28513 matches found
ROOT-APP-PYPI-CVE-2023-45803 CVE-2023-45803 in urllib3 - Patched by Root
Root has patched CVE-2023-45803 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-MV93-W799-CJ2W GHSA-mv93-w799-cj2w in GitPython - Patched by Root
Root has patched GHSA-mv93-w799-cj2w in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-94P4-4CQ8-9G67 GHSA-94p4-4cq8-9g67 in GitPython - Patched by Root
Root has patched GHSA-94p4-4cq8-9g67 in the GitPython package for Root:PyPI. Multiple fixed versions available...
bugsy
Bugsy Bugsy is a command-line interface CLI tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is designed to help developers quickly identif...
ROOT-APP-MAVEN-CVE-2025-55163 CVE-2025-55163 in io.netty:netty-codec-http2 - Patched by Root
Root has patched CVE-2025-55163 in the io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-268H-HP4C-CRQ3 GHSA-268h-hp4c-crq3 in nodemailer - Patched by Root
Root has patched GHSA-268h-hp4c-crq3 in the nodemailer package for Root:npm. Multiple fixed versions available...
social-engineer-toolkit
The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...
the-backdoor-factory
The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...
attack-stix-data
ATT&CK® STIX Data MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and ...
reternal-quickstart
RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...
faraday
Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...
ingress-nginx
Retiro de Ingress NGINX En retiro Lo que necesitas saber sobre el retiro de Ingress NGINX: El mantenimiento de mejor esfuerzo continuará hasta marzo de 2026. Después, no habrá más versiones, ni correcciones de errores, ni actualizaciones para resolver vulnerabilidades de seguridad que puedan...
blackhat-python3
Código fuente de "Black Hat Python" en Python 3 Código fuente del libro "Black Hat Python" de Justin Seitz. El código ha sido convertido por completo a Python 3, reformateado para cumplir con los estándares PEP8 y refactorizado para eliminar problemas de dependencia derivados de la implementación...
ROOT-OS-ALPINE-321-CVE-2026-5773 CVE-2026-5773 in curl - Patched by Root
Root has patched CVE-2026-5773 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-6276 CVE-2026-6276 in curl - Patched by Root
Root has patched CVE-2026-6276 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-49980 CVE-2026-49980 in github.com/rclone/rclone - Patched by Root
Root has patched CVE-2026-49980 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...
GeoServer and GeoTools - Remote Code Execution
GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions 31.2, 30.4, and 29.6, Remote Code Execution RCE is possible if an application uses certain GeoTools functionality to evaluate XPath expressions supplied by user input. Versions 31.2, 30.4, and 29.6...
Jenkins build-metrics 1.3 - Cross-Site Scripting
Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...