phpstan

PHPStan - PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be...

telegram-history-dump

telegram-history-dump This utility is the successor of telegram-json-backup, written from the ground up in Ruby. It can create backups of your Telegram user and supergroup dialogs using telegram-cli's remote control feature. Compared to the old project, telegram-history-dump: Has better support f...

pgbackrest

pgBackRest Reliable PostgreSQL Backup & Restore Introduction pgBackRest is a reliable backup and restore solution for PostgreSQL that seamlessly scales up to the largest databases and workloads. pgBackRest v2.59.1 is the current stable release. Release notes are on the Releases page. Please give ...

ScratchABit

ScratchABit ScratchABit is an interactive incremental disassembler with data/control flow analysis capabilities. ScratchABit is dedicated to the efforts of the OpenSource reverse engineering community reverse engineering to produce OpenSource drivers/firmware for hardware not properly supported b...

libvmdk

libvmdk는 VMware Virtual DiskVMDK 형식에 접근하기 위한 라이브러리입니다. 프로젝트 정보: 상태: alpha 라이선스: LGPL-3.0-or-later 읽기 지원 확장 파일 형식: RAW flat COWD 버전 1 sparse VMDK 버전 1, 2 및 3 sparse 지원되는 VMDK 형식 기능: 델타 링크 그레인 압축 20131209 버전 기준 데이터 마커 20140416 버전 기준 현재 지원되지 않는 VMDK 형식 기능: 물리적 장치를 사용하는 이미지 변경 블록 추적CBTVMDK 버전 3sparse...

cve-2026-75604

CVE-2026-75604 - Next.js 경로 탐색 → RCE Windows · 연구 랩 CVE-2026-75604 재현 랩 및 익스플로잇 도구 모음입니다. 이는 Windows 호스트에 영향을 주는 Next.js 증분 캐시의 인증되지 않은 경로 탐색 취약점입니다. 이스케이프되지 않은 단일 백슬래시로 공격자는 캐시 디렉터리 외부의 파일을 읽고 쓸 수 있으며, 특정 버전과 앱 구조에서는 인증되지 않은 원격 코드 실행 으로 이어집니다. Fortbridge의 연구. 전체 문서: CVE-2026-75604 재현 블로그 링크 - 게시...

pyre-check

!WARNING This Repository Is Archived This repository is no longer maintained and has been archived. Type checking: Pyre has been replaced by Pyrefly, our next-generation Python typechecker and language server. Security analysis Pysa: Pysa has moved to its own repository at github.com/facebook/Pys...

EUVD-2026-69702

Next.js: Unauthenticated Remote Code Execution on windows-hosted servers...

cvedb

CVEdb CVEdb는 또 다른 Python CVE 데이터베이스 라이브러리이자 유틸리티입니다. 이미 많은 도구가 있습니다. 왜 또 하나를 만들었을까요? 대부분의 기존 라이브러리는 cve.circl.lu와 같은 제3자 API에 의존하는데, 이러한 API는 사용량을 제한하거나, 등록을 요구하거나, 인터넷 연결을 필요로 할 수 있습니다. 일부 라이브러리는 검색용 웹 인터페이스까지 포함해 비대합니다. CVEdb 기능: 라이브러리 또는 명령줄 유틸리티로 사용할 수 있습니다 간단한 API 국가 취약점 데이터베이스National...

OESA-2026-3600 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A TOCTOU Time-of-Chec...

OESA-2026-3599 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A TOCTOU Time-of-Chec...

OESA-2026-3598 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A TOCTOU Time-of-Chec...

OESA-2026-3597 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A TOCTOU Time-of-Chec...

Exploit for CVE-2026-75604

CVE-2026-75604 - Next.js path traversal → RCE Windows · rese...

CVE-2026-75604

Next.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 and 16.3.3, Next.js applications using Pages Router or App Router without Cache Components on Windows-hosted servers do not consistently escape backslashes in route segments before constructing...

CVE-2026-75604 Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

Next.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 and 16.3.3, Next.js applications using Pages Router or App Router without Cache Components on Windows-hosted servers do not consistently escape backslashes in route segments before constructing...

tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

A TOCTOU Time-of-Check Time-of-Use vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During...

tar security, bug fix, and enhancement update

2:1.34-13 - Backport upstream patches for CVE-2026-18477, fixes a bug where incremental restore with cyclic renames between backups may create a temporary directory at an archive-controlled path outside the extraction tree. The fix for CVE-2025-45582 already prevents exploiting this problem, so i...

tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

A TOCTOU Time-of-Check Time-of-Use vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During...

Linux Distros Unpatched Vulnerability : CVE-2026-82248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gix-worktree-state before 0.33.0 part of gitoxide allows writing files outside the worktree on Windows. gixworktreestate::checkout follows an existing terminal...