wxpath

wxpath - XPath를 사용한 선언적 웹 그래프 탐색 새로운 기능: TUI - wxpath 표현식을 테스트하고 데이터를 내보내기 위한 대화형 터미널 인터페이스Textual 기반. 설치 Python 3.10+ 필요. pip install wxpath TUI 지원을 위해: pip install "wxpathtui" uv를 통해 TUI 즉시 실행: uvx --from "wxpathtui" wxpath-tui wxpath란? wxpath 는 탐색을 XPath로 직접 표현하는 선언형 웹 크롤러입니다. 명령형 크롤링 루프를 작성하는...

crml

CRML — 사이버 위험 모델링 언어 상태: 초안. 이 프로젝트는 활발히 개발 중이며 예고 없이 변경될 수 있습니다. 의견, 이슈, 기여를 환영합니다. ⚠️ 경고 이 코드베이스는 현재 crml-dev-1.3 브랜치에서 개발 중입니다. 최신 진행 상황과 소스는 다음을 참조하세요: https://github.com/Faux16/crml/tree/crml-dev-1.3 버전: 1.2 유지 관리: Zeron Research Labs 및 CyberSec Consulting LLC 지원: 커뮤니티 기여자 및 얼리어답터 CRML은 개방형...

CertificateDsc

CertificateDsc 行動規範 このプロジェクトは この行動規範 を採用しています。 リリース main ブランチへのマージごとに、プレビューリリースが PowerShell Gallery にデプロイされます。定期的にリリースバージョンのタグがプッシュされ、完全なリリースが PowerShell Gallery にデプロイされます。 貢献 一般的な DSC Community の 貢献ガイドライン を確認してください。 変更ログ 各バージョンの変更の完全なリストは 変更ログ にあります。 リソース CertificateDsc モジュールは、Windows PowerShell...

melange

melange 宣言的パイプラインを使用して apk パッケージをビルドします。 apko でビルドされたコンテナイメージにカスタムパッケージを提供するためによく使用されます。大多数の apk は、Wolfi または Alpine Linux エコシステムのいずれかで使用するためにビルドされます。 主な特徴: パイプライン指向のビルド。 ビルドパイプラインのすべてのステップは、従来のパッケージマネージャーが持つような明確なフェーズとは異なり、ユーザーが定義して制御します。 デフォルトでマルチアーキテクチャ対応。 QEMU...

decker

Decker - 침투 테스트 오케스트레이션 프레임워크 목적 Decker는 침투 테스트 오케스트레이션 프레임워크입니다. HashiCorp Configuration Language 2 Terraform과 동일한 구성 언어를 활용하여 선언적인 침투 테스트를 코드로 작성할 수 있게 해주므로, 팀이나 커뮤니티와 테스트를 버전 관리, 공유, 재사용 및 협업할 수 있습니다. decker 구성 파일 예시: // 변수는 환경에서 가져옵니다. // 예: DECKERTARGETHOST // 구성 파일 전체에서 var.로 사용 가능합니다. // 예...

BIT-TOMCAT-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through...

OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree

Summary The @typespec/openapi3 emitter retains the value of a @versioned enum member and interpolates it into the output filename as version without sanitizing path separators or traversal components. The completed path reaches the compiler's emitFile, which creates the parent directory and write...

tomcat: Apache Tomcat: Improper Authorization allows bypass of declarative role constraints

A flaw was found in Apache Tomcat. This improper authorization vulnerability occurs because security-role-ref definitions are incorrectly used as role aliases within the Realm, in addition to their correct usage with Request.isUserInRole. This misconfiguration allows for a bypass of declarative...

[SECURITY] Fedora 44 Update: postgresql16-anonymizer-3.1.3-1.fc44

PostgreSQL Anonymizer is an extension to mask or replace personally identifiable information PII or commercially sensitive data from a PostgreSQL database. The project has a declarative approach of anonymization. This means you can declare the masking rules using the PostgreSQL Data Definition...

CVE-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...

CVE-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...

CVE-2026-66422

Apache Tomcat is susceptible to an improper authorization vulnerability where security-role-ref definitions are incorrectly utilized as role aliases within the Realm, alongside their intended use with Request.isUserInRole() . This flaw affects versions 11.0.0-M1 through 11.0.24 , 10.1.0-M1 throug...

SUSE CVE-2026-55685

React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauthenticated targeted requests that would put heavy load on the server and slow down response times. This issue is a follow up to CVE-2026-42342, and does not does not impact React...

CVE-2026-53666

A flaw was found in React Router. If an application is configured to allow attacker-supplied input to modify errors during server-side rendering SSR, a remote attacker could trigger unexpected code execution on the client. This execution could lead to an outbound network request, potentially...

EUVD-2026-49634

React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauthenticated targeted requests that would put heavy load on the server and slow down response times. This issue is a follow up to CVE-2026-42342, and does not does not impact React...

CVE-2026-42211

A flaw was found in React Router when operating in Framework Mode. A remote attacker could exploit an existing prototype pollution vulnerability within the application code. This could lead to unauthorized remote code execution RCE on the server through a two-step attack involving external...

Oracle Linux 10 : qt6-qtdeclarative (ELSA-2026-20567)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-20567 advisory. 6.10.1-1.1 - VectorImage: sanitize source string used in output CVE-2025-14576 Resolves: RHEL-173494 Tenable has extracted the preceding description block...

qt6-qtdeclarative security update

6.10.1-1.1 - VectorImage: sanitize source string used in output CVE-2025-14576 Resolves: RHEL-173494...

CVE-2026-33244

A flaw was found in react-router. When using Framework Mode with pre-rendering enabled, an attacker can exploit improper handling of the HTTP Location header value. This can lead to Cross-Site Scripting XSS, allowing malicious scripts to be injected into statically generated HTML files if the...

CVE-2026-40181

A flaw was found in React Router. This vulnerability allows a remote attacker to redirect users to an external, potentially malicious, website. This occurs when specially crafted URLs, containing paths starting with //, are passed to the redirect function, causing them to be misinterpreted as...