223 matches found
android-kernel-exploitation-ashfaq-CVE-2019-2215
android-kernel-exploitation-ashfaq-CVE-2019-2215. Docker image provided by user Robert Dan in the workshop android-kernel-exploitation-ashfaq-CVE-2019-2215...
VulnCheck KEV: CVE-2026-39781
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue affects Document Gallery: from n/a through 5.1.1...
Spring Office Hours Podcast: S5E25 - Future of Software Development with Josh Long
Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun are joined by the legendary Josh Long. In this episode, we will look into the future of software development. We will also address at least one hot take that recently made the round...
CVE-2026-57695
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue affects Document Gallery: from n/a through = 5.1.0...
CVE-2026-57695
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue affects Document Gallery: from n/a through = 5.1.0...
EUVD-2026-43356
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue affects Document Gallery: from n/a through = 5.1.0...
an-website (24.4.0), arctic3d (0.4.1) +5 more potentially affected by CVE-2026-41066 via lxml (5.2.0)
lxml PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - an-website 24.4.0 - arctic3d 0.4.1 - atr-dan =0.2.0rc5, =1.6.0, =0.4.8b1, =0.13.0, =0.16.11 Source cves: CVE-2026-41066 Source advisory: OSV:PYSEC-2026-...
an-website (24.4.0), arctic3d (0.4.1) +5 more potentially affected by CVE-2026-41066 via lxml (5.2.0)
lxml PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - an-website 24.4.0 - arctic3d 0.4.1 - atr-dan =0.2.0rc5, =1.6.0, =0.4.8b1, =0.13.0, =0.16.11 Source cves: CVE-2026-41066 Source advisory:...
Spring Office Hours Podcast: S5E13 - Community Potluck
Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this Potluck episode, Dan and DaShaun open up the floor to the community, answering your questions on Spring Boot, Spring AI, Spring Security, and whatever else is on your mind. Potluck episodes are shaped...
USN-8049-1: Nova vulnerability
Dan Smith discovered that Nova incorrectly called qemu-img without a format restriction when resizing disks. An attacker could possibly use this issue to destroy data on the host system...
n8n Supply Chain Attack Abuses Community Nodes to Steal OAuth Tokens
Threat actors have been observed uploading a set of eight packages on the npm registry that masqueraded as integrations targeting the n8n workflow automation platform to steal developers' OAuth credentials. One such package, named "n8n-nodes-hfgjf-irtuinvcm-lasdqewriit," mimics a Google Ads...
CVE-2025-23895
Cross-Site Request Forgery CSRF vulnerability in Dan Cameron Add RSS add-rss allows Stored XSS.This issue affects Add RSS: from n/a through = 1.5...
A Bootiful Podcast: Dan Vega on the fundamentals of software engineering
Hi, Spring fans! I'm so excited to chat with fellow Spring developer advocate Dan Vega about his new book, Fundamentals of Software Engineering...
MAL-2025-183918 Malicious code in mitali-dan-ujokuluaia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd418f93d91ee5bd14ee4e9a922937c05928bf21ffe4d2a9530bf34d76d1178e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mitali-dan-ujokuli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a014ebee66889b19c5a0043a42c832a6b11195ef74d96380ae84220c1ee5aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-183915 Malicious code in mitali-dan-ujokui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff51f7960fa4264b5ea644beb41d4e8884ad25329bd72cdaa1c1bb436ea7e93b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Sendmarc appoints Dan Levinson as Customer Success Director in North America
Wilmington, Delaware, 21st October 2025, CyberNewsWire...
EUVD-2008-1565
Malware in sbrugna...