CocoaPods-RCE_CVE-2024-38366

CocoaPods-RCE इस रिपॉजिटरी में CocoaPods पैकेज मैनेजर को रिसर्च और तोड़ने के दौरान मिली RCE कमजोरी के पीछे की रिसर्च प्रक्रिया और विचारों की थोड़ी गहराई से पड़ताल शामिल है। शोध प्रकाशन ब्लॉग पोस्ट यहां पढ़ा जा सकता है:...

confused

Confused Uno strumento per verificare la presenza di namespace liberi per nomi di pacchetti privati menzionati nella configurazione delle dipendenze per Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json o MVN maven pom.xml. Di cosa si tratta? Il 9 febbraio 2021...

bigint-buffer-safe

bigint-buffer-safe Substituto seguro e puro em JavaScript para bigint-buffer. Corrige CVE-2025-3194 CVSS 7.5, estouro de buffer / DoS. Zero dependências. Sem bindings nativos. Funciona em Node.js e navegadores. Por que isso existe? O pacote original bigint-buffer possui uma vulnerabilidade de...

Reposilite >= 3.3.0, < 3.5.12 - Arbitrary File Read

Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Reposilite has addressed this issue in version...

katoolin3

katoolin3 Katoolin3 brings all programs available in Kali Linux to Debian and Ubuntu. Description This program is a port of katoolin from LionSec to python3. Katoolin3 offers several improvements over katoolin: Up to date packages The old katoolin uses an outdated package list. Katoolin3 always...

xwiki__xwiki-commons_CVE-2023-29528_14-9-rc-1

XWiki Commons XWiki Commons sind technische Bibliotheken, die mehreren anderen XWiki-Projekten der obersten Ebene gemeinsam sind. Diese Bibliotheken können von Projekten außerhalb des XWiki-Ökosystems verwendet werden, sind generisch und nicht mit der Wiki-Domäne verwandt. XWiki Platform, XWiki...

ore-mal-pkg-inspector

OreWatch Rilevamento di Pacchetti Dannosi Multi-Ecosistema e Scanner di Sicurezza per la Supply Chain Uno strumento di sicurezza di livello produttivo per il rilevamento di pacchetti dannosi e minacce alla supply chain negli ecosistemi npm, PyPI, Maven, RubyGems, Go e Cargo. Sfrutta la raccolta...

DesckVB-RAT

DesckVB RAT v2.9 — Modularer .NET RAT, Mehrstufige Auslieferung & Plugin-Ökosystem Toolchain-Verknüpfung zu „Pjoao1578“ Autor: ShadowOpCode X/Twitter: https://x.com/ShadowOpCode Dieses Repository begleitet einen vollständigen technischen Bericht, der ein aktives Malware-Ökosystem dokumentiert, da...

OreNPMGuard

OreNPMGuard - Shai-Hulud Paket-Scanner Version 2.0.0 - Shai-Hulud 2.0 Erkennung & erweitertes Präventionssystem Ein Sicherheitstool zur Erkennung kompromittierter npm-Pakete aus den Shai-Hulud-Lieferkettenangriffen ursprünglich September 2025 und Shai-Hulud 2.0 November 2025. Scannt sowohl...

safer-dependencies

Dependências mais seguras para o Claude Code Quando assistentes de codificação com IA, como o Claude, adicionam pacotes ao seu projeto, eles geralmente escolhem qualquer versão que pareça certa — sem verificar se ela tem vulnerabilidades de segurança conhecidas, se o pacote ainda é mantido...

guarddog

GuardDog GuardDog هي أداة سطر أوامر CLI تحدد حزم PyPI و npm الخبيثة، ووحدات Go، وصناديق Rust، و RubyGems، وإجراءات GitHub، أو إضافات VSCode. تقوم بتحليل ثابت لشفرة مصدر الحزمة عبر قواعد YARA وتحلل بيانات الحزمة الوصفية لاكتشاف هجمات سلسلة التوريد. ما الذي يجعل GuardDog مختلفًا: بدلاً من مجرد سرد...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

ransomware_map

Orange Cyberdefense CERT - Mappa dell'Ecosistema Ransomware Ultima versione = 29 Gennaio 2026 - in arrivo Mappa che visualizza le relazioni e le timeline associate a oltre 300 gruppi ransomware, tra il 2015 e il 2026. Speriamo che sia utile! Team World Watch - CERT Globale Orange Cyberdefense Tut...

Presentations

Präsentationen 2025 CodeBlue 2025 - 18. bis 19. November 2025 KI-beschleunigtes Exploiting: Kompromittierung des MTE-fähigen Pixel über den DSP-Co-Prozessor von PAN Zhenpeng & Billy JHENG Bing Jhong Tanzen mit dem Exynos-Co-Prozessor: Samsung aus Spaß und „Profit“ pwnen von Muhammad Ramdhan, PAN...

serverless

Sito web • Documentazione • X / Twitter • Slack della community • Forum The Serverless Framework – Semplifica l'uso di AWS Lambda e di altri servizi cloud gestiti per creare applicazioni che si adattano automaticamente, non costano nulla quando sono inattive e richiedono una manutenzione...

better-auth

Discord · Sito web · Problemi Better Auth Better Auth è un framework di autenticazione e autorizzazione agnostico rispetto al framework per TypeScript. Offre una serie completa di funzionalità pronte all'uso e include un ecosistema di plugin che semplifica l'aggiunta di funzionalità avanzate con...

GO-2026-6223 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-pipelines-fips, kubeflow-pipelines-driver-fips...

MAL-2026-14336 Malicious code in arrayref (crates.io)

arrayref 0.3.10 was published to crates.io from a maintainer account droundy that appears to be compromised. Unlike every prior release, 0.3.10 declares a dependency on the malicious crate proc-macro1. The arrayref source itself is unchanged genuine macro code, but Cargo compiles the declared...

CVE-2026-18165

creationtimestamp| type| source ---|---|--- 2026-08-15 13:48:50+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mt4st6feps2i...

DEBIAN-CVE-2026-68463

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: use pmruntimeresumeandget in suspend Replace pmruntimegetsync with pmruntimeresumeandget to simplify error handling. pmruntimeresumeandget automatically drops the usage counter on failure, avoiding the need...