870 matches found
BlockChainConstruction
Preface In this article, we mainly introduce several aspects of public chain audit which are worthy of attention. For security auditors and public chain developers, this is a project worthy of reference and thinking. Architecture Before introducing the construction of public chain system, let's...
joomlavs
joomlavs A black box, Ruby powered, Joomla vulnerability scanner What is it? JoomlaVS is a Ruby application that can help automate assessing how vulnerable a Joomla installation is to exploitation. It supports basic finger printing and can scan for vulnerabilities in components, modules and...
GHSA-7236-3392-C5C6 vulnerabilities
Vulnerabilities for packages: conftest, podman, guac, kubescape, trivy, kaniko, scorecard, skaffold, zot...
GHSA-C974-W86C-VPFW vulnerabilities
Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, redpanda-operator, nrdot-collector-k8s, prometheus-alertmanager-fips, jfrog-cli, terraform-provider-sendgrid-fips, agentbeat-fips, grafana-pyroscope, crossplane-provider-aws-codepipeline-fips, virt-controller-fips,...
GO-2026-6090 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, nrdot-collector-k8s, virt-controller-fips, crossplane-provider-aws-emr, crossplane-provider-aws-licensemanager, jaeger-operator-fips, k8s-metacollector-fips, crossplane-provider-aws-cloud9-fips, seaweedfs, docker-cli-buildx-fips,...
GO-2026-4412 vulnerabilities
Vulnerabilities for packages: wolfictl, cg...
GO-2025-3678 vulnerabilities
Vulnerabilities for packages: sdp-k8s-injector, wasmcloud, fnm, shadowsocks-rust, rustup, parseable, ztunnel-fips, linkerd2-proxy, rustls-ffi, tealdeer, nushell, zizmor, rye, kdash, pixi, sqlx, uv, wasmtime, atuin, xh, zed, wash, lychee, wadm, cargo-audit, wasm-pack, ztunnel, oranda, buck2,...
GO-2026-5327 vulnerabilities
Vulnerabilities for packages: teleport-operator-fips, vault-fips, agentbeat-fips, grafana-pyroscope, grafana-mimir, kubescape, trident-fips, terraform-provider-pagerduty, virt-api-fips, kubescape-server, prometheus-fips, kubescape-server-fips, thanos, opentelemetry-collector-contrib-fips,...
GO-2024-2453 vulnerabilities
Vulnerabilities for packages: syft, crossplane-provider-aws-kms, gomplate, melange, crossplane-provider-aws-ec2, wolfictl, tekton-chains, crossplane, crossplane-provider-aws-iam, crossplane-provider-family-aws, crossplane-provider-aws-lambda, pulumi-language-yaml, slsa-verifier,...
GO-2026-5019 vulnerabilities
Vulnerabilities for packages: teleport-operator-fips, prometheus-elasticsearch-exporter, vault-fips, crossplane-provider-azure-netapp, buildkitd, buildah, act, gitlab-rails-ce-fips, jfrog-cli, ko, kubernetes, trivy-operator, mattermost-fips, crossplane-provider-azure-authorization,...
GO-2025-3563 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, helm-docs, agentbeat-fips, kuberay-operator-fips, kubernetes-csi-external-attacher, configmap-reload-fips, thanos-operator-fips, crossplane-provider-azure-authorization, jaeger-operator-fips, nri-jmx, terraform-provider-azapi-fips,...
GHSA-FM2F-4339-4P2F Flowise: Missing Authorization on Execution Update Endpoint
Flowise Security Audit Report Date: 2026-03-17 Researcher: Dimpal Jadhav [email protected] GitHub: https://github.com/Dimpyj1604 Target: FlowiseAI/Flowise latest main branch Version: [email protected] FINDING 1: Missing Authorization on Execution Update Endpoint Severity: HIGH CVSS 7.5...
TP-Link-TL-WR841ND-Security-Audit
...
Exploit for Signal Handler Race Condition in Sonicwall Sma_6200_Firmware
OpenSSH Security Auditor regreSSHion & 2026 Flaws A lightwe...
SVG `href` attribute bypasses local-reference restriction in Loofah
Summary Loofah's HTML5 sanitizer restricted only the xlink:href attribute on certain SVG elements to local, same-document references. Browsers also accept a plain href attribute as an alternative to the deprecated xlink:href per the SVG 2 spec, but Loofah did not apply the same restriction to it,...
Decidim: CSV census record endpoints improper authorization
Description A participant manager can access and modify the CSV census record admin forms. Technical description The CSV census admin record-management surface under /admin/csvcensus/censuslogs does not enforce admin-only authorization before rendering or mutating Decidim::Verifications::CsvDatum...
PT-2026-60064
Name of the Vulnerable Software and Affected Versions Decidim versions 0.31.1 through 0.31.4 Decidim version 0.32.0.rc1 Description An authorization bypass allows a normal participant to access the demographics questionnaire editor without the required administrator privileges. By directly loadin...
igracias-audit
🎯 iGracias Security Audit — Telkom University Comprehensive s...
Malicious Package
Overview apple-internal-security-audit-v99 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...