libvmdk

libvmdk — это библиотека для доступа к формату VMware Virtual Disk VMDK. Информация о проекте: Статус: alpha Лицензия: LGPL-3.0-or-later Поддерживаемые форматы файлов экстентов: RAW flat COWD версии 1 sparse VMDK версии 1, 2 и 3 sparse Поддерживаемые возможности формата VMDK: дельта-ссылки сжатие...

phpstan

PHPStan - PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be...

pgbackrest

pgBackRest Sauvegarde et restauration PostgreSQL fiables Introduction pgBackRest est une solution fiable de sauvegarde et de restauration pour PostgreSQL qui s'adapte de manière transparente aux bases de données et aux charges de travail les plus volumineuses. pgBackRest v2.59.2 est la version...

telegram-history-dump

telegram-history-dump Cet utilitaire est le successeur de telegram-json-backup, écrit entièrement en Ruby. Il peut créer des sauvegardes de vos discussions utilisateur et de supergroupes Telegram en utilisant la fonction de contrôle à distance de telegram-cli. Comparé à l'ancien projet,...

ScratchABit

ScratchABit ScratchABit est un désassembleur incrémental interactif avec des capacités d'analyse de flux de données et de contrôle. ScratchABit est dédié aux efforts de la communauté de rétro-ingénierie OpenSource rétro-ingénierie pour produire des pilotes/firmware OpenSource pour du matériel mal...

CVE-2026-94484

The Next.js React framework is vulnerable to cache poisoning in versions 15.0.0 through 15.5.27 and 16.3.8 . The root cause is an insufficiently scoped shared response cache key used by applications with a root-level catch-all page and statically generated or Incremental Static Regeneration (ISR)...

EUVD-2026-91670

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry without sufficiently binding it to the...

CVE-2026-94543

The Next.js framework (versions 15.0.0 through 15.5.27 and 16.3.8 ) is vulnerable to cache poisoning in self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration (ISR) pages. The root cause is that response cache entries are not sufficiently boun...

cve-2026-75604

CVE-2026-75604 - Next.js path traversal → RCE Windows · research lab Reproduction lab and exploit tooling for CVE-2026-75604 , an unauthenticated path-traversal in the Next.js incremental cache that affects Windows hosts. A single un-escaped backslash lets an attacker read and write files outside...

pyre-check

!WARNING This Repository Is Archived This repository is no longer maintained and has been archived. Type checking: Pyre has been replaced by Pyrefly, our next-generation Python typechecker and language server. Security analysis Pysa: Pysa has moved to its own repository at github.com/facebook/Pys...

python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit CPU resources. This leads to...

python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit CPU resources. This leads to...

cvedb

CVEdb CVEdb — это еще одна библиотека и утилита для работы с базой данных CVE на Python. Подобных уже много. Зачем создавать еще одну? Большинство существующих библиотек полагаются на сторонний API, например cve.circl.lu, который может и действительно ограничивает использование, требует регистрац...

EUVD-2026-85159

A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content may not invalidate the existing signature, allowing attackers to alter signed content and potentially carry out content spoofing while the...

Oracle Linux 8 : tar (ELSA-2026-70390)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-70390 advisory. - Backport upstream fix for CVE-2026-5704 file injection hidden from -t - Fix --one-top-level with absolute path broken by the CVE-2025-45582 fix Also...

OESA-2026-3870 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A TOCTOU Time-of-Chec...

Astra Linux – Vulnerability in bind9

In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions of BIND 9 Supported Preview Edition such as 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1, as well as the release version 9.17.0 - 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a...

EUVD-2026-69702

Next.js: Unauthenticated Remote Code Execution on windows-hosted servers...

OESA-2026-3600 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A TOCTOU Time-of-Chec...

OESA-2026-3599 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A TOCTOU Time-of-Chec...