swift-nio-ssh

SwiftNIO SSH This project contains SSH support using SwiftNIO. What is SwiftNIO SSH? SwiftNIO SSH is a programmatic implementation of SSH: that is, it is a collection of APIs that allow programmers to implement SSH-speaking endpoints. Critically, this means it is more like libssh2 than openssh...

KnockOutlook

KnockOutlook "The best feeling is to win by knockout." - Nonito Donaire Overview KnockOutlook is a C project that interacts with Outlook's COM object in order to perform a number of operations useful in red team engagements. Command Line Usage / /// / // \ / // / / / / , / / / / /// / / / / / / /...

zelos

Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...

manticore

⚠️ Project is archived ⚠️ This project is no longer internally developed and maintained. Manticore Manticore is a symbolic execution tool for the analysis of smart contracts and binaries. Features Program Exploration : Manticore can execute a program with symbolic inputs and explore all the...

Incomplete Cleanup

Overview Affected versions of this package are vulnerable to Incomplete Cleanup via handshake-wrap state handling in the SecureNioChannel component. A TLS client can trigger intermittent TLS 1.3 connection failures by sending traffic that leaves a handshake wrap pending; after the channel wraps...

com.gitee.jmash:jmash-mvc (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-93446 via org.apache.tomcat.experimental:tomcat-embed-programmatic (10.1.39)

org.apache.tomcat.experimental:tomcat-embed-programmatic MAVEN version 10.1.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.experimental:tomcat-embed-programmatic and may be impacted: - com.gitee.jmash:jmash-mvc =1.0.0, =1.0.2 Sour...

com.gitee.jmash:jmash-mvc (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-88041 via org.apache.tomcat.experimental:tomcat-embed-programmatic (10.1.39)

org.apache.tomcat.experimental:tomcat-embed-programmatic MAVEN version 10.1.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.experimental:tomcat-embed-programmatic and may be impacted: - com.gitee.jmash:jmash-mvc =1.0.0, =1.0.2 Sour...

com.gitee.jmash:jmash-mvc (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-74048 via org.apache.tomcat.experimental:tomcat-embed-programmatic (10.1.39)

org.apache.tomcat.experimental:tomcat-embed-programmatic MAVEN version 10.1.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.experimental:tomcat-embed-programmatic and may be impacted: - com.gitee.jmash:jmash-mvc =1.0.0, =1.0.2 Sour...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via inconsistent HTTP/2 header decoding in HpackDecoder and header processing in Stream. An attacker can trigger a request-header mix-up by sending crafted HTTP/2 headers, causing Tomcat to interpret requests...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via the Http11Processor in the HTTP/1.x request-processing component. An attacker can cause one request from another user to fail by sending an HTTP/1.0 request with a Transfer-Encoding header when Tomcat is behin...

Incorrect Synchronization

Overview Affected versions of this package are vulnerable to Incorrect Synchronization via the shared header emitter in the HTTP/2 HpackDecoder. An attacker can inject trailer fields into another HTTP/2 request by sending requests that cause a stream to be reset and replaced while headers are bei...

Authentication Bypass by Primary Weakness

Overview Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness via the getServerAuthConfig method in SimpleAuthConfigProvider. When Jakarta Authentication uses this provider as the default for multiple web applications, its cached configuration retains the...

Incomplete Cleanup

Overview Affected versions of this package are vulnerable to Incomplete Cleanup via the StreamProcessor request-recycling path in the HTTP/2 connector. An attacker can cause one request from another user to fail by sending a malformed HTTP/2 request that sets the per-request NOTEBADREQUEST marker...

com.gitee.jmash:jmash-mvc (>=0.0.2, <=1.0.2) potentially affected by CVE-2026-77762 via org.apache.tomcat.experimental:tomcat-embed-programmatic (>=10.1.16, <=10.1.39)

org.apache.tomcat.experimental:tomcat-embed-programmatic MAVEN version =10.1.16, =0.0.2, =1.0.2 Source cves: CVE-2026-77762 Source advisory: MEND:CVE-2026-77762...

com.gitee.jmash:jmash-mvc (>=0.0.2, <=1.0.2) potentially affected by CVE-2026-77756 via org.apache.tomcat.experimental:tomcat-embed-programmatic (>=10.1.16, <=10.1.39)

org.apache.tomcat.experimental:tomcat-embed-programmatic MAVEN version =10.1.16, =0.0.2, =1.0.2 Source cves: CVE-2026-77756 Source advisory: MEND:CVE-2026-77756...

com.gitee.jmash:jmash-mvc (>=0.0.2, <=1.0.2) potentially affected by CVE-2026-75973 via org.apache.tomcat.experimental:tomcat-embed-programmatic (>=10.1.16, <=10.1.39)

org.apache.tomcat.experimental:tomcat-embed-programmatic MAVEN version =10.1.16, =0.0.2, =1.0.2 Source cves: CVE-2026-75973 Source advisory: MEND:CVE-2026-75973...

CVE-2026-85198: Improper Neutralization of Special Elements used in an SQL Command

The MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO plugin for WordPress is vulnerable to generic SQL Injection via URL Path in all versions up to, and including, 4.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

[SECURITY] Fedora 43 Update: nextcloud-34.0.2-1.fc43

NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...

swift-nio-ssh v0.15.0

SwiftNIO SSH This project contains SSH support using SwiftNIO. What is SwiftNIO SSH? SwiftNIO SSH is a programmatic implementation of SSH: that is, it is a collection of APIs that allow programmers to implement SSH-speaking endpoints. Critically, this means it is more like libssh2 than openssh...

MemSecBench: Tracking Agent Memory Poisoning from Persistence to Consequence and Repair

Memory systems allow agents to retain and reuse information from past interactions, but they can also let malicious content persist. A malicious instruction crafted by an attacker may be stored in long-term memory, recalled much later, and quietly shape a real action. Recent benchmarks increasing...