Nettacker

OWASP Nettacker...

FreeRDP

FreeRDP：远程桌面协议实现 FreeRDP 是远程桌面协议（RDP）的一个自由实现，基于 Apache 许可证发布。 在一个互操作性最终能够解放你的计算体验的世界里，随心所欲地在你想要的地方、以你想要的方式使用你的软件。 代码质量状态 !\arm,ppc,ricsv\ architecture buildshttps://github.com/FreeRDP/FreeRDP/actions/workflows/alt-architectures.yml/badge.svg !\freebsd\ architecture...

EasyOCR

EasyOCR Ready-to-use OCR with 80+ supported languages and all popular writing scripts including: Latin, Chinese, Arabic, Devanagari, Cyrillic, etc. Try Demo on our website Integrated into Huggingface Spaces 🤗 using Gradio. Try out the Web Demo: What's new...

secureCodeBox

OWASP secureCodeBox...

snuck

snuck Automatic XSS filter bypass Overview snuck is an automatic tool whose goal is to significantly test a given XSS filter by specializing the injections on the basis of the reflection context. This approach adopts Selenium to drive a web browser in reproducing both the attacker and the victim...

lockc

lockc is open source sofware for providing MAC Mandatory Access Control type of security audit for container workloads. The main reason why lockc exists is that containers do not contain. Containers are not as secure and isolated as VMs. By default, they expose a lot of information about host OS...

dashbuilder

Dashbuilder Dashbuilder 是一个通用的仪表盘和报告Web应用，它允许： 可视化的仪表盘配置和个性化 使用多种图表库支持不同类型的可视化 功能完整的图表可视化定义编辑器 定义交互式报表表格 通过不同协议从外部系统提取数据 同时支持分析型和实时仪表盘 采用 Apache License 2.0 许可 更多信息，请访问项目网站 dashbuilder.org 即将推出的功能 基于 D3 JS、Lienzo GWT 和 Chart JS 的新渲染器 层次化（嵌套分组）展示器类型：树图和饼图 支持多个动态数据系列 丰富的移动端支持 告警和SLA配置 RESTful API 架...

Openfire Administration Console - Authentication Bypass

Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup...

Design and Implementation of an Open-Source Security Framework for Cloud Infrastructure

Misconfiguration, excessive privilege, and tool fragmentation remain the main reasons why enterprise cloud environments are breached. Recent reports on cloud-native application protection note that most incidents can be traced back to configuration or identity errors rather than platform flaws, a...

[SECURITY] Fedora 43 Update: python-diskcache-5.6.3-12.fc43

DiskCache is an Apache2 licensed disk and file backed cache library, written in pure-Python, and compatible with Django...

EUVD-2023-44786

Malicious code in bioql PyPI...

EUVD-2023-45144

Malicious code in bioql PyPI...

log4shell-detector

This is a Gradle wrapper script for a Java project. Here's a breakdown of the key points: Purpose: The script is used to start a Gradle build process. License: The script is licensed under the Apache License, Version 2.0. Functionality: The script sets up the environment for the Gradle build...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

This repository is a collection of proof-of-concept PoC exploits from Datadog Security Labs. The exploits are designed to demonstrate vulnerabilities in various software products, including Confluence, OpenSSL, and Spring. The repository contains code and instructions for running the exploits, as...

Moderate: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

freerdp bug fix update

An update is available for freerdp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

aflnet_profuzzbench

It is an offensive tool for network protocols. The primary CVE ID is not present in the provided context, but the tool is an extension of American Fuzzy Lop AFL, which is a greybox fuzzer for protocol implementations. The tool, AFLNet, is seeded with a corpus of recorded message exchanges between...

FreeBSD : Openfire administration console authentication bypass (9bcff2c4-1779-11ef-b489-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9bcff2c4-1779-11ef-b489-b42e991fc52e advisory. - Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative...

Oracle Linux 9 : freerdp (ELSA-2024-2208)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2208 advisory. 2:2.11.2-1 - Update to 2.11.2 RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300, RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,...

Moderate: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: Incorrect offset calculation leading to DOS CVE-2023-39350...