346193 matches found
Security update for cosign
This update for cosign rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...
ms-365-mcp-server-PoC
ms-365-mcp-server: security advisory CVE status: reques...
zotlit-PoC
ZotLit: security advisory CVE status: requested, pendin...
supernote-obsidian-plugin-PoC
Summary CVE status: requested, pending assignment. This...
cve-2025-12735-expr-eval-rce
CVE-2025-12735 expr-eval RCE 漏洞利用工具 一个用于检测和测试 expr-eval 与 expr-eval-fork npm 包中 CVE-2025-12735 漏洞的安全研究工具。 ⚠️ 免责声明 本工具仅用于授权的安全测试和教育目的 。未经授权访问计算机系统是违法的。请仅在你拥有或已获得明确书面测试许可的系统上使用本工具。 📋 概述 CVE-2025-12735 是 expr-eval 和 expr-eval-fork npm 包中的一个严重远程代码执行漏洞。该漏洞允许攻击者在解析器使用的 context 对象内定义任意函数，从而注入执行系统级命令的恶意代码...
ironclaw ironclaw-v1.4.0
IronClaw Your secure personal AI assistant, always on your side English | 简体中文 | Русский | 日本語 | 한국어 Reborn Quick Start • Philosophy • Features • Installation • Configuration • Security • Architecture IronClaw Reborn Quick Start IronClaw Reborn is the standalone runtime on the reborn-integration...
duo-agentflow-auditor
Duo AgentFlow Auditor AI 代码安全 — 捕获 SAST 在 AI 生成代码中遗漏的问题 基于 GitLab Duo Agent 平台 40-62% 的 AI 生成代码存在安全漏洞。 传统 SAST 能捕获 CVE。而我们能捕获 SAST 遗漏的问题 — 提示注入、LLM 输出执行、不安全的 ML 反序列化。 快速开始 · 架构 · 检测规则 · 设置指南 · 实现 问题 AI 加速了代码生成，但也带来了新的安全瓶颈： 来源：GitLab 2025 全球 DevSecOps 报告 解决方案 AgentFlow Auditor — 四个 AI 代理，能够捕获传统 SA...
Security update for apache2-mod_auth_openidc
This update for apache2-modauthopenidc fixes the following issue: CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security update for apache2-mod_auth_openidc
This update for apache2-modauthopenidc fixes the following issue: CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security update for erlang
This update for erlang fixes the following issue: CVE-2026-32147: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' in SFTP chroot bsc1262503. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
Security update for quagga
This update for quagga fixes the following issue: CVE-2026-37458: missing input validation in the MPREACHNLRI component allows authenticated attackers to cause a DoS via a crafted UPDATE message bsc1263974. Patch Instructions: To install this SUSE update use the SUSE recommended installation...
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 4.7.2. CVE-2026-59680: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute bsc1272839. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 4.6.7. CVE-2026-59680: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute bsc1272839. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 4.5.8. CVE-2026-59680: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute bsc1272839. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 4.4.17. CVE-2026-59680: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute bsc1272839. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security update for yast2-users
This update for yast2-users fixes the following issue: Update to version 3.2.20. CVE-2026-59680: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute bsc1272839. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security update for postgresql14
This update for postgresql14 fixes the following issues: CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. CVE-2026-6470: failure to check type USAGE privilege...
skyvern v1.0.52
🐉 Automate Browser-based workflows using LLMs and Computer Vision 🐉 Skyvern automates browser-based workflows using LLMs and computer vision. It provides a Playwright-compatible SDK that adds AI functionality on top of playwright, as well as a no-code workflow builder to help both technical and...
Security update for postgresql16
This update for postgresql16 fixes the following issues: CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. CVE-2026-6470: failure to check type USAGE privilege...
CVE-2025-55182
RSC Detector - React Server Components 漏洞扫描器 一个基于 Python 的安全扫描器，用于检测和利用 Next.js 应用中的 React Server Components RSC 漏洞。该工具支持被动检测、主动指纹识别和 RCE 漏洞利用测试。 ⚠️ 警告 ：本工具仅用于授权的安全测试 。未经授权访问计算机系统是非法的。在进行测试前，请务必获得书面许可。 功能特性 ✅ 被动检测 - 分析 HTML、响应头和页面结构中的 RSC 指标 ✅ 主动指纹识别 - 发送 RSC 特定头部以检测服务器响应 ✅ HTTP 头部分析 - 识别...