CVE-2026-55675

The Salty documentation repository contains a vulnerability where a fork pull request can execute arbitrary code in a privileged base-repository workflow. Specifically, the .github/workflows/trigger-pr-build.yml file records an untrusted fork commit in an artifact, which the .github/workflows/bui...

CVE-2026-109284

Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access. Shared folder members downgraded to read-only can call POST /api/v1/chats/id/fork on chats th...

EUVD-2026-97586

Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access. Shared folder members downgraded to read-only can call POST /api/v1/chats/id/fork on chats th...

CVE-2026-109284 Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint

Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access. Shared folder members downgraded to read-only can call POST /api/v1/chats/id/fork on chats th...

CVE-2026-109284

Open WebUI versions 0.11.0 before 0.11.4 are vulnerable to an improper authorization flaw in the chat fork handler. The application fails to verify folder write permissions when placing forked chats into a source chat's folder. Specifically, shared folder members who have been downgraded to read-...

CVE-2026-109284 Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint

Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access. Shared folder members downgraded to read-only can call POST /api/v1/chats/id/fork on chats th...

CVE-2026-109284 Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint

Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access. Shared folder members downgraded to read-only can call POST /api/v1/chats/id/fork on chats th...

CVE-2026-109284: Missing Authorization

Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access. Shared folder members downgraded to read-only can call POST /api/v1/chats/id/fork on chats th...

libsodium

Sodium es una biblioteca de software fácil de usar que proporciona una amplia gama de operaciones criptográficas, incluyendo cifrado, descifrado, firmas digitales y hashing seguro de contraseñas. Es un fork portable, compilable de forma cruzada, instalable y empaquetable de NaCl. Manteniendo la...

reaver-wps-fork-t6x

Resumen Reaver implementa un ataque de fuerza bruta contra los PINs del registrador de Wifi Protected Setup WPS para recuperar contraseñas WPA/WPA2 , como se describe en Fuerza bruta a Wi-Fi Protected Setup: cuando un mal diseño se encuentra con una mala implementación. por Stefan Viehböck. Reave...

boofuzz

.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Fuzzing de protocolos de red para humanos .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...

deepsecrets

DeepSecrets - una mejor herramienta para el escaneo de secretos !WARNING El desarrollo activo se trasladó al fork del creador en https://github.com/ntoskernel/deepsecrets. Este repositorio no recibirá más actualizaciones...

Malicious code in erc20-approve-audit (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43c1d294111db5834d006f064d33001b463860783ed8662a5f41a8e7354e4b8 The gem's native extension script, which runs automatically during gem install, base64-decodes a Ruby payload and launches it via a double-forked,...

MAL-2026-17785 Malicious code in erc20-approve-audit (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43c1d294111db5834d006f064d33001b463860783ed8662a5f41a8e7354e4b8 The gem's native extension script, which runs automatically during gem install, base64-decodes a Ruby payload and launches it via a double-forked,...

doona

Doona - Strumento di fuzzing di rete .:: Informazioni ::. Doona è un fork del Bruteforce Exploit Detector Tool BED. BED è un programma progettato per controllare i daemon per potenziali buffer overflow, bug di formato stringa, ecc. Doona è il termine australiano per piumino. Aggiunge un numero...

proxmark3

Iceman Fork - Proxmark3 Il Proxmark3 è il coltellino svizzero dell'RFID, che consente interazioni con la stragrande maggioranza dei tag RFID su scala globale. Costruito originariamente da Jonathan Westhues, il dispositivo è ora lo strumento di riferimento per l'analisi RFID per gli appassionati. ...

boringssl

BoringSSL BoringSSL è un fork di OpenSSL progettato per soddisfare le esigenze di Google. Anche se BoringSSL è un progetto open source, non è pensato per l'uso generale, come lo è OpenSSL. Non consigliamo a terze parti di farne affidamento. Farlo probabilmente sarà frustrante perché non ci sono...

rizin

Rizin Rizin è un framework di reverse engineering, nato come fork di radare2, con un focus su usabilità, funzionalità e pulizia del codice. Rizin è portabile e può essere usato per analizzare binari, disassemblare codice, eseguire il debug di programmi, come strumento forense, come editor...

user-agent-desktop

Este proyecto está descontinuado. Recomendamos usar Ghostery Tracker and Ad Blocker en Firefox. Navegador Privado Ghostery El Navegador de Escritorio Ghostery es un fork minimalista de Firefox optimizado para la privacidad. Las principales características adicionales son: La extensión Ghostery...

Malicious code in @galicia-toolkit-nestjs-20/commons (npm)

@galicia-toolkit-nestjs-20/commons is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the...