libssh-mirror

.org The SSH library Why? Why not ? : I've began to work on my own implementation of the ssh protocol because i didn't like the currently public ones. Not any allowed you to import and use the functions as a powerful library, and so i worked on a library-based SSH implementation which was...

spamassassin

Apache SpamAssassin GitHub Actions for testing The Apache SpamAssassin project uses a subversion repo for its development process. A read-only mirror of the repo is maintained on GitHub here. The .github directory containing this README file is not part of the Apache SpamAssassin release package...

netward-standalone

Net Ward A user-space deception layer that turns DDoS and bot abuse into wasted effort. Net Ward sits in front of your HTTP service as a reverse proxy. Real traffic passes through untouched. Known probes and floods get harmless mirror responses that burn bot effort and never reach your app — no...

CVE-2025-27558_Patching

CVE-2025-27558Patching Patching CVE-2025-27558 vulnerability that had affected my linux image. Atlas Incident: Unexpected Outbound Connection 197.155.77.1 This folder documents a real-world network anomaly detected on the Atlas machine, a Wazuh-monitored Ubuntu system. During a routine system...

Android-Security-Masterclass

Android Security Masterclass 🛡️📱 Official OWASP Project — A Hands-on OWASP MASVS/MASTG Security Training Lab for Android Developers & Pentesters — Mirror Architecture: Vulnerable ↔ Secure ↔ Attacker 📖 Overview The Android Security Masterclass is an official OWASP project designed with a Mirror...

CVE-2026-121751

A flaw was found in Node Version Manager nvm. Remote version data retrieved from a mirror is stored without sufficient validation and later evaluated during shell arithmetic operations. An attacker controlling a malicious or compromised mirror can provide crafted version strings that trigger...

CVE-2026-116472

A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denial of service of the ingress-nginx data plane, or possibly redirect traffic from other Ingresses. Kubernetes clusters are only affected if they are using ingress-nginx. Due ...

CVE-2026-116472

A security issue in ingress-nginx allows a user with permission to create an Ingress to cause a denial of service of the data plane. Due to a missing check , the mirror-target Ingress annotation can target an unauthenticated configuration API within the controller to submit write commands. Corrup...

EUVD-2026-117638

A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denial of service of the ingress-nginx data plane, or possibly redirect traffic from other Ingresses. Kubernetes clusters are only affected if they are using ingress-nginx. Due ...

CVE-2026-116472 ingress-nginx mirror-target self-DOS

A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denial of service of the ingress-nginx data plane, or possibly redirect traffic from other Ingresses. Kubernetes clusters are only affected if they are using ingress-nginx. Due ...

PT-2026-137641

Name of the Vulnerable Software and Affected Versions ingress-nginx affected versions not specified Description A security issue exists where a user with permissions to create an Ingress can cause a denial of service of the data plane or potentially redirect traffic from other Ingresses. This...

PT-2026-137193

Name of the Vulnerable Software and Affected Versions Node Version Manager nvm versions 0.39.6 through 0.40.8 Description An issue exists where nvm ls-remote and other commands that refresh remote LTS aliases store the version column of the mirror's index.tab in $NVM DIR/alias/lts/ without...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.10. It arises because after removing matchall entries via sparx5tcmatchalldestroy, no memory is freed, resulting in a memory leak when deleting mirror and goto matchall filters...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46023)

In the Linux kernel, the following vulnerability has been resolved: dm mirror: fix integer overflow in createdirtylog The argument count calculation in createdirtylog performs argsused = 2 + paramcount before validating against argc. When a user provides a paramcount close to UINTMAX via the devi...

CVE-2026-110522

A flaw was found in oc-mirror's legacy v1 catalog cache rebuild. When the --build-catalog-cache flag is used, oc-mirror extracts an opm binary from the remote operator catalog image and executes it on the host without verifying its signature, digest, or integrity. An attacker who publishes a...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: dm mirror: fix integer overflow in createdirtylog The argument count calculation in createdirtylog performs argsused = 2 + paramcount before validating against argc. When a user provides a paramcount close to UINTMAX via the devi...

BIT-GITEA-2026-101029 Gitea migration and pull mirror SSRF through multi-answer DNS

Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns multiple DNS answers, because the address that was validated was not necessarily the address Git later connected to. A low-privileged user who can create migrations or mirrors could direct th...

PT-2026-115846

Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns multiple DNS answers, because the address that was validated was not necessarily the address Git later connected to. A low-privileged user who can create migrations or mirrors could direct th...

Astra Linux – Vulnerability in Flatpak

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. The flatpak-builder command applies the finish-args option last in the build process. At this point, the build directory will have full acce...

UBUNTU-CVE-2026-105280

Improper Validation of Integrity Check Value vulnerability in hexpm hex allows a package mirror to substitute the tarball that mix hex.package fetch PACKAGE VERSION --output - writes to standard output. Hex compares a fetched tarball's inner and outer checksums with the repository's signed regist...