53318 matches found
https-nj.gov---CVE-2020-11023
https-nj.gov---CVE-2020-11023 Vulnearability Report of the New Jersey official site Potential XSS vulnerability when appending HTML containing option elements. Passing HTML containing elements from untrusted sources - even after sanitizing them - to one of jQuery's DOM manipulation methods i.e...
capability-sdk
Capability SDK Shared Go SDK for building security capabilities for the Guard platform. Packages pkg/capability - Capability Interface Defines the standardized interface that security scanners implement. Types: // Target - what a capability scans type Target struct Type TargetType // domain, ip,...
PT-2026-118240
Name of the Vulnerable Software and Affected Versions RingRTC versions prior to 2.72.0 Description An issue exists in the RingRTC library for Signal where a remote peer can saturate the call's Finite State Machine FSM event queue with junk events. This saturation prevents the local hang-up event...
PT-2026-118341
@e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull request commenters to hijack CI test reports by posting comments with the predictable marker. Because findComment and upsertComment in post.ts never check the comment author, attackers can receive resul...
PT-2026-120307
Summary A link reference definition whose label or title is never closed is OnΒ² in markdown-it 15.0.2 with default options. Continuation lines are pulled lazily with str += lineContent in src/rules block/reference.ts, and the subsequent charCodeAt and slice calls flatten the V8 cons-string, copyi...
PT-2026-118669
Name of the Vulnerable Software and Affected Versions X2000R version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 Description An arbitrary file write issue exists in the boa formUploadFile functionality. An authenticated attacker can send a specially crafted HTTP request to write files to the system,...
PT-2026-118460
Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify or delete other users' comments because CommentsControllerupdate and destroy use an unscoped Comment.find without authorization checks. Attackers can send PUT or DELETE...
PT-2026-120323
Summary With html: true, markdown-it takes quadratic time to parse repeated unterminated HTML constructs inside a paragraph. This affects HTML comments , ?, , and . When the terminator is absent, matching fails. Parsing eventually reaches the next opener and scans an overlapping suffix again...
Linux Distros Unpatched Vulnerability : CVE-2026-112401
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile.seek repeatedly appends...
Linux Distros Unpatched Vulnerability : CVE-2026-112891
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. getglobalheader repeatedly...
PT-2026-120151
Name of the Vulnerable Software and Affected Versions @modelcontextprotocol/server versions 2.0.0 through 2.2.0 Description An MCP server accessed over HTTP may deliver responses and notifications from one client to another. This occurs when clients share a single stateless transport, McpServer...
external_expat_AOSP10_r33_CVE-2022-25236
Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...
BlueKeep
rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 700,000 machines on the public Internet vulnerable to this vulnerability, compared to about 2,000,000 machines that have Remote...
honeypotscan
Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. π‘οΈ HoneypotScan Check if a token is a scam before you buy Free, fast, and accurate...
CVE-2022-47952
Suggested description lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace...
curl:curl_fuzzer_proto_ws: Heap-buffer-overflow in SHA256_Update_thunk
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5102160812244992 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerprotows Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7a2289c2c801...
CVE-2026-112891
Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. getglobalheader repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted input image. An attack...
CVE-2026-112401
Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile.seek repeatedly appends immutable bytes for comment sub-blocks and multiple comment extensions, and frame zero is parsed during Image.open. An attacker can submi...
external_expat_AOSP10_r33_CVE-2022-23990
Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...
ida-cli
ida-cli Headless IDA CLI and skill-first toolkit for binary analysis on macOS and Linux. ida-cli auto-selects a runtime backend, auto-starts a local server when needed, and exposes the same surface as a flat CLI, a stdio MCP transport, and a Streamable HTTP MCP transport. δΈζθ―΄ζ Two User-Facing...