LR-WebPKI

LR+ WebPKI Evaluation Artifact This package contains the finalized LR+ reference implementation, production reconstruction wrappers, tests, and generated evaluation outputs for context-closed post-quantum authentication over WebPKI CA context. The package is intentionally written as a submission...

CVE-2026-72744-poc

CVE-2026-72744: Nuxt Chrome DevTools endpoint information disclosure PoC Japanese version Overview This repository reproduces CVE-2026-72744 , an information disclosure in Nuxt's development-only Chrome DevTools workspace endpoint. The vulnerable server uses attacker-controlled HTTP headers,...

gha-lab-2f775f277c

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of spotipy-dev/spotipy at commit...

gha-lab-00d54c717d

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of duck-organization/questbot at commit...

DataPrivacy-CVE-2025-23211

CVE-2025-23211: Server-Side Template Injection in Tandoor Recipes A self-contained, reproducible environment demonstrating CVE-2025-23211, a server-side template injection SSTI vulnerability in Tandoor Recipes that leads to remote code execution. The repository stands up the vulnerable version,...

CVE-2026-20079-checker

CVE-2026-20079 Cisco FMC Read-Only Checker A small, deliberately limited validation utility for CVE-2026-20079 , the Cisco Secure Firewall Management Center FMC authentication-bypass vulnerability. This repository is a checker, not an exploit. It does not contain the session-upgrade, file-write,...

CGA-58FX-23X7-9JFM

Bulletin has no description...

CGA-XW99-2XFR-CXG2

Bulletin has no description...

rhuss__jolokia_CVE-2018-1000129_1-4-0

Jolokia is a fresh way to access JMX MBeans remotely. It is different from JSR-160 connectors in that it is an agent-based approach which uses JSON over HTTP for its communication in a REST-stylish way. Multiple agents are provided for different environments: WAR Agent for deployment as web...

EUVD-2026-110927

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be initiated remotely. Upgrading to version 1.3.0.Final is sufficie...

CVE-2026-117505 a2aproject a2a-java ChildQueue queue.offer resource consumption

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be initiated remotely. Upgrading to version 1.3.0.Final is sufficie...

CVE-2026-117505 a2aproject a2a-java ChildQueue queue.offer resource consumption

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be initiated remotely. Upgrading to version 1.3.0.Final is sufficie...

osintui

osintui Open Source Intelligence Terminal User Interface Report Bug · Request Feature Installation First, install Rust using the recommended rustup installation method and then cargo install osintui Configuration osintui expects a TOML configuration file stored at /.osintui/config/config.toml tha...

CVE-2026-117505 a2aproject a2a-java ChildQueue queue.offer resource consumption

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be initiated remotely. Upgrading to version 1.3.0.Final is sufficie...

CVE-2026-117505

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be initiated remotely. Upgrading to version 1.3.0.Final is sufficie...

CVE-2026-117505

A security flaw exists in a2aproject a2a-java up to version 1.2.0.Final . The vulnerability is located in the ChildQueue component, specifically within the queue.offer function. A remote attacker can perform a manipulation that leads to resource consumption , as categorized by CWE-400 (Uncontroll...

CVE-2026-80099

CVE-2026-80099 PoC Unauthenticated authentication bypass and RCE exploit targeting Newfold WordPress plugins that bundle wp-module-data. Overview This tool exploits a Bearer token validation flaw in the Newfold wp-module-data module. When a WordPress site using an affected Newfold plugin is not...

EUVD-2026-95889

Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation...

GHSA-XXPH-C9WW-HJ94 Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation

CompactHashMap/CompactHashSet/MapMakerInternalMap native deserialization triggers uncontrolled memory allocation Summary CompactHashMap, CompactHashSet, and MapMakerInternalMap implement readObjectObjectInputStream by reading an attacker-controlled elementCount or initialCapacity from the stream...

Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation

CompactHashMap/CompactHashSet/MapMakerInternalMap native deserialization triggers uncontrolled memory allocation Summary CompactHashMap, CompactHashSet, and MapMakerInternalMap implement readObjectObjectInputStream by reading an attacker-controlled elementCount or initialCapacity from the stream...