SUSE CVE-2026-63076

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...

CVE-2026-82277 Argo Rollouts Dashboard Unauthenticated Mutating Operations

Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout...

EUVD-2026-67808

Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout...

CVE-2026-82272

Immich versions up to 3.1.0 contain a visibility enforcement flaw: when an asset is locked via the single-asset endpoint , the lock is not correctly applied to shared albums and shared links , allowing a low-privileged attacker to read the asset and its metadata without bypassing any other protec...

CVE-2025-66204

CVE-2025-66204: WBCE CMS consente di bypassare la protezione brute-force utilizzando l'header X-Forwarded-For Panoramica...

sel4-ics-gateway-demo

seL4 ICS Gateway Demo Ein defensives Sicherheitsforschungsprojekt, das Protocol-Break - und Packet-Forwarding -Architekturen zum Schutz industrieller Steuerungssysteme vor Cyberangriffen vergleicht. Dokumentation: Netzwerkarchitektur – Netzwerkdiagramme und Datenverkehrsfluss Container-Architektu...

Chromium: CVE-2026-79006 Protection mechanism failure in HttpsUpgrades

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

ALPINE-CVE-2026-33604

An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body to bypass the outbound protection that prevents message content from being interpreted as SMTP commands. A downstream mail server that...

AZL-98280 CVE-2026-33604 affecting package dovecot 2.3.20-1

An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body to bypass the outbound protection that prevents message content from being interpreted as SMTP commands. A downstream mail server that...

SecureML

SecureAIML 🔐 Unternehmensreife KI-Modellsicherheit basierend auf OpenSSF Model Signing SecureAIML ist das „Stripe für Modellsicherheit“ – es macht den Schutz von KI-Modellen auf Unternehmensniveau für jede Organisation zugänglich, benutzerfreundlich und produktionsreif. Warum SecureAIML? Im...

EUVD-2026-67659

An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body to bypass the outbound protection that prevents message content from being interpreted as SMTP commands. A downstream mail server that...

CVE-2026-33604

An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body to bypass the outbound protection that prevents message content from being interpreted as SMTP commands. A downstream mail server that...

CVE-2026-80630

In the Linux kernel, the following vulnerability has been resolved: net/sched: schfqcodel: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever fqcodel drops packets during peek, it calls qdisctreereducebacklog. An issue arises because it calls qdisctreereducebacklog befo...

Disable-TamperProtection

Disabilitare la protezione Tamper e altri componenti Defender / MDE È possibile abusare dei privilegi SYSTEM / TrustedInstaller per manomettere o eliminare le impostazioni di WdFilter chiave di registro ALTITUDE e scaricare il minidriver del kernel per disabilitare la protezione Tamper e altri...

HTMLawed

HTMLawed è ... ... uno script PHP monofile di 45 kb che rende il testo in input più sicuro, conforme agli standard HTML e, in generale, adatto dal punto di vista di un amministratore di pagine web, per l'uso nel corpo di documenti HTML, XHTML o XML. Una semplice alternativa a HTMLTidy, il filtro,...

quarantyne

=== DIESES PROJEKT IST ARCHIVIERT === Quarantyne · Moderne Web-Firewall 🛃 Automatisierte Websicherheit leicht gemacht TL;DR Quarantyne ist ein Reverse-Proxy, der Webanwendungen und APIs in Echtzeit vor betrügerischem Verhalten, Missbrauch, Bots und Cyber-Angriffen schützt. Anforderungen...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

naxsi

Projektstatus Dies ist ein Projektstatus-Update bezüglich Naxsi. Wie Sie vielleicht bemerkt haben, wurde die Entwicklung von Naxsi eingestellt und das Repository wird aus historischen Gründen archiviert. Das bedeutet, dass für diese Version keine neuen Updates oder Fehlerbehebungen veröffentlicht...

NashaVM

NashaVM – Native Sharp Virtual Machine Nasha ist eine virtuelle Maschine für .NET-Dateien und ihre Laufzeit wurde in C++/CLI erstellt. Installation root@kitploit: git clone https://github.com/Mrakovic-ORG/NashaVM --recurse cd NashaVM\NashaVM nuget restore msbuild Abhängigkeiten dnlib .NET Framewo...

torghost

Was ist TorGhost? TorGhost ist ein Anonymisierungsskript. TorGhost leitet den gesamten Internetverkehr über einen SOCKS5-Tor-Proxy um. Auch DNS-Anfragen werden über Tor umgeleitet, um DNS-Leaks zu verhindern. Das Skript deaktiviert auch unsichere Pakete, die das System verlassen. Manche Pakete wi...