pingtunnel master-d7cd0d6ab5f18e7d8d050385e8d240b3b2f41e6c

Pingtunnel Pingtunnel is a tool that sends TCP/UDP traffic over ICMP. Note: This tool is only to be used for study and research, do not use it for illegal purposes Usage & Detailed Documentation 📖 For detailed documentation, seeUSAGE.md: includes complete command-line parameters, configuration fi...

GO-2026-6367 vulnerabilities

Vulnerabilities for packages: cilium, kubescape-server-fips, kubescape-server, kubescape...

ApplicationInspector v1.10.2

Introduction Microsoft Application Inspector is a software source code characterization tool that helps identify coding features of first or third party software components based on well-known library/API calls and is helpful in security and non-security use cases. It uses hundreds of rules and...

Exploring Automated Vulnerability Identification in JavaScript Code Using Large Language Models

JavaScript powers approximately 98.8% of all websites, making vulnerabilities in its code a significant security risk, yet existing detection approaches such as Static Application Security Testing SAST tools often fail to identify many real-world vulnerabilities when applied to isolated code...

Ruby: Remote code execution

Background Ruby is an interpreted scripting language for quick and easy object-oriented programming. Description A vulnerability has been discovered in Ruby. Please review the CVE identifier referenced below for details. Impact Remote code execution is possible. Workaround There is no known...

cornucopia v3.5.2

OWASP Cornucopia project OWASP Cornucopia is a mechanism in the form of a card game to assist software development teams Identify security requirements in Agile, conventional, and formal development processes. It is language, platform, and technology agnostic. Visit: https://cornucopia.owasp.org/...

CVE-2026-13326

An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag...

EUVD-2026-75974

An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag...

Eris v0.55.1

Eris Eris is a desktop PGP workstation written in Go with Fyne. It stores keys in an encrypted vault and gives you a clean UI for signing, encryption, decryption, and verification. Features...

ffuf v2.3.0

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

Joern 4.0.626

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

PT-2026-89771

Name of the Vulnerable Software and Affected Versions Qt NFC affected versions not specified Description An out-of-bounds read occurs during the parsing of language code lengths. A physically proximate attacker can exploit this by using a crafted NFC tag to trigger a denial of service or limited...

serverless [email protected]

Website • Documentation • X / Twitter • Community Slack • Forum The Serverless Framework – Makes it easy to use AWS Lambda and other managed cloud services to build applications that auto-scale, cost nothing when idle, and result in radically low maintenance. The Serverless Framework is a...

EUVD-2026-42937

Excelize: Negative shared-string index causes panic in GetCellValue and GetRows...

Introducing AI Assistant for Akamai Web Security Analytics

Discover how AI Assistant for Akamai Web Security Analytics helps SOC and AppSec teams investigate events faster and take guided action with natural language...

enot-autodl (>=3.3.1, <=3.4.3), farm-haystack (1.5.0) +6 more potentially affected by CVE-2026-9856 via transformers (4.19.2)

transformers PYPI version 4.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - enot-autodl =3.3.1, =0.7.2, =0.2.0, =2.1.0, =2.1.2 - textdiversity 0.0.1 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-392...

PYSEC-2026-3926 Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

Security Bulletin: middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags.

Summary Upgrade to InformixHQ 3.3.2 included in 14.10.14W1 and 15.0.1.16 Vulnerability Details CVEID:CVE-2026-71848 DESCRIPTION: Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithm...

CVE-2026-87734

An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service...

Towards Tackling Application Logic Flaws through Autonomous Formal-Logic Modeling and Automated Reasoning

Logic flaws pose significant challenges in the design and implementation of modern, semantically rich systems and applications, impacting security, privacy, and trust. These flaws are inherently tied to business-specific semantics and threat models, making their discovery and reasoning difficult...