CVE-2026-82638

jina-ai reader disables its private-address guard outside Google Cloud deployments, creating a Server-Side Request Forgery (SSRF) vulnerability. The root cause lies in conditional logic (referenced in src/services/misc.ts) that only enforces the guard on GCP, leaving other environments exposed. A...

llm-guard

!WARNING このプロジェクトはアーカイブされました。 このプロジェクトおよび Hugging Face 上の関連モデルは、もはや積極的な開発やメンテナンスは行われていません。 LLM Guard - LLMインタラクションのためのセキュリティツールキット Protect AI による LLM Guard は、大規模言語モデル（LLM）のセキュリティを強化するために設計された包括的なツールです。 ドキュメント | プレイグラウンド | チェンジログ LLM Guardとは？...

violin

Violin ☤ — 監督付きエージェント型 Hermes ペンテストプロファイル 35 プレイブック · 17 リファレンス · 13 テンプレート · 必須実行ガード · Hermes ネイティブ Violin は、監督付き・許可済みの侵入テスト（偵察から安全なエクスプロイト検証、レポート作成まで）のための Hermes ネイティブのエージェント型ペンテストプロファイル です。Hermes の組み込みツールセット、7 つのルーティングスキル、およびターゲット実行境界における必須の violin-guard プラグインを使用します。スタンドアロン CLI...

pmg

패키지 매니저 가드 PMG 악성 npm 및 pip 패키지가 설치되기 전에 차단합니다. 이미 사용 중인 패키지 매니저를 위한 심층 방어...

pmg

Package Manager Guard PMG Block malicious npm and pip packages before they install. Defense in depth for the package managers you already use...

UltimateWDACBypassList

Ultimate WDAC Bypass List A centralized resource for previously documented WDAC/Device Guard/UMCI bypass techniques as well for building/managing/testing WDAC policies Note: WDAC Windows Defender Application Control has been rebranded by Microsoft as "Application Control" or "Application Control...

PT-2026-83558

Name of the Vulnerable Software and Affected Versions jina-ai reader affected versions not specified Description The software disables its private-address guard when deployed outside of Google Cloud environments, which enables unauthenticated attackers to perform server-side request forgery SSRF...

MAL-2026-15566 Malicious code in flask-header-guard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e0cbaefa0fcface340b03a236573ed70df9b4d7773715321df057a9862e3f8 The package is presented as Flask security-headers middleware but ships a hostile payload wired to fire at install time and again whenever the librar...

Malicious code in flask-header-guard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e0cbaefa0fcface340b03a236573ed70df9b4d7773715321df057a9862e3f8 The package is presented as Flask security-headers middleware but ships a hostile payload wired to fire at install time and again whenever the librar...

EUVD-2026-42434

RestrictedPython guard hooks can be shadowed via positional-only arguments...

GHSA-FFG3-P8FM-MJX2 RestrictedPython guard hooks can be shadowed via positional-only arguments

Impact RestrictedPython rewrites sensitive operations to go through guard hooks. Attribute access becomes getattrobj, name, item access becomes getitemobj, key, writes go through write, and print goes through print. The embedding application supplies these hooks to enforce its policy. Argument-na...

RestrictedPython guard hooks can be shadowed via positional-only arguments

Impact RestrictedPython rewrites sensitive operations to go through guard hooks. Attribute access becomes getattrobj, name, item access becomes getitemobj, key, writes go through write, and print goes through print. The embedding application supplies these hooks to enforce its policy. Argument-na...

BypassCredGuard

BypassCredGuard - Bypass di Credential Guard tramite patch della memoria di Wdigest Contesto Adam Chester @xpn ha scritto un articolo intitolato "Exploring Mimikatz - Part 1 - WDigest" sul memory patching per abilitare UseLogonCredential e far sì che Wdigest memorizzi le credenziali in chiaro, e...

Shinigami

Shinigami Shinigami é uma ferramenta experimental projetada para detectar e desempacotar implantes de malware que são injetados via process hollowing ou rotinas genéricas de empacotadores. Como isso funciona A ferramenta opera fazendo hook de funções NT relacionadas ao Process Hollowing e marcand...

SUSE CVE-2026-80686

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...

CVE-2026-82247

gitoxide's gix-url crate ?@ so that gitoxide sends the caller's HTTP Basic Authorization credentials to an unintended host. gix-transport is affected in versions = 0.49.0 fixed in 0.58.1...

UBUNTU-CVE-2026-82247

gitoxide's gix-url crate ?@ so that gitoxide sends the caller's HTTP Basic Authorization credentials to an unintended host. gix-transport is affected in versions = 0.49.0 fixed in 0.58.1...

UBUNTU-CVE-2026-80686

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...

DEBIAN-CVE-2026-59283

Applications that evaluate Spring Expression Language SpEL expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring...

CVE-2026-59283

Applications that evaluate Spring Expression Language SpEL expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring...