ship-safe

The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...

sploitego

Sploitego - Maltego's Local Partner in Crime 1.0 - Introduction Sploitego is a local pen-test transform package that uses the Canari Framework for local transform execution in Maltego. The framework was first introduced at DEFCON 20 and has since picked up steam. 2.0 - Installing Sploitego 2.1 -...

linuxprivchecker

Linuxprivchecker.py A Linux Privilege Escalation Check Script Orginal Author: Mike Czumak Tv3rn1x -- @SecuritySift Current Maintainer: Michael Contino @Sleventyeleven This script is intended to be executed locally on a Linux box to enumerate basic system info and search for common privilege...

CVE-2026-108943

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted ...

CVE-2026-108943 ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted ...

CVE-2026-108943 ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted ...

EUVD-2026-98182

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted ...

CVE-2026-108943

A code injection vulnerability exists in ModelTC LightX2V (versions up to 0.5.0 ) within the Tokenizer component. The flaw is located in the AutoTokenizer.from_pretrained function of the file lightx2v/models/runners/cosmos3/cosmos3_runner.py . By manipulating the auto_map argument, an attacker ca...

Unprivileged Local Execution of Kernel-Level Diagnostic Tests within Brocade Fabric OS

: An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...

CVE-2026-105293

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the Discord origin, such as through XSS, can abuse themes.folder, themes.uninstall...

EUVD-2026-92157

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the Discord origin, such as through XSS, can abuse themes.folder, themes.uninstall...

CentOS Linux 8 [TuxCare] Security Update: binutils / binutils-devel (CENTOS-STREAM8:CLSA-2026:1776256866)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1776256866 advisory. - A flaw has been found in GNU Binutils 2.45. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the component...

CentOS Linux 8.5 [TuxCare] Security Update: binutils / binutils-devel (CENTOS8.5:CLSA-2026:1776256710)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1776256710 advisory. - A flaw has been found in GNU Binutils 2.45. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the component...

CentOS Linux 8.4 [TuxCare] Security Update: binutils / binutils-devel (CENTOS8.4:CLSA-2026:1777451571)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777451571 advisory. - A flaw has been found in GNU Binutils 2.45. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the component...

Rocky Linux 9.6 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1775726631)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775726631 advisory. - A potential heap based buffer overflow was found in bfdelfslurpversiontables in bfd/elf.c. This may lead to loss of availability...

CentOS Linux 6 [TuxCare] Security Update: binutils / binutils-devel (CENTOS6:CLSA-2026:1776172802)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1776172802 advisory. - A flaw has been found in GNU Binutils 2.45. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the component Linker...

AlmaLinux 9.2 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc (ALMALINUX9.2:CLSA-2026:1781179323)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1781179323 advisory. - A flaw has been found in GNU Binutils 2.45. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the component...

CentOS Linux 7 [TuxCare] Security Update: binutils / binutils-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1777286373)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1777286373 advisory. - A flaw has been found in GNU Binutils 2.45. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the componen...

SUSE CVE-2026-4833

A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdown.c of the component Markdown Handler. This manipulation causes uncontrolled recursion. The attack is restricted to local execution. The exploit has been made available to the...

Linux Distros Unpatched Vulnerability : CVE-2026-90826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gfnodedel of the file scenegraph/basescenegraph.c of the component MP4Box...