scorecard

OpenSSF Scorecard Overview What Is Scorecard? Prominent Scorecard Users View a Project's Score Scorecard's Public Data Using Scorecard Scorecard GitHub Action Scorecard REST API Scorecard Badges Scorecard MCP Server Scorecard Command Line Interface Prerequisites Installation Authentication Basic...

CVE-2022-22965

CVE-2022-22965 Spring4Shell Analysis Vulnerability Description Spring4Shell is the name of a CVE existing on Spring Core of the Spring Framework. With a CVSS 3.x score of 9.8, the vulnerability is classified as the highest risk level critical. This vulnerability allows an attacker to execute remo...

CVE-2022-22965

CVE-2022-22965 CVE-2022-22965 EXP General environment requirements: 1. Whether Spring framework is used; if not, the vulnerability does not exist 2. Whether Spring parameter binding is used; if not, the vulnerability does not exist 3. The JDK version used by the middleware; if the version is lowe...

melange

melange Build apk packages using declarative pipelines. Commonly used to provide custom packages for container images built with apko. The majority of apks are built for use with either the Wolfi or Alpine Linux ecosystems. Key features: Pipeline-oriented builds. Every step of the build pipeline ...

gitlab-profile

Staxis Platform Staxis Platform is an independent Node.js platform for building and running applications with installable software layers. Its Core Orchestrator manages how those layers are loaded and executed. Read the quick overview TEST STATUS : ↳ core-orchestrator tester ↳ documentation teste...

BurpSuite-collections

Burp-Suite-collections BurpSuite related collection project, plugins are mainly non-BApp Store store All localization or use of burpsuite is under the premise that you have configured the Java environment!!! Related tutorial Latest version after 202212 activation refer to thisproject solve it...

Packer-Fuzzer

Packer Fuzzer A scanning tool for fast and efficient security detection of websites constructed by front-end packaging tools such as Webpack Proudly produced by Poc-Sir, KpLi0rn, Liucy, RachesseHS, Lupin-III Click here for the Chinese version 👮🏻‍♀️ Disclaimer Any direct or indirect consequences and...

ROOT-APP-PYPI-CVE-2026-34518 CVE-2026-34518 in aiohttp - Patched by Root

Root has patched CVE-2026-34518 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

tricorne

Tricorne A Fedora Remix for offensive security. "My treasure? If you want it, I'll let you have it. Seek it out! I left everything at that place!" Gol D. Roger The short version Kali owns Debian. BlackArch owns Arch. Parrot owns the "security-focused desktop" niche. No one owns RPM-world offensiv...

Rocky Linux 9 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging / nodejs-packaging-bundler Multiple Vulnerabilities (crlsa-2026_97855)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202697855 advisory. nodejs: Node.js: Permission Model bypass via process.report.writeReport path misvalidation CVE-2026-48617 nodejs: Node.js HTTP Agent: Information disclosu...

Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2026_98102)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202698102 advisory. brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns CVE-2026-102278 brace-expansion: brace-expansion:...

nodejs:24 security update

An update is available for nodejs-nodemon, module.nodejs-packaging, module.nodejs-nodemon, module.nodejs, nodejs, nodejs-packaging. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Rocky Linux 9 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2026_96226)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202696226 advisory. undici: undici: Denial of Service via unrequested WebSocket subprotocol CVE-2026-19534 brace-expansion: brace-expansion: Denial of Service via uncontrolle...

Rocky Linux 9 [CIQ] Security Update: nodejs-packaging / nodejs-packaging-bundler Multiple Vulnerabilities (crlsa-2023_4330)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234330 advisory. nodejs: mainModule.proto bypass experimental policy mechanism CVE-2023-30581 nodejs: process interuption due to invalid Public Key information in x509...

Oracle Solaris Critical Patch Update : oct2026_SRU11_4_95_227_1

The version of Solaris installed on the remote host is prior to 11.4.95.227.1. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11oct2026SRU114952271 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported versi...

Oracle Solaris Critical Patch Update : oct2026_SRU11_3_36_37_0

The version of Solaris installed on the remote host is prior to 11.3.36.37.0. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11oct2026SRU11336370 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version...

Oracle Solaris Critical Patch Update : oct2026_SRU11_4_94_221_2

The version of Solaris installed on the remote host is prior to 11.4.94.221.2. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11oct2026SRU114942212 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. Supported versions...

CLEANSTART-2024-CA91881 Use after free in Web packaging in Google Chrome prior to 97

Security vulnerability affects the qt5-qtwebengine package. Use after free in Web packaging in Google Chrome prior to 97...

CLEANSTART-2026-RN02401 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)

Security vulnerability affects the mariadb package. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Packaging...

CLEANSTART-2026-SP00582 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)

Security vulnerability affects the mariadb package. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Packaging...