PR-DNSd

PR-DNSd Passive-Recursive DNS daemon. What does it do Quickstart go get github.com/korc/PR-DNSd sudo setcap capnetbindservice,capsyschroot=ep go/bin/PR-DNSd go/bin/PR-DNSd -upstream 9.9.9.9:53 -listen 127.0.0.1:53 echo nameserver 127.0.0.1 | sudo tee /etc/resolv.conf dig google.com dig -x $dig...

appsec-agent

AppSec Agent AI-powered security agents for code review, PR scanning, threat modeling, fix generation, and more. You can use AppSec Agent in three ways: Path| Best for| Get started ---|---|--- CLI agent-run| Trying agents from your terminal| Getting started npm library| Building your own app or...

geacon

Geacon Using Go to implement CobaltStrike's Beacon This project is for learning protocol analysis and reverse engineering only, if someone's rights have been violated, please contact me to remove the project, and the last DO NOT USE IT ILLEGALLY How to play 1. Setup the teamserver and start a htt...

heisenberg-ssc-gha

Heisenberg Dependency Health Check GitHub Action A lightweight PR guardrail for dependency updates. It scans new or changed dependencies only from your lock/manifest, pulls health and risk signals deps.dev + heuristics, flags fresh publishes, comments a report on the PR, optionally labels it for...

react-CVE-2025-55182-fixer

React Server Components Security PR Automation This repository provides a script to automatically bump and create pull requests PRs for repositories affected byCVE-2025-55182, which affects vulnerable versions of react-server-dom- and related React packages. What does this tool do? Scans for...

CVE-2026-117558 ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status

The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in the repo argument. The unvalidated repo value is interpolated into gh issue view or gh pr view commands run via execSync,...

arthur-common (>=2.4.80, <=2.4.81), heta-framework (0.1.3b1) +2 more potentially affected by CVE-2026-114612 via litellm (1.101.0)

litellm PYPI version 1.101.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - arthur-common =2.4.80, =1.7.1, =1.7.2 - pr-agent 0.46.0 Source cves: CVE-2026-114612 Source advisory: SNYK:PYTHON-LITELLM-21433566...

pr-agent (0.47.0) potentially affected by CVE-2026-114612 via litellm (1.103.0)

litellm PYPI version 1.103.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - pr-agent 0.47.0 Source cves: CVE-2026-114612 Source advisory: SNYK:PYTHON-LITELLM-21433566...

arthur-common (>=2.4.80, <=2.4.81), heta-framework (0.1.3b1) +2 more potentially affected by CVE-2026-114612 via litellm (1.101.0)

litellm PYPI version 1.101.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - arthur-common =2.4.80, =1.7.1, =1.7.2 - pr-agent 0.46.0 Source cves: CVE-2026-114612 Source advisory: MEND:CVE-2026-114612...

pr-agent (0.47.0) potentially affected by CVE-2026-114612 via litellm (1.103.0)

litellm PYPI version 1.103.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - pr-agent 0.47.0 Source cves: CVE-2026-114612 Source advisory: MEND:CVE-2026-114612...

CVE-2026-98723

In the Linux kernel, the following vulnerability has been resolved: nvmet: copy the hostid into the ctrl before creating PR pcrefs Commit 6202783184bf "nvmet: Improve nvmetallocctrl interface and implementation" added a second uuidcopy of args-hostid near the end of nvmetallocctrl, and commit...

PT-2026-116795

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix slab-out-of-bounds reads when logging service names nfc llcp wks sap and nfc llcp build sdreq tlv pass non-null- terminated strings to pr debug using the %s format specifier. The buffers are allocated via kmemdup o...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: staticcall: Replace the unnecessary WARNON call in staticcallmodulenotify. staticcallmodulenotify triggers a WARNON when memory allocation fails in staticcalladdmodule. This approach isn’t really justified, because the failure ca...

EUVD-2026-101749

Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...

CVE-2026-110866 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request

Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...

CVE-2026-110866

Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...

CVE-2026-110866 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request

Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...

CVE-2026-110866 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request

Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...

CVE-2026-110866

Versions of Renovate prior to 44.61.3 are vulnerable to a protection mechanism bypass (CWE-693). The flaw allows an attacker to skip minimumReleaseAge checks when a user requests a PR rebase using the rebase/retry checkbox. This enables an attacker who publishes a malicious dependency to have tha...

CVE-2026-110866: Protection Mechanism Failure

Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...