1456 matches found
minimal
Immagini contenitore piccole e indurite, gratuite e con licenza MIT. Costruite da sorgente con i pacchetti apko di Chainguard e Wolfi, ricostruite ogni sei ore. Ogni immagine è firmata con cosign, include un'attestazione SPDX SBOM e riporta una provenienza di build SLSA Livello 3. Puoi verificare...
Sandman
Sandman Sandman è una backdoor progettata per funzionare su reti hardened durante attività di red team. Sandman agisce come stager e sfrutta NTP un protocollo per sincronizzare ora e data per ottenere ed eseguire uno shellcode arbitrario da un server predefinito. Poiché NTP è un protocollo spesso...
kernel-hardening-checker
kernel-hardening-checker precedentemente kconfig-hardened-check...
azurelinux
Azure Linux 4 Una distribuzione Linux open-source realizzata e ottimizzata perAzure, con fonti derivate da Fedora Linux. Azure Linux fornisce un sistema operativo sicuro e affidabile per macchine virtuali, contenitori e piattaforme bare-metal. Azure Linux si basa su una solida base open-source...
TempRoot-Huawei
TempRoot-Huawei Temporäres Root für gehärteten Huawei-Kernel über CVE-2019-2215 Dieser Code ist für P20 Pro CLT-AL00 geschrieben, und der Kernel-Offset stammt aus der Firmware mit Build-Fingerabdruck: 'HUAWEI/CLT-AL00/HWCLT:8.1.0/HUAWEICLT-AL00/176C00:user/release-keys' Hintergrund Wie Samsungs...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.2.hum1 aarch64, x8664 glibc-2.43-8.2.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.2.hum1 aarch64, x8664 glibc-benchtests-2.43-8.2.hum1 aarch64, x8664...
sudowp-hooks-visualizer
SudoWP Hooks Visualizer Contributori: SudoWP, WP Republic Autori originali: Stuart O'Brien, cxThemes Tag: hooks, actions, filters, developer-tool, debug, security-fork, cve-2024-6297 Richiede almeno: 5.8 Testato fino a: 6.7 Versione stabile: 1.3.2 Licenza: GPLv2 o successiva Avviso di sicurezza...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.2: grafana13.2-13.2.0-0.1.1.hum1 aarch64, x8664 grafana13.2-13.2.0-0.1.1.hum1.src src...
CVE-2026-78208
exceljs-hardened before 5.0.0 contains a path traversal vulnerability in the Workbook.addImage function that fails to validate file paths. Attackers can supply arbitrary file paths to read any file accessible to the Node.js process and embed it in the generated workbook...
CVE-2026-78209
exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened in a spreadsheet application, potentially...
CVE-2026-78207
exceljs-hardened before 5.0.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject proto, constructor, or prototype keys when merging note objects. Attackers can assign parsed JSON with a malicious proto property to cell notes, modifying Object.prototype and...
CVE-2026-78206
exceljs-hardened before 5.0.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of...
EUVD-2026-64684
exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened in a spreadsheet application, potentially...
CVE-2026-78209
exceljs-hardened versions before 5.0.0 are vulnerable to CSV formula injection . The library fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. An attacker who can influence exported cell values can inject spreadsheet formulas that execute when the ...
CVE-2026-78207
exceljs-hardened before 5.0.0 (also tracked as exceljs through 4.4.0) contains a prototype pollution vulnerability in the deepMerge helper. The helper fails to reject __proto__, constructor, or prototype keys when merging note objects, allowing an attacker to assign parsed JSON with a malicious _...
CVE-2026-78208
exceljs-hardened before 5.0.0 (and exceljs through 4.4.0) is affected by a path traversal vulnerability in the Workbook.addImage() function. The function fails to validate file path inputs, allowing an attacker to supply an arbitrary path that reads any file accessible to the Node.js process and ...
EUVD-2026-64682
exceljs-hardened before 5.0.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject proto, constructor, or prototype keys when merging note objects. Attackers can assign parsed JSON with a malicious proto property to cell notes, modifying Object.prototype and...
EUVD-2026-64683
exceljs-hardened before 5.0.0 contains a path traversal vulnerability in the Workbook.addImage function that fails to validate file paths. Attackers can supply arbitrary file paths to read any file accessible to the Node.js process and embed it in the generated workbook...
EUVD-2026-64681
exceljs-hardened before 5.0.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of...
CVE-2026-78206 exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression
exceljs-hardened before 5.0.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of...