deny-af-alg-bpf

deny-af-alg-bpf विवरण BPF LSM प्रोग्राम जो AFALG Linux कर्नेल क्रिप्टो API सॉकेट निर्माण को ब्लॉक करता है और सभी प्रयासों को रिंग बफर के माध्यम से यूज़रस्पेस में लॉग करता है। यह क्या करता है lsm/socketcreate हुक से जुड़ता है किसी भी socketAFALG, ... कॉल को -EPERM के साथ अस्वीकार करता है संरचित...

Gotenberg <= 8.30.1 - Server Side Request Forgery

Gotenberg is an API-based document conversion tool. In versions 8.30.1 and earlier, the default private-IP deny-lists for the --webhook-deny-list and --api-download-from-deny-list flags use a case-sensitive regular expression ^https?:// to match URL schemes. Because Go's net/url.Parse normalizes...

Vite Dev Server - Information Exposure

Vite is a frontend tooling framework for JavaScript. Before versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network using...

gate0

gate0 Un piccolo motore di policy micro, verificabile, terminante e deterministico. Perché Gate0? Ho creato Gate0 perché ero stanco di fare debug di policy basate su RegEx in produzione. Volevo qualcosa di noioso, limitato e impossibile da mandare in crash. Se vuoi un motore di policy flessibile ...

DNSnitch

DNSnitch Aviso Eu uso isso para mim mesmo, mas está aqui caso alguém precise. Sinta-se à vontade para abrir uma issue se encontrar bugs! O Firewall DNS Interativo de Terminal DNSnitch é um servidor DNS local, focado em privacidade, que coloca você no controle total do tráfego de rede. Diferente d...

MakerChecker

🛡️ MakerChecker Il layer di sicurezza open-source per agenti AI. Rifiuto per impostazione predefinita, approvazioni umane e una traccia di audit firmata crittograficamente — così il tuo agente esegue solo ciò che gli è stato concesso e non può provabilmente approvare il proprio lavoro. Sito Web ·...

BlockGuard

🛡️ BlockGuard — प्रक्रिया-आधारित फ़ाइल एक्सेस सुरक्षा एजेंट BlockGuard एक विंडोज डेटा हानि रोकथाम DLP एजेंट है जो प्रक्रिया स्तर पर फ़ाइल एक्सेस को इंटरसेप्ट और नियंत्रित करता है। यह सुनिश्चित करता है कि केवल अधिकृत प्रक्रियाएँ — निष्पादन योग्य पथ, क्रिप्टोग्राफिक हैश, ऑथेंटिकोड हस्ताक्षर और अखंडत...

fwknop

fwknop - Autorizzazione a Pacchetto Singolo Introduzione fwknop implementa uno schema di autorizzazione noto come Single Packet Authorization SPA per un forte occultamento dei servizi. SPA richiede un singolo pacchetto crittografato, non riproducibile e autenticato tramite un HMAC per comunicare...

iron-proxy

iron-proxy Das Problem CI-Jobs, KI-Codierungsagenten und sandboxed Container können beliebige ausgehende Anfragen stellen. Eine kompromittierte Abhängigkeit, eine Prompt-Injection oder ein bösartiger Build- Schritt kann Geheimnisse exfiltrieren, sich nach Hause telefonieren oder eine Reverse Shel...

CVE-2026-33186

CVE-2026-33186 gRPC-Go RBAC Authorization Policy Bypass via Missing :path Slash Auth Bypass Beschreibung Das authz-Paket in google.golang.org/grpc implementiert eine RBAC-Autorisierung auf SDK-Ebene unter Verwendung von Deny- und Allow-Regeln, die gegen den :path-Pseudo-Header abgeglichen werden...

CVE-2023-43208-EXPLOIT

CVE-2023-43208 - Exploit de Execução Remota de Código RCE no Mirth Connect 🚨 Introdução 📖 Este repositório contém um exploit de Prova de Conceito PoC para uma vulnerabilidade crítica no NextGen Healthcare Mirth Connect versões anteriores a 4.4.1. A vulnerabilidade, rastreada como CVE-2023-43208,...

CVE-2026-58209

A flaw was found in NATS Server. This vulnerability allows for unauthorized information disclosure where MQTT messages, intended to be denied based on subscription rules, are still delivered to subscribers. This occurs because the server's delivery paths do not consistently recheck the original...

CVE-2026-70452

A flaw was found in rsync. This vulnerability allows a remote attacker to bypass hostname-based access control rules. By inducing DNS resolution failures, the rsync daemon incorrectly skips deny rules, granting unauthorized access to restricted module file trees. Mitigation To mitigate this issue...

CVE-2026-62670 Fail-open authorization in grav-plugin-flex-objects admin-next API: api.access user gets full CRUD on permission-less directories (requireFlexPermission missing else-deny)

Grav Flex Objects Plugin allows you to build custom collections of objects. Prior to 1.4.3, the Grav Flex Objects Admin Next API requireFlexPermission method in classes/Api/FlexApiController.php returns without denying access when a directory blueprint omits config.admin.permissions. An...

BIT-CONSUL-2026-15970 L7 intention authorization bypass via custom public listener

Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypass when a service proxy is configured with a custom public listener. An authenticated mesh workload may reach HTTP paths that are blocked by a path-based deny intention. This...

CVE-2026-72835

filebrowser versions before v2.63.21 fail to canonicalize paths before evaluating access rules, allowing authenticated users to bypass administrator-defined deny rules using case-variant or backslash-separated paths. Attackers can request files with alternate path representations that match no ru...

EUVD-2026-58649

filebrowser versions before v2.63.21 fail to canonicalize paths before evaluating access rules, allowing authenticated users to bypass administrator-defined deny rules using case-variant or backslash-separated paths. Attackers can request files with alternate path representations that match no ru...

CVE-2026-70463

rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...

CVE-2026-70452

rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during hostname-based access control evaluation. When a DNS lookup for a hostname-based deny rule fails, the daemon skips the ru...

CVE-2026-70452

rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during hostname-based access control evaluation. When a DNS lookup for a hostname-based deny rule fails, the daemon skips the ru...