reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

learn365

Learn365 This repository contains all the information shared during my Learn 365 Challenge. Learn 365 is a challenge to keep the learning spirit going on and challenge myself to learn something daily for the whole year, it can be anything from infosec to general life. Follow me on Twitter for...

lockc

lockc is open source sofware for providing MAC Mandatory Access Control type of security audit for container workloads. The main reason why lockc exists is that containers do not contain. Containers are not as secure and isolated as VMs. By default, they expose a lot of information about host OS...

external_zlib_CVE-2022-37434

ZLIB DATA COMPRESSION LIBRARY zlib 1.2.8 is a general purpose data compression library. All the code is thread safe. The data format used by the zlib library is described by RFCs Request for Comments 1950 to 1952 in the files http://tools.ietf.org/html/rfc1950 zlib format, rfc1951 deflate format...

EUVD-2026-124557

Soup Sieve: General sibling combinator inside :has matches untrusted HTML in quadratic time...

GHSA-4J63-6C4X-WFG4 Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Summary Matching a selector that puts a general-sibling combinator inside :has, such as div:hasa b, against untrusted HTML runs in On² time in the number of sibling elements. A single small document with a few thousand siblings ties the process up for a minute of CPU, so an application that runs ...

Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Summary Matching a selector that puts a general-sibling combinator inside :has, such as div:hasa b, against untrusted HTML runs in On² time in the number of sibling elements. A single small document with a few thousand siblings ties the process up for a minute of CPU, so an application that runs ...

UBUNTU-CVE-2026-126192

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126192

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126192 Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126192 Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

CVE-2026-126192

The Soup Sieve CSS selector library (versions prior to 2.10 ) is vulnerable to an algorithmic complexity issue. When processing attacker-controlled HTML, a developer-authored selector that places a general sibling combinator inside a :has() pseudo-class (e.g., div:has(a ~ b)) causes the library t...

CVE-2026-126192

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

PT-2026-145886

Name of the Vulnerable Software and Affected Versions Soup Sieve versions prior to 2.10 Description Matching a developer-authored selector that places the general sibling combinator inside the :has pseudo-class repeatedly scans each candidate element's following siblings when the right-hand side ...

CVE-2026-126192: facelessuser soupsieve: Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.10, matching a developer-authored selector that places the general sibling combinator inside :has repeatedly scans each candidate element's following siblings when the right-hand side is absent, producing...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: hold nfnl mutex in event notifier We must serialize the release notifier and the config netlink function. A concurrent thread can issue close which can call the release function while unrelated socket...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Branch Sampling BRS and Last Branch Record LBR are mutually exclusive hardware features, and users of both are tracked via cpuc-lbrusers. When SVM is toggled on for a...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pclforeachsegment for empty chunks When a parsed chunk list contains a chunk whose chsegcount is zero, pclforeachsegment computes its inclusive upper bound as &chunk-chsegmentschsegcount - 1. Since chsegcount is a u3...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix a use-after-free problem in rxemmap rxemmap removes a rxemmapinfo struct from the pendingmmaps list and releases pendinglock while the struct’s kref is still at 1: listdelinit&ip-pendingmmaps;...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: tracing/fprobe: Fixed a NULL pointer dereference in fprobefgraphentry. The fprobefgraphentry function sizes a shadow-stack reservation during one iteration of the per-ip fprobe list, and fills it during another iteration—both...