cassandra-mesos

This is a repository for the Cassandra-Mesos framework, which is a distributed database system that allows for the deployment of Apache Cassandra on Apache Mesos. The framework is designed to provide a scalable and fault-tolerant way to run Cassandra on Mesos, and it includes features such as...

jaeles

This is a powerful, flexible, and easily extensible framework written in Go for building your own Web Application Scanner. The framework is called Jaeles and is designed to be highly customizable. It has a modular architecture, allowing users to easily add or remove plugins to suit their needs. T...

CVE-2025-58375 Frappe has potential SQL Injection due to missing validation

Frappe is a full-stack web application framework. Versions 14.96.9 and below, and 15.0.0 through 15.71.0 have an insecure endpoint parameter that is vulnerable to error-based SQL Injection through lack of validation. Sensitive information such as versioning can be retrieved. This issue is fixed i...

CVE-2025-58375

Frappe is a full-stack web application framework. Versions 14.96.9 and below, and 15.0.0 through 15.71.0 have an insecure endpoint parameter that is vulnerable to error-based SQL Injection through lack of validation. Sensitive information such as versioning can be retrieved. This issue is fixed i...

ruby-dragonfly

This repository is an offensive tool for Ruby. It is a highly customizable gem for handling images and other attachments, and is already in use on thousands of websites. The tool is designed to generate image thumbnails in Rails and to manage attachments in web applications. It provides a range o...

Linux Distros Unpatched Vulnerability : CVE-2025-58057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In...

Exploit for Path Traversal in Apache Http_Server

!bannerhttps://img.shields.io/badge/ApachePathTraversal-RCEC...

CVE-2025-58056

A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...

Malicious code in semantic-release-metalsmith-mini-css-extract-plugin-framework (npm)

The package semantic-release-metalsmith-mini-css-extract-plugin-framework was found to contain malicious code...

Malicious code in nucleosynthesis-framework-metalsmith-spawn (npm)

The package nucleosynthesis-framework-metalsmith-spawn was found to contain malicious code...

Malicious code in radioastronomy-stop-framework-coronalmassejection (npm)

The package radioastronomy-stop-framework-coronalmassejection was found to contain malicious code...

MAL-2025-45367 Malicious code in nucleosynthesis-framework-metalsmith-spawn (npm)

The package nucleosynthesis-framework-metalsmith-spawn was found to contain malicious code...

MAL-2025-45995 Malicious code in semantic-release-metalsmith-mini-css-extract-plugin-framework (npm)

The package semantic-release-metalsmith-mini-css-extract-plugin-framework was found to contain malicious code...

Malicious code in framework-prompts-phoenix-cressida (npm)

The package framework-prompts-phoenix-cressida was found to contain malicious code...

MAL-2025-44300 Malicious code in framework-prompts-phoenix-cressida (npm)

The package framework-prompts-phoenix-cressida was found to contain malicious code...

MAL-2025-45738 Malicious code in radioastronomy-stop-framework-coronalmassejection (npm)

The package radioastronomy-stop-framework-coronalmassejection was found to contain malicious code...

MAL-2025-42185 Malicious code in @amiga-fwk-nodejs/log (npm)

The package @amiga-fwk-nodejs/log was found to contain malicious code...

Malicious code in @amiga-fwk-nodejs/metrics (npm)

The package @amiga-fwk-nodejs/metrics was found to contain malicious code...

Malicious code in @amiga-fwk-nodejs/log (npm)

The package @amiga-fwk-nodejs/log was found to contain malicious code...

OESA-2025-2150 netty security update

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers clients. %package help Summary: Documents for Buildarch: noarch Requires: man info Provides: -javadoc = - Obsoletes: -javadoc - %description help Man pages a...