kin

代码的新基础。 Kin 是一个面向人类和 AI 代理的图原生代码仓库。 它将源代码、记录的代码关系以及版本化历史作为仓库状态存储。图就是仓库模型，而不是在另一个仓库旁边维护的搜索索引。 函数、类型以及它们之间的关系都是你可以提交、分支和合并的数据。精确的源代码按字节保留，文件系统投影让受支持的工具可以继续使用普通文件。 公开 alpha 版。 请从一个你熟悉的小型仓库开始。请预期会有粗糙之处和破坏性变更。 快速开始 · 文档 · 浏览器演示 点一个 star 可以帮助其他人发现 Kin，而 Discussions 是提出相关问题的好去处。 看看什么与之相连...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: erofs: Properly handling NONHEAD !delta1 lclusters. The syzbot tool reported a warning in iomapiterdone: iomapfiemap+0x73b/0x9b0 fs/iomap/fiemap.c:80 ioctlfiemap fs/ioctl.c:220 inline Generally, NONHEAD lclusters will not have...

kin v0.6.4

A new foundation for code. Kin is a graph-native code repository for people and AI agents. It stores source, recorded code relationships, and versioned history as repository state. The graph is the repository model, not a search index maintained beside another repository. Functions, types, and th...

PT-2026-49534

Name of the Vulnerable Software and Affected Versions grpc versions 0.3.1 through 0.9.x Description Unauthenticated attackers can exhaust the BEAM memory and crash the server by streaming a large or slow-trickle unary request body. The function read full body/3 in...

CVE-2025-62363 yt-grabber-tui allows arbitrary code execution via configurable yt-dlp path

yt-grabber-tui is a terminal user interface application for downloading videos. In versions before 1.0-rc, the application allows users to configure the path to the yt-dlp executable via the pathtoytdlp configuration setting. An attacker with write access to the configuration file or the filesyst...

PT-2025-50334

Name of the Vulnerable Software and Affected Versions sd command versions prior to 1.0.0 Description An issue allows attackers to escalate privileges to root via a crafted command. Recommendations Update to a version newer than 1.0.0...

UBUNTU-CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

PT-2024-11906 · Wireguard +4 · Wireguard +4

Name of the Vulnerable Software and Affected Versions: netplan versions prior to 1.0 Description: The issue concerns netplan leaking the private key of WireGuard to local users. A security fix is expected to be released soon. Recommendations: For versions prior to 1.0, a security fix will be...

PT-2023-16213 · WordPress · Scheduled Announcements Widget

Name of the Vulnerable Software and Affected Versions: Scheduled Announcements Widget WordPress plugin versions prior to 1.0 Description: The issue arises from the lack of validation and escaping of some shortcode attributes in the Scheduled Announcements Widget WordPress plugin. This could allow...

PT-2023-9888 · Unknown · Simplesamlphp

Name of the Vulnerable Software and Affected Versions: simpleSAMLphp versions prior to 1.0 Description: A vulnerability was found in the Information Cards Module and classified as problematic. This issue affects some unknown processing, leading to cross-site scripting. The attack may be initiated...

Siemens SINEC NMS 路径遍历漏洞

SINEC NMS, a network management system from Siemens for monitoring and managing industrial networks, is vulnerable to arbitrary file deletion in versions prior to SINEC NMS 1.0 SP2 Update 1. An attacker could use this vulnerability to delete arbitrary files or directories in the user control path...

CVE-2021-37201

A vulnerability has been identified in SINEC NMS All versions V1.0 SP1. The web interface of affected devices is vulnerable to a Cross-Site Request Forgery CSRF attack. This could allow an attacker to manipulate the SINEC NMS configuration by tricking an unsuspecting user with administrative...

Libyang Input Validation Error Vulnerability

libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. An input validation error vulnerability exists in yyparse in versions prior to libyang v1.0-r1. The vulnerability stems from a networked system or product that does not properl...

libyang buffer overflow vulnerability (CNVD-2020-10242)

libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. A buffer overflow vulnerability exists in the 'resolvefeaturevalue' function in versions of libyang prior to 1.0-r1. An attacker can exploit this vulnerability to cause the...

qemu: ccid: buffer overflow in handling of VSC_ATR message

Buffer overflow in the ccidcardvscardhandlemessage function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted VSCATR message...

PT-2014-2164 · Qemu +2 · Qemu +2

Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 0.15.2 QEMU versions 1.x prior to 1.0-rc4 Description: The issue is related to a buffer overflow in the ccid card vscard handle message function, which can be triggered by a crafted VSC ATR message. This could lead to a...