hibernate-orm

Hibernate ORM 是一个为应用程序、库和框架提供对象关系映射（ORM）支持的库。 它还提供了 JPA 规范的实现，JPA 是 ORM 的标准 Java 规范。 这是其源代码的仓库：有关更多信息，请参见 Hibernate.org。 从源码构建 构建需要将 Java 8 JDK 设置为 JAVAHOME。 你需要 Git 来获取 源代码。 Hibernate 使用 Gradle 作为其构建工具。如果你是 Gradle 新手，请参阅下面的 Gradle 入门 部分。 贡献者应阅读 贡献指南。 请参阅设置 IntelliJ 或 Eclipse 作为开发环境的指南。 请查看...

CVE-2026-86564 Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

CVE-2022-35914

CVE-2022-35914 PoC References https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr https://github.com/cosad3s/CVE-2022-35914-poc Credit to Sébastien Copin for the PoC I adapted here Check out my full writeup here: https://link.medium.com/tBwDlpQl3Ib Usage root@kitploit: pi...

cve-2018-6574

cve-2018-6574 gcc -shared -o attack.so -fPIC attack.c...

expat_2_1_0_CVE-2024-28757

Expat, 发布版 2.1.0 这是 Expat，一个由 James Clark 编写的用于解析 XML 的 C 库。 Expat 是一个面向流的 XML 解析器。这意味着在开始解析之前，您需要向解析器注册处理程序。当解析器在正在解析的文档中发现相关结构时，这些处理程序会被调用。开始标签就是您可能注册处理程序的结构类型的一个例子。 Windows 用户应使用 expatwin32bin 包，其中包含预编译的库和可执行文件，以及供开发者使用的源代码。 Expat 是自由软件。您可以根据本软件附带的 COPYING 文件中的许可证条款进行复制、分发和修改。该许可证与 MIT/X...

GHSA-65FR-J4P9-VC33 mongodb: Reject "." and NUL bytes in database and collection names

Impact Passing untrusted input as part of a database or collection name may result in targeting a different database or collection than specified. Patches Fixed in PHP library 1.21.4 and 2.4.1. Workarounds Validate database and collection names prior to passing into APIs...

EUVD-2026-67209

mongodb: Reject "." and NUL bytes in database and collection names...

mongodb: Reject "." and NUL bytes in database and collection names

Impact Passing untrusted input as part of a database or collection name may result in targeting a different database or collection than specified. Patches Fixed in PHP library 1.21.4 and 2.4.1. Workarounds Validate database and collection names prior to passing into APIs...

CVE-2026-76905

A flaw was found in kin-openapi, a Go project for handling OpenAPI files. An unauthenticated client can exploit this vulnerability by sending a malformed non-string scalar field in a multipart/form-data request body. This can cause applications that render validation errors through specific...

EUVD-2026-69651

SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements...

CVE-2026-78742

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS via the Multimedia library application introduction...

CVE-2024-0132

CVE-2024-0132 CVE-2024-0132 PoC 让我们从确定基础镜像开始。系统中库的排列方式取决于所选的基础镜像。例如，对于 alpine，库目录将是 /usr/lib64/；对于 ubuntu，则是 /usr/lib/x8664-linux-gnu。我们将使用 ubuntu 作为基础镜像。 root@kitploit: FROM ubuntu NVIDIA 容器工具包会检查容器内 /usr/local/cuda/compat/ 中的库，然后将它们挂载到主库目录；对于这个镜像（ubuntu），主库目录就是 /usr/lib/x8664-linux-gnu。...

go-cpe

go-cpe Una librería de Go para CPEA Common Platform Enumeration 2.3 go-cpe es una implementación de los algoritmos de Naming y Matching de CPE, tal como se describen en los NIST IR 7695 y 7696. Para la implementación de referencia en Java, consulte:...

DEBIAN-CVE-2026-85485

HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup. Version 0.410000, the fix for CVE-2026-19872, escaped the equivalent...

CVE-2026-85630 HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process_attrs method

HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the processattrs method. Any application with fields or field labels where some attributes are built from data rather than literals allows attacker-influenced text in an attribute value th...

CVE-2026-85484 HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping

HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup, CheckboxGroup and HorizCheckboxGroup widgets render a group label unescaped, Select into a label attribute and the other three into element...

CVE-2024-48990-PoC-Testing

CVE-2024-48990-PoC-Testing 🐍🔓 该仓库包含一个概念验证 PoC ，用于演示needrestart程序中的一个漏洞，该程序未能正确设置Python路径，可能导致权限提升。该PoC突显了通过利用此缺陷获取提升权限的潜在途径。 ⚠️ 漏洞概述 CVE-2024-48990 漏洞存在于 needrestart 包中。具体来说，它未能正确设置 Python 路径，在特定操作触发时可被利用来提升权限。 该 PoC 模拟了一个场景：通过 Python 加载恶意共享库，操纵系统设置并获取提升的权限。请仅在受控、安全的环境中进行测试。 要检查你是否易受攻击，请运行：...

CVE-2026-19872 HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message

HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and renderers that emit a form's errors interpolate the error string straight into HTML with no escaping. Two of the library's own messages,...

CVE-2026-86810 Open-Web-Analytics Controller Controller.php checkCapabilityAndAuthenticateUser improper authentication

A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...

OpenSSL_1_0_1g_CVE-2015-1788

OpenSSL 1.0.1g 7 Apr 2014 版权所有 c 1998-2011 OpenSSL 项目 版权所有 c 1995-1998 Eric A. Young、Tim J. Hudson 保留所有权利。 描述 OpenSSL 项目是一项协同努力，旨在开发一个健壮、商业级、功能齐全的开源工具包，实现 安全套接字层（SSL v2/v3）和传输层安全（TLS v1）协议，以及一个功能强大的通用密码学库。 该项目由全球志愿者社区管理，他们使用 互联网进行沟通、规划和开发 OpenSSL 工具包及其 相关文档。 OpenSSL 基于优秀的 SSLeay 库，该库由 Eric A. You...