39 matches found
Malcolm
Malcolm Malcolm è una potente suite di strumenti per l'analisi del traffico di rete, progettata con i seguenti obiettivi: Facile da usare – Malcolm accetta dati di traffico di rete sotto forma di file di cattura completa dei pacchetti PCAP, log Zeek e avvisi Suricata. Questi artefatti possono...
Malcolm
Malcolm Malcolm è una potente suite di strumenti per l'analisi del traffico di rete progettata con i seguenti obiettivi: Facile da usare – Malcolm accetta dati di traffico di rete sotto forma di catture di pacchetti complete PCAP, log di Zeek e avvisi di Suricata. Questi artefatti possono essere...
honeyprompt
honeyprompt Introducing honeyprompt, un framework di deception basato su LLM realizzato da/per sviluppatori web. Il progetto personale di passione di @alectrocute. Supporta tutti i principali provider LLM cloud e locali. SSH, HTTP, TLS, TCP, telnet e altro. Viene fornito come un piccolo container...
CVE-2026-13107
IBM Business Automation Workflow (containers and traditional) versions 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, and 26.0.0-IF001 may use programming model artifacts in Advanced custom applications that are vulnerable to XML External Entity (XXE) injection by default (CWE-611). A remote authentic...
GO-2025-3433 vulnerabilities
Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater...
CVE-2026-11932 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 is vulnerable to a denial of service attack...
Malcolm v26.07.1
Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...
honeyprompt v0.1.8
honeyprompt Introducing honeyprompt, an LLM-first deception framework made by/for web developers. The personal passion project of @alectrocute. Supports all major cloud and local LLM providers. SSH, HTTP, TLS, TCP, telnet and more. It ships as a small container and a single static binary and keep...
Malcolm v26.07.0
Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...
PYSEC-2026-2011 vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class
Summary A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows...
CVE-2026-47172
Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, the repository has a privileged deploy workflow that runs after the unprivileged build workflow completes. The build workflow runs on pull requests, and the deploy workflow checks ou...
The vulnerability relates to the Azure Kubernetes Service (AKS), which handles the deployment of container applications and their management. It stems from an incorrect path name limitation in the directory structure, allowing a malicious actor to execute arbitrary code.
The vulnerability of the Container Application Deployment and Management service provided by Azure Kubernetes Service AKS is related to an incorrect path name limitation for the catalog. Exploiting this vulnerability could allow a attacker to execute arbitrary code...
Dirty-cow-exploit
System Documentation Architecture - Frontend: React 19...
AutoGPT 安全漏洞
AutoGPT is an open-source tool developed by AutoGPT. It aims to make AI accessible and usable for everyone. Versions of AutoGPT prior to 0.6.32 contain security vulnerabilities. These vulnerabilities stem from the unlimited log size during container deployment, which can lead to exhaustion of dis...
CVE-2026-26202 Penpot has Arbitrary File Read via create-font-variant RPC endpoint
Penpot is an open-source design tool for design and code collaboration. Prior to version 2.13.2, an authenticated user can read arbitrary files from the server by supplying a local file path e.g. /etc/passwd as a font data chunk in the create-font-variant RPC endpoint, resulting in the file...
CVE-2026-26202 Penpot has Arbitrary File Read via create-font-variant RPC endpoint
Penpot is an open-source design tool for design and code collaboration. Prior to version 2.13.2, an authenticated user can read arbitrary files from the server by supplying a local file path e.g. /etc/passwd as a font data chunk in the create-font-variant RPC endpoint, resulting in the file...
vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector
Summary A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods obtain and process media from URLs provided by users, using different Python parsing libraries when restrictin...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal due to using an image with a metadata.yaml containing templates. An attacker can read or overwrite arbitrary files on the host system, potentially leading to execution of arbitrary commands with elevated privileges, ...
