13584 matches found
IAM Proxy Component Compromise Information Disclosure
The vulnerability of the IAM Proxy component of the Identity & Access Management tool in Platform V IAM is related to synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
Aquarius L311 Driver Access Control
The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to access control errors. Exploiting this vulnerability can allow attackers to gain access to protected information and affect the system...
Bestechic BES2300 Bluetooth Audio SoC Buffer Overflow DoS
The vulnerability of the SBCDecodeFrames function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failure...
FOQUZ Platform Data Compromise
The vulnerability of the FOQUZ platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...
Kerberos Privilege Escalation
The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Snow Crash
Snow Crash This project is an introduction to computer security. Snow Crash will help you discover security in various sub-domains, with a developer-oriented approach. You will become familiar with several languages ASM, Perl, Php, etc., develop a certain logic to understand unknown programs, and...
nomore403
NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...
sqlsure
sqlsure AI writes your SQL. sqlsure makes sure it's right. A query can be perfectly valid, run without error, and return a number that's silently wrong — revenue double-counted by a join, an average summed, a patient identifier exposed. Databases don't catch this. Linters don't catch this. LLMs...
chromepass
Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...
cryptovenom
CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...
yaraQA
yaraQA YARA rule Analyzer to improve rule quality and performance Why? YARA rules can be syntactically correct but still dysfunctional. yaraQA tries to find and report these issues to the author or maintainer of a YARA rule set. The issues yaraQA tries to detect are e.g.: rules that are...
pulsar
PULSAR Protocol Learning, Simulation and Stateful Fuzzer Pulsar is a network fuzzer with automatic protocol learning and simulation capabilites. The tool allows to model a protocol through machine learning techniques, such as clustering, and Markov models. These models can be used to simulate...
EUVD-2026-115653
Octo STS github.com/octo-sts/app before 0.11.2 returns trust policy configuration to callers whose OIDC token does not satisfy that policy. TrustPolicy.CheckToken included the policy's issuer, subject and audience values or patterns and claimpattern names and regular expressions in its...
Security Bulletin:Vulnerabilities exists in NPS of IBM Netezza Appliance
Summary Vulnerabilities identified in NPS of IBM Netezza Appliance have been addressed in the latest version 11.3.1.5. Vulnerability Details CVEID:CVE-2024-8184 DESCRIPTION: There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote which can be exploited by unauthorized users ...
Google Chrome Microsoft Edge CORS
The CORS component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Payments Component Compromise Data Compromise
The vulnerability in the Payments component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Google Chrome Safe Browsing Bypass
The vulnerability in Google Chrome’s Safe Browsing component is related to synchronization errors when using a shared resource. Exploiting this vulnerability enables a remote attacker to bypass sandbox protections by using a malicious file...
PQCrypto-LWEKE
FrodoKEM: Learning with Errors Key Encapsulation This C library implements FrodoKEM , an IND-CCA secure key encapsulation KEM protocol based on the well-studied Learning with Errors LWE problem 1,3, which in turn has close connections to conjectured-hard problems on generic, "algebraically...
glasgo
Glasgo Static Analysis Tool This project's official repository has been moved to Github-ttarvis/glasgo. Project This is a static analysis tool written in Go for Go code. It will find security and some correctness issues that may have a security implication. Compiling To compile the tool, be sure ...