4233 matches found
Certitude
Certitude is a Python package to perform supervised malicious URL classification using a joint set of lexicographic and certificate features. All COSSAS projects are hosted onGitLab with a push mirror to GitHub. For issues/contributions check CONTRIBUTING.md Getting Started Certitude requires...
pysqli
PySQLi - Python SQL injection framework 1. Overview PySQLi is a python framework designed to exploit complex SQL injection vulnerabilities. It provides dedicated bricks that can be used to build advanced exploits or easily extended/improved to fit the case. 2. Why another SQLi framework ? Simple...
pacbot
Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...
EUVD-2026-107672
GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side...
CVE-2026-112378
GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side...
CVE-2026-112378 Use of Less Trusted Source in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side...
CVE-2026-112378
The GitLab EE software is affected by a vulnerability where an authenticated user could access paid AI features without a valid subscription. This is caused by insufficient server-side validation during billing eligibility checks (CWE-348 ). The issue impacts versions 17.8 before 19.3.6 , 19.4 be...
CVE-2026-21531
Security Feature Bypass in ASP.NET Core by Microsoft CVE-2026-21531 🌟 Description A vulnerability in the Azure SDK facilitates deserialization of untrusted data, enabling unauthorized attackers to execute arbitrary code over a network. ⚙️ Installation To set up the exploitation tool, follow these...
CVE-2026-105998
The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity check before resetting its premium subscription state, allowing unauthenticated attackers to disable the Booking Package WordPress plugin before 1.7.31's paid features...
EUVD-2026-107055
The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity check before resetting its premium subscription state, allowing unauthenticated attackers to disable the Booking Package WordPress plugin before 1.7.31's paid features...
GitLab 17.8 < 19.3.6 / 19.4 < 19.4.3 / 19.5 < 19.5.1 (CVE-2026-112378)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated...
PT-2026-120883
GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated user to access paid AI features without a valid subscription due to insufficient server-side...
PT-2026-120450
The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity check before resetting its premium subscription state, allowing unauthenticated attackers to disable the Booking Package WordPress plugin before 1.7.31's paid features...
CVE-2026-93096
A flaw was found in the Linux kernel's CXL features. A concurrency vulnerability exists where multi-part Get/Set Feature transfers are not properly serialized. This allows two concurrent transfers to the same mailbox to interleave their parts, which can corrupt the device's transfer context. A...
CVE-2026-93077
A flaw was found in the Linux kernel's cxl/features component. The cxlgetfeature function, when reading feature data, uses a fixed output buffer size in a loop. This can lead to a buffer overflow if a connected device returns more data than the remaining buffer capacity, potentially allowing for...
CLSA-2026-1792496010 TuxCare security update for @babel/helper-create-class-features-plugin (1 CVE)
TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1792496006 TuxCare security update for @babel/helper-create-class-features-plugin (2 CVEs)
TuxCare rebuilt @babel/helper-create-class-features-plugin to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792496004 TuxCare security update for @babel/helper-create-class-features-plugin (1 CVE)
TuxCare rebuilt @babel/helper-create-class-features-plugin to address 1 CVE. Fixed in 7.21.0-tuxcare.4...