193436 matches found
CVE-2025-57389
CVE-2025-57389 - Reflected XSS in OpenWRT 18.06.2 Description A reflected cross-site scripting XSS vulnerability was identified in EOL Luci OpenWRT v18.06.2 on /cgi-bin/luci/admin/system/packages endpoint. Proof of Concept 1. While proxying the traffic to Burp, navigate to...
tcconfig
.. contents:: tcconfig :backlinks: top :depth: 2 Summary tcconfig is a tc command wrapper. Make it easy to set up traffic control of network bandwidth/latency/packet-loss/packet-corruption/etc. to a network-interface/Docker-containerveth. |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL|...
golang-x-text
Go Text يحتوي هذا المستودع على حزم Go تكميلية لمعالجة النصوص، العديد منها يتعلق بـ Unicode. إصدارات CLDR من المهم أن تتطابق نسخة Unicode المستخدمة في x/text مع تلك المستخدمة بواسطة مترجم Go الخاص بك. يدعم مستودع x/text إصدارات متعددة من Unicode وسيطابق نسخة Unicode مع نسخة مترجم Go. في الوقت الحا...
CLSA-2026-1788216921 TuxCare security update for io.netty (28 CVEs)
TuxCare rebuilt 46 io.netty packages to address 28 CVEs. Fixed in 4.1.79.Final-tuxcare.2...
heaphopper
heaphopper HeapHopper is a bounded model checking framework for Heap-implementations. Overview Setup root@kitploit: sudo apt update && sudo apt install build-essential python3-dev virtualenvwrapper git clone https://github.com/angr/heaphopper.git && cd ./heaphopper mkvirtualenv -ppython3 heaphopp...
GHSA-GJHQ-GJFW-99MQ vulnerabilities
Vulnerabilities for packages: minio, cert-manager, nerdctl, kaf, kyverno, flux, opentelemetry-collector, kubescape, spire-server, telegraf, aactl, loki, snyk-cli, cilium, flux-notification-controller, fscrypt, argocd-image-updater, helm, external-dns, falco-no-driver, k9s, chisel,...
GHSA-GJHQ-GJFW-99MQ vulnerabilities
Vulnerabilities for packages: chisel, kubescape-server, cilium, reports-server, flux-fips, snyk-cli, rancher, minio, opentelemetry-collector, nerdctl, cloudbeat, loki, external-dns, flux-image-automation-controller, kubevela, frankenphp-8.3, kubevela-fips, flux-source-controller-fips,...
tanstack-shield
🛡️ tanstack-shield One-command supply-chain attack scanner for CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx Detects the "Mini Shai-Hulud" worm that compromised 42 @tanstack/ npm packages 84 malicious versions on May 11, 2026. root@kitploit: One line — scan your project curl -fsSL...
tanstack-compromise-checker
tanstack-compromise-checker ⚠️ अस्वीकरण: यह टूल मेरे अपने उपयोग के लिए बनाया गया था। सभी संकेतक निम्नलिखित एडवाइज़री स्रोतों से प्राप्त हुए हैं: GHSA-g7cv-rxg3-hmpx Snyk: TanStack npm packages compromised StepSecurity: Mini Shai-Hulud deep dive यदि इसे अंतिम बार अपडेट किए जाने के बाद नए IOC, पेलोड...
cisco_asa_research
أبحاث Cisco ASA يحتوي هذا المستودع على الشرائح والكود المعروض في Black Hat USA 2022 و DEF CON 30. يمكن العثور على ما يلي: شرائح حزم شرائح DEF CON 30 و Black Hat. حزمة DEF CON أطول قليلاً نظرًا لطول الفترة الزمنية المخصصة. theway - أداة لإنشاء حزم ASDM خبيثة/قابلة للتوزيع لـ Cisco ASA...
CVE-2026-82653
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog where unescaped package names and notebook names are interpolated directly into innerHTML assignments. Attackers can submit malicious bazaar packages with HTML/script payloads in the name field that execute...
CVE-2026-82653 SiYuan before v3.8.1 Stored XSS via confirmDialog
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog where unescaped package names and notebook names are interpolated directly into innerHTML assignments. Attackers can submit malicious bazaar packages with HTML/script payloads in the name field that execute...
CVE-2026-82653
SiYuan before v3.8.1 is affected by a stored cross-site scripting (XSS) vulnerability in the confirmDialog() function. Unescaped package names and notebook names are interpolated directly into innerHTML assignments, allowing attackers to submit malicious bazaar packages with HTML/script payloads ...
EUVD-2026-68239
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog where unescaped package names and notebook names are interpolated directly into innerHTML assignments. Attackers can submit malicious bazaar packages with HTML/script payloads in the name field that execute...
CVE-2026-82653 SiYuan before v3.8.1 Stored XSS via confirmDialog
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog where unescaped package names and notebook names are interpolated directly into innerHTML assignments. Attackers can submit malicious bazaar packages with HTML/script payloads in the name field that execute...
RHSA-2026:60853 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
pmg
पैकेज मैनेजर गार्ड PMG दुर्भावनापूर्ण npm और pip पैकेजों को इंस्टॉल होने से पहले ब्लॉक करें। आपके द्वारा पहले से उपयोग किए जाने वाले पैकेज मैनेजरों के लिए गहराई में सुरक्षा।...
MGASA-2026-0341 Updated golang packages fix security vulnerabilities
CVE-2026-56865 A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. CVE-2026-56864 A malicious GOSUMDB was capable of serving arbitrary...
PT-2026-83579
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog where unescaped package names and notebook names are interpolated directly into innerHTML assignments. Attackers can submit malicious bazaar packages with HTML/script payloads in the name field that execute...