udpack

UDPack UDPack è un offuscatore generico estensibile di pacchetti UDP. Lo scopo di questa applicazione è di porsi nel percorso di un flusso di dati UDP e offuscare, deoffuscare o altrimenti modificare i pacchetti. È richiesto Python 3.4 o superiore, poiché questo script utilizza la libreria asynci...

kestrel-lang

.. image:: https://github.com/opencybersecurityalliance/kestrel-lang/raw/develop/logo/logowtext.png :width: 460 :alt: Kestrel – Sprache für die Bedrohungsjagd |readthedocs| |pypi| |downloads| |codecoverage| |black| | Jagen mit nativen Abfragen/Skripten links oder Kestrel rechts? Eine vollständige...

kit-policy

kit-policy Un framework di autorizzazione flessibile e componibile per Kit, ispirato a Action Policy di Ruby. TOC File File| Descrizione ---|--- .editorconfig| Configurazione di formattazione dell'editor .gitignore| Regole Git ignore per artefatti di build e dipendenze .tool-versions| Versioni...

http-garden

The HTTP Garden HTTP Garden è una raccolta di server HTTP e proxy configurati per essere componibili, insieme a script per interagire con essi in un modo che rende la ricerca di vulnerabilità molto molto più facile. Per alcune belle demo delle vulnerabilità che puoi trovare con HTTP Garden, guard...

CVE-2026-73423 Astro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misordered

Astro is a web framework for content-driven websites. From 7.0.0 until 7.0.6, the composable astro/hono pipeline installs security.checkOrigin only through the middleware primitive, while actions and pages can dispatch to user code independently. Mounting actions before middleware, as in the...

Astro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misordered

Summary In the composable astro/hono pipeline, the security.checkOrigin protection is only installed by the middleware primitive. The actions and pages primitives each dispatch to user code independently, so a pipeline that mounts either primitive before or without middleware will bypass the orig...

GHSA-8MV7-9C27-98VC Astro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misordered

Summary In the composable astro/hono pipeline, the security.checkOrigin protection is only installed by the middleware primitive. The actions and pages primitives each dispatch to user code independently, so a pipeline that mounts either primitive before or without middleware will bypass the orig...

Tool Calling in Spring AI 2.0: A Composable, Agentic Architecture

Tool calling — the ability for an AI model to invoke application-defined functions and act on the results — is the essential building block of agentic AI systems. A model that can discover information, take action, and loop until a goal is reached is an agent. Spring AI 2.0 rearchitects tool...

Eve'S Forgery Probability from Her False Acceptance Probability: Interactive Authentication, Holevo Information and the Min-Entropy

We obtain estimates for Eve's forgery probability, namely the probability that she is able to forge a message which Alice or Bob mistakenly accept over a noisy Quantum channel for generating a shared Quantum secret key. This probability is related to Eve's success probability obtained in a previo...

Finite-Size Security of QKD: Comparison of Three Proof Techniques

We compare three proof techniques for composable finite-size security of quantum key distribution under collective attacks, with emphasis on how the resulting secret-key rates behave at practically relevant block lengths. As a benchmark, we consider the BB84 protocol and evaluate finite-size...

Optimizing Epsilon Security Parameters in QKD

We investigate the optimization of epsilon-security parameters in quantum key distribution QKD, aiming to improve the achievable secure key rate under a fixed overall composable security level. For this purpose, we employ a continuous genetic algorithm CGA to optimize the epsilon-security...

EUVD-2025-199106

Malicious code in @oku-ui/use-composable npm...

Malicious code in @oku-ui/use-composable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab65a88d661d76b82f009862721ca4892e3243b91a6ac493c1f09613cf76955 The package @oku-ui/use-composable was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49341 Malicious code in mercury-composable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae0bbe9358cdd9f785cb91ea194f7e1e9ffa315bca07c6894651b5cfb45b865 The package mercury-composable was found to contain malicious code...

Malicious code in mercury-composable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae0bbe9358cdd9f785cb91ea194f7e1e9ffa315bca07c6894651b5cfb45b865 The package mercury-composable was found to contain malicious code...

EUVD-2025-37540

Malicious code in mercury-composable npm...

EUVD-2021-29261

Malicious code in bioql PyPI...

Incorporating Device Characterization into Security Proofs

Typical security proofs for quantum key distribution QKD rely on having some model for the devices, with the security guarantees implicitly relying on the values of various parameters of the model, such as dark count rates or detector efficiencies. Hence to deploy QKD in practice, we must establi...

Security of a Secret Sharing Protocol on the Qline

Secret sharing is a fundamental primitive in cryptography, and it can be achieved even with perfect security. However, the distribution of shares requires computational assumptions, which can compromise the overall security of the protocol. While traditional Quantum Key Distribution QKD can...

CVE-2024-39597 [CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce

In SAP Commerce, a user can misuse the forgotten password functionality to gain access to a Composable Storefront B2B site for which early login and registration is activated, without requiring the merchant to approve the account beforehand. If the site is not configured as isolated site, this ca...