CVE-2026-55734: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian Guardian.Permissions module allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines...

CVE-2026-55733: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...

CVE-2026-54894: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.toatom/1. basekey/1 in...

SUSE CVE-2026-27761

Gitea versions up to and including 1.26.2 allow repository RSS and Atom feed endpoints to bypass API access token scope checks, exposing private repository commit data to tokens without the required repository scope...

CVE-2026-54705: Improper Encoding or Escaping of Output

MathLive provides web components for math display and input. Prior to 0.110.0, MathLive fails to escape text-mode content in \text and \mbox commands in Box.toMarkup at src/core/box.ts, in xmlEscape, scanText, and text-mode output in src/formats/atom-to-math-ml.ts, and through convertLatexToMarku...

Atom SFTP Configuration File - Detect

Atom SFTP deployment configuration file was detected. File contains server details and credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Atom SFTP deployment configuration file was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

Atom Synchronization Exposure Detection

It discloses username and password created by remote-sync for Atom, contains FTP and/or SCP/SFTP/SSH server details and credentials !/usr/bin/env python3 -- coding: utf-8 -- """It discloses username and password created by remote-sync for Atom, contains FTP and/or SCP/SFTP/SSH server de.""" from...

Atom CMS v2.0 - Cross-Site Scripting Detection

Atom CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the "A" parameter in /widgets/debug.php. !/usr/bin/env python3 -- coding: utf-8 -- """Atom CMS v2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Atom remote-ssh ftpconfig Exposure Detection

Created by remote-ssh for Atom, contains SFTP/SSH server details and credentials !/usr/bin/env python3 -- coding: utf-8 -- """Created by remote-ssh for Atom, contains SFTP/SSH server details and credentials.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Malicious Package

Overview dolyame-boxy-atom-desktop-bnpl-text is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

Malicious Package

Overview dolyame-boxy-atom-bnpl-dangerously-html is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...

Malicious Package

Overview dolyame-boxy-atom-desktop-bnpl-container is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizati...

Malicious Package

Overview dolyame-boxy-atom-desktop-bnpl-highlighted-text is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview tinkoff-pfp-atom-desktop-carousel is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview dolyame-boxy-atom-container is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview dolyame-boxy-atom-bnpl-store-button-set is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...

Malicious Package

Overview dolyame-boxy-atom-bnpl-info-card is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview dolyame-boxy-atom-bnpl-card is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview dolyame-boxy-atom-bnpl-image-card is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview blocks-sahred-atom-mobile-app-bar-action is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizati...