security-research

Security Research This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code. We believe that vulnerability disclosure is a two-way street. Vendors, as well as researchers, must act responsibly. This i...

vulnerability_advisories

Onapsis Security Advisories This repository contains Security Advisories for vulnerabilities reported by the Onapsis Research Labs team Advisories Summary The following table is a summary of the vulnerabilties described in this repository: Vendor| CVE| CVSS| Description| Link to Report...

rustsec

RustSec Crates 🦀🛡️📦 The RustSec Advisory Database is a repository of security advisories filed against Rust crates published via crates.io. The advisory database itself can be found at: https://github.com/RustSec/advisory-db About this repository This repository contains a Cargo Workspace with all...

CVEs

My publicly published security advisories...

advisories

SBA Research Security Advisories Security advisories published by SBA Research...

advisories

Enable Security Advisories This repository contains reproduction code, proof-of-concept scripts, and supporting files for security advisories published by Enable Security. Full advisories: https://www.enablesecurity.com/advisories/ The complete advisory content descriptions, impact, timeline, etc...

vuln-list-redhat

vuln-list-redhat Red Hat security advisories...

vuln-list-aqua

vuln-list-aqua Security advisories from Aqua Security...

security-research

Security Research This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Orange group. Responsible disclosure For each security issue discovered, Orange CERT informs vendor about the vulnerability. Proof of Concept will be not published in...

SuperWebMailer 9.00.0.01710 - Cross-Site Scripting

An issue was discovered in SuperWebMailer 9.00.0.01710 allowing XSS via crafted incorrect passwords. id: CVE-2023-38192 info: name: SuperWebMailer 9.00.0.01710 - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 allowi...

esm.sh <= v136 - Local File Inclusion

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. id: CVE-2025-59341 info: name: esm.sh = v136 - Local File Inclusion author: 0xAkoko severity: high description:...

security-advisories

Threat Lance Security Advisories Public security advisory repository by Threat Lance. CVE| Title| Severity| Published ---|---|---|--- CVE-2025-50455| EasyAppointments = 1.5.1 Blind SQL Injection via orderby| Critical| TBD...

security-advisories

Security Advisories Public security advisories by Greg Durys. Advisory| Product| Vulnerabilities| Severity ---|---|---|--- Cohesity TranZman| TranZman Migration Appliance| 5 CVEs CWE-78, CWE-434, CWE-269, CWE-327| High pwnlift| rasta-mouse/pwnlift| CVE-2026-56815 CWE-59, CWE-367| High skillable|...

advisories

Advisories Security advisories from Kelly Kaoudis @kaoudis and friends. In general, I'll publish here either after the vendor has patched, or after 90 days from vulnerability discovery. Happy reading! Advisories are numbered in discovery order & by year; discovery enumeration starts at 0...

Aninda-security-advisories

This repository does not have a README...

vuln-list-backup

vuln-list Collect vulnerability information and save it in parsable format automatically Source Directory| OS| Source| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux Errata| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine secdb| https://secdb.alpinelinux.org/ amazon/1|...

security-advisories

security-advisories Public security advisories published by Me Chidubem ChukwuTerminal Venom, including CVE disclosures and vulnerability reports for open-source and third-party softwares...

advisory

Security Advisories — bl4dsc4n Public repository containing security advisories, technical analyses, and Proof-of-Concepts PoCs for vulnerabilities independently discovered in open-source software. All vulnerabilities were identified through manual source code review, secure code analysis, and...

security-advisories

Security advisories This repository is the authoritative source for security advisories from the Nextcloud project: Advisories after May 2021 are published using GitHub's Security Advisory section Advisories before May 2021 can be found in the archived old/ folder as JSON files...

Autonomous OSS Threat Detection Via Taxonomy-Aligned LLMs

Open source software OSS ecosystems face growing threats from sophisticated supply chain attacks including typosquatting, dependency confusion, Trojan Source obfuscation, malicious build injection, and CI/CD pipeline poisoning. Existing detection approaches rely on signature-based tools and...