128875 matches found
CVE-2026-53937 MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)
MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol. In versions 0.7.0 through 0.12.0, ReadBuffer.append in kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/ReadBuffer.kt writes every chunk of bytes received from the...
CVE-2026-53937 MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)
MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol. In versions 0.7.0 through 0.12.0, ReadBuffer.append in kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/ReadBuffer.kt writes every chunk of bytes received from the...
CVE-2026-53937
CVE-2026-53937 affects the MCP Kotlin SDK (versions 0.7.0–0.12.0 ). The root cause is an unbounded kotlinx.io.Buffer in ReadBuffer.append, which grows indefinitely when the stdio transport receives a byte stream without a terminating newline. The issue is amplified by StdioServerTransport and Std...
CVE-2026-53937 MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)
MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol. In versions 0.7.0 through 0.12.0, ReadBuffer.append in kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/ReadBuffer.kt writes every chunk of bytes received from the...
EUVD-2026-74297
MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol. In versions 0.7.0 through 0.12.0, ReadBuffer.append in kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/ReadBuffer.kt writes every chunk of bytes received from the...
Fix-CVE-2017-1000117
Repositorio de prueba para verificar la vulnerabilidad de Git CVE-2017-1000117, e intentar actualizar la versión de Git. root@kitploit: $ git clone --recursive https://github.com/shogo82148/Fix-CVE-2017-1000117.git El repositorio está inspirado en https://github.com/greymd/CVE-2017-1000117 . Para...
hibernate-orm
Hibernate ORM 是一个为应用程序、库和框架提供对象关系映射（ORM）支持的库。 它还提供了 JPA 规范的实现，JPA 是 ORM 的标准 Java 规范。 这是其源代码的仓库：有关更多信息，请参见 Hibernate.org。 从源码构建 构建需要将 Java 8 JDK 设置为 JAVAHOME。 你需要 Git 来获取 源代码。 Hibernate 使用 Gradle 作为其构建工具。如果你是 Gradle 新手，请参阅下面的 Gradle 入门 部分。 贡献者应阅读 贡献指南。 请参阅设置 IntelliJ 或 Eclipse 作为开发环境的指南。 请查看...
CVE-2022-26134
CVE-2022-26134 PoC Confluence Server 和 Data Center - CVE-2022-26134 - 严重级别未认证远程代码执行漏洞概念验证 严重级别 Atlassian 根据其严重级别等级标准，将此漏洞的严重级别评为严重。上述列出的修复版本之前的所有 Confluence Server 和 Data Center 版本都受此漏洞影响。 已修复版本 已发布的版本 7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4 和 7.18.1 包含此问题的修复。 PoC root@kitploit: git clone...
CVE-2022-31629-poc
CVE-2022-31629 poc PHP Bug report 如何测试 安装 root@kitploit: git clone https://github.com/SilNex/CVE-2022-31629-poc cd ./CVE-2022-31629-poc docker-compose up -d 测试 https://localhost:8110 : v8.1.10 https://localhost:8111 : v8.1.11 Chrome HSTS 问题 在 HSTS 错误页面输入 thisisunsafe 即可。...
CVE-2017-1000117
CVE-2017-1000117 PoC Repository for VulApps Fork from joernchen/CVE-2017-1000117 git clone --recursive https://github.com/VulApps/CVE-2017-1000117.git will write the output of id to a file vul in /var/www/html. See More at VulApps...
CVE-2026-47680
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...
CVE-2026-87056
A flaw was found in operator-sdk-builder. The repository lacks automated dependency-update configurations for its git submodules, Containerfile base image, and Tekton bundle references. This absence prevents the automatic flagging of stale or vulnerable dependencies. Consequently, this could lead...
CVE-2026-47680
CVE-2026-47680 is a path traversal vulnerability in FluxCD source-controller (versions 0.0.17 through 1.8.4), a Kubernetes operator for artifact acquisition from Git, OCI, Helm, and S3 sources. Two attack surfaces exist: (1) an actor who can influence the contents of a Bucket-referenced bucket ca...
CVE-2026-47680 Source controller: Improper path handling allows traversal
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...
CVE-2026-47680 Source controller: Improper path handling allows traversal
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...
EUVD-2026-74295
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...
CVE-2026-47680 Source controller: Improper path handling allows traversal
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...
Deep-Live-Cam v2.7.5-Ultimate
Deep-Live-Cam 2.1.6 Real-time face swap and video deepfake with a single click and only a single image. Disclaimer This deepfake software is designed to be a productive tool for the AI-generated media industry. It can assist artists in animating custom characters, creating engaging content, and...
dashbuilder
Dashbuilder Dashbuilder 是一个通用的仪表盘和报告Web应用，它允许： 可视化的仪表盘配置和个性化 使用多种图表库支持不同类型的可视化 功能完整的图表可视化定义编辑器 定义交互式报表表格 通过不同协议从外部系统提取数据 同时支持分析型和实时仪表盘 采用 Apache License 2.0 许可 更多信息，请访问项目网站 dashbuilder.org 即将推出的功能 基于 D3 JS、Lienzo GWT 和 Chart JS 的新渲染器 层次化（嵌套分组）展示器类型：树图和饼图 支持多个动态数据系列 丰富的移动端支持 告警和SLA配置 RESTful API 架...
apache_kylin
Apache Kylin Codacy Badge 大数据极致OLAP引擎 Apache Kylin 是一个开源的分布式分析引擎，由 eBay Inc. 贡献，提供 SQL 接口和在 Hadoop 上的多维分析（OLAP），支持超大规模数据集。 更多详情，请访问官网 http://kylin.apache.org。 文档 请参考 http://kylin.apache.org/docs/。 获取帮助 最快从开发者处获得回复的方式是发送邮件至我们的邮件列表 [email protected]， 并记得通过 [email protected] 订阅我们的邮件列表。 许可证...