protobuf-inspector

protobuf-inspector Simple program that can parse Google Protobuf encoded blobs version 2 or 3 without knowing their accompanying definition. It will print a nice, colored representation of their contents. Example: As you can see, the field names are obviously lost, together with some high-level...

CVE-2026-121522

A flaw was found in BuildKit. An attacker who provides a crafted build definition can cause a Denial of Service DoS by crashing the BuildKit daemon. This issue occurs when a build definition resolves metadata for the same Git source reference multiple times, triggering an unhandled panic...

CVE-2026-103433

A flaw was found in Docker Buildx. This vulnerability allows an attacker to cause information disclosure by convincing a user to run an untrusted Bake build definition. Due to missing filesystem read authorization checks, an untrusted build configuration can access client-side files or container...

mwebfp

LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...

CVE-2026-121542

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working...

CVE-2026-121522

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2...

CVE-2026-121522

BuildKit versions v0.26.0 through v0.34.1 are vulnerable to a NULL Pointer Dereference (CWE-476) that causes the BuildKit daemon to panic and crash . This occurs when a specific build definition attempts to resolve metadata for the same Git source reference twice. The crash results in the interru...

CVE-2026-121541 Bake filesystem path entitlements approval can be skipped in some multi-target builds

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the...

EUVD-2026-116536

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the...

CVE-2026-121541

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the...

CVE-2026-121541

In Docker Buildx versions v0.19.0 through v0.38.0 , an untrusted Bake definition building multiple targets can expose files to the Buildx client without required fs.read approval. The root cause is that filesystem paths from certain targets are not consistently verified against approved entitleme...

CVE-2026-121542

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working...

CVE-2026-121541: Docker Docker Buildx: In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together…

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the...

Fermion

Fermion Fermion is an electron application that wraps frida-node and monaco-editor. It offers a fully integrated environment to prototype, test and refine Frida scripts through a single UI. With the integration of Monaco come all the features you would expect from Visual Studio Code: Linting,...

CVE-2014-6271

CVE-2014-6271 An automated way to fix bash Testing for the Vulnerability You can determine if you are vulnerable by executing this test: env x=' :;; echo vulnerable' bash -c 'echo hello' Fixing Vulnerability Run this on the command line. You may be prompted to enter your password. bash curl -s...

CVE-2026-18696

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an...

WordPress MB Custom Post Types & Custom Taxonomies plugin 2.4.0-2.12.2 - Contributor+ Post Type Definition and Non-Public Post Metadata Disclosure vulnerability

Contributor+ Post Type Definition and Non-Public Post Metadata Disclosure vulnerability discovered by RIA Labs in WordPress Plugin MB Custom Post Types & Custom Taxonomies versions 2.4.0-2.12.2...

CVE-2026-111758

A flaw was found in markdown-it. A remote attacker can cause a Denial of Service DoS by providing specially crafted Markdown input that contains an unclosed link reference definition spanning multiple lines. Processing this input triggers excessive CPU consumption due to inefficient string...

npm: markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)

npm: markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options regression since 14.0 vulnerability discovered by ? in WordPress npm markdown-it versions = 14.1.0, 14.3.3...

markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)

Summary A link reference definition whose label or title is never closed is On² in markdown-it 15.0.2 with default options. Continuation lines are pulled lazily with str += lineContent in src/rulesblock/reference.ts, and the subsequent charCodeAt and slice calls flatten the V8 cons-string, copyin...