nodejsscan

nodejsscan Static security code scanner SAST for Node.js applications powered by libsast and semgrep. Made with in India Support nodejsscan Donate via Paypal: Sponsor the Project: e-Learning Courses & Certifications OpSecX Node.js Security: Pentesting and Exploitation - NJS Run nodejsscan docker...

CVE-2022-40146_Exploit_Jar

Apache Batik SSRF 到 RCE Jar 利用工具 组件链接 https://github.com/apache/xmlgraphics-batik 博客 https://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading 使用方式 修改 src/main/java/com.poc.Poc.java 中的第 11 行以更改命令。 运行 mvn...

Docker-Security

Docker Security Este es el OWASP Docker Top 10. Es un trabajo en curso. Acerca de este documento Este documento describe los 10 puntos de seguridad más importantes para construir un entorno containerizado seguro. Puedes usarlo como una hoja de especificaciones si empiezas desde cero, o bien...

EAST

可扩展的 Azure 安全工具 可扩展的 Azure 安全工具（以下简称 E.A.S.T）是一款用于评估 Azure 及一定程度上 Azure AD 安全控制项的工具。EAST 的主要用途是在 Azure 评估中收集安全数据以进行评价。这些信息（JSON 内容）随后可用于各种报告工具，我们利用这些工具进一步关联和调查数据。 此工具基于 MIT 许可证 授权。 合作者 正是在下 Nixu 云安全团队 目录 可扩展的 Azure 安全工具 合作者 发布说明 重要事项 工具操作 依赖项 控制项 基础 高级 组合 报告 运行 EAST 扫描 详细前提条件（如果您选择不执行“一次性”版本） 登录 ...

CVE-2026-102134 Kiteworks Core Unprotected Alternate Channel

Kiteworks Core did not apply its gateway-level API security controls to every request authenticated through the platform's central authentication service. An authenticated user could reach REST API functionality over a request path on which those controls, including enforcement of signed-out and...

CVE-2026-102134 Kiteworks Core Unprotected Alternate Channel

Kiteworks Core did not apply its gateway-level API security controls to every request authenticated through the platform's central authentication service. An authenticated user could reach REST API functionality over a request path on which those controls, including enforcement of signed-out and...

CVE-2026-102134

The Kiteworks Core platform contains a vulnerability where gateway-level API security controls are not consistently applied to all requests authenticated via the central authentication service. Specifically, an authenticated user can access REST API functionality through request paths that bypass...

DROS-VEP-lite

🛡️ VEP: Banco de Pruebas Abierto para la Investigación en Seguridad de Agentes Una Infraestructura de Evaluación Componible a Nivel de Sistema para la Investigación en Post-Compromiso e IA Física "VEP Vulnerability & Exploitability Protocol es un entorno de evaluación de investigación abierto e...

CVE-2026-18156

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is affected by CVE-2026-18156 , where a remote authenticated attacker could bypass security controls by forging user identities due to improper authorization (CWE-862 ). The vulnerability has a CVSS base score of 6.5 . Affected versions...

PT-2026-97112

Name of the Vulnerable Software and Affected Versions OpenEye Apex Network Video Recorder versions 2.2.3.4 through 3.2.9.376 Description The software trusts an X-Forwarded-For header provided by a client to determine the request source address. This allows an unauthenticated remote attacker to...

PT-2026-95422

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description An issue exists in the HTTP/1 to HTTP/2 conversion process. When an HTTP/1 request contains both an absolute-form request-target and a conflicting Host header, the system incorrectly prioritize...

Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix

A flaw was found in Apache Tomcat. This improper input validation vulnerability stems from an incomplete fix for a previous security issue CVE-2025-66614. This flaw may allow an attacker to bypass security controls or cause unexpected behavior within the application...

Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension

A flaw was found in Apache Tomcat. A remote attacker could exploit an inconsistent interpretation of HTTP requests, known as HTTP Request/Response Smuggling, by sending a specially crafted request with an invalid chunk extension. This vulnerability allows an attacker to manipulate the way HTTP...

CVE-2026-76059 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the...

CVE-2026-79724

IBM Langflow OSS versions 1.0.0 through 1.11.5 are affected by an OS command injection vulnerability (CWE-78) caused by multiple incomplete code security controls and missing execution guards, including an incomplete denylist omitting process-spawning primitives, a logic error in the code scanner...

CVE-2026-81204

IBM Langflow OSS (versions 1.0.0 through 1.11.5) is vulnerable to unauthenticated remote code execution (CVSS 9.8, CRITICAL) caused by code injection during graph construction (CWE-94). The root cause involves the lfx CodeParser passing return-type annotation source directly to eval without sanit...

CVE-2026-85025 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through publicly shared MCP project endpoints due to improper enforcement of public-flow security restrictions and session isolation controls...

kernel: sctp: auth: verify auth requirement when auth_chunk is NULL

A flaw was found in the Stream Control Transmission Protocol SCTP authentication mechanism within the Linux kernel. The sctpauthchunkverify function incorrectly processes authentication chunks, leading to authentication requirements being silently bypassed. This can occur under specific condition...

HTTP Header Injection

Blaze is vulnerable to HTTP header injection. The vulnerability is due to blaze-server merging attacker-controlled HTTP trailer fields into Request.headers, which allows an unauthenticated remote attacker to inject or spoof trusted headers such as X-Forwarded-For, X-Real-IP, X-Forwarded-Host, or...

CVE-2026-78319 TOCTOU Vulnerability in file exchange

A service running on the affected products contains a potential Time-of-Check Time-of-Use TOCTOU race condition. An unauthenticated remote attacker could exploit this race condition to bypass intended security controls. This may result in the execution of unauthorized code...