CVE-2026-79019

A flaw was found in ANGLE, a graphics abstraction layer used in Chromium-based browsers. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside...

The Vulnerability with No CVE: Managing Persistent Gaps between Mandate and Authority in AI Coding Agents

Existing guidance identifies excessive agency, excessive permission, weak task-bound authorization, and inadequate agent controls as important risks. Control frameworks also describe capabilities for constraining, authorizing, observing, validating, and responding to agent activity. Yet security...