1441574 matches found
PSCF
OWASP Product Security Capability Framework PSCF https://prods.ec/ The OWASP Product Security Capability Framework PSCF is a comprehensive guide designed to frame and enhance the security of software products. By leveraging a structured approach to identify, implement, and manage security...
CVE-2026-59276
Several components in Spring Security compare security-sensitive values using standard string equality String.equals rather than a constant-time comparison. Because String.equals returns as soon as it finds a differing character, the time taken to reject an incorrect value is proportional to the...
CVE-2025-6554
CVE-2025-6554...
apache-mina-deserialization-security-assessment
CVE-2024-52046 - Apache MINA 反序列化 RCE 顾问式网络安全报告 针对 Apache MINA 反序列化风险的专业漏洞评估报告,涵盖执行摘要、技术影响、修复方案与缓解策略。 📍 报告概览 字段| 详情 ---|--- 报告类型| 漏洞评估报告 项目背景| 安全研究 主要关注点| 应用安全 受众| 安全团队、工程团队、招聘经理 输出风格| 执行摘要、技术分析、业务影响、修复路线图 发布状态| 已脱敏,供公开作品集审查 !IMPORTANT 本报告经过特意脱敏处理,以便在 GitHub 上公开发布。敏感标识符、凭据、基础设施值及客户特定证据均已替换为明确的占位符...
CLSA-2026-1788351524 TuxCare security update for com.fasterxml.jackson.core:jackson-core (6 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 6 CVEs. Fixed in 2.14.1-tuxcare.1...
ROOT-OS-DEBIAN-13-CVE-2026-41142 CVE-2026-41142 in openexr - Patched by Root
Root has patched CVE-2026-41142 in the openexr package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-34543 CVE-2026-34543 in openexr - Patched by Root
Root has patched CVE-2026-34543 in the openexr package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-27622 CVE-2026-27622 in openexr - Patched by Root
Root has patched CVE-2026-27622 in the openexr package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-42217 CVE-2026-42217 in openexr - Patched by Root
Root has patched CVE-2026-42217 in the openexr package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-41142 CVE-2026-41142 in openexr - Patched by Root
Root has patched CVE-2026-41142 in the openexr package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-12495 CVE-2025-12495 in openexr - Patched by Root
Root has patched CVE-2025-12495 in the openexr package for Root:Debian:11. Multiple fixed versions available...
CVE-2020-6519
Chromium 83 零日漏洞 完整 CSP 绕过 跨平台 CVE-2020-6519 技术文章 POC(正如向 chromium 项目所报告的) 演示视频!...
CVE-2019-12796
CVE-2019-12796 Este repositorio contendrá información sobre CVE-2019-12796 una vez que se haga pública...
OpenSSLUpgrade1.1.1q-Ubuntu
このリポジトリには README がありません。...
CVE-2024-41110-SCAN
CVE-2024-41110 Docker 安全检查器 此工具旨在检查主机是否存在与 Docker 安装中 CVE-2024-41110 相关的漏洞。 它会专门查找易受攻击的 Docker 版本以及 AuthZ 插件的使用情况,这些都可能潜在地导致安全问题。 使用方法 使用以下命令运行脚本: root@kitploit: python3 scan-CVE-2024-41110.py 备注 Vladimir Poglazov 项目的精简版 - GitHub...
Spring-CVE-2022-22947-
此存储库没有 README。...
Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks.
模拟与防范Zerologon(CVE-2020-1472)漏洞攻击 模拟在Windows Server 2016上对Active Directory中Zerologon(CVE-2020-1472)漏洞的攻击,并使用Trend Micro Deep Security解决方案来防范此类攻击。 Zerologon漏洞是Netlogon协议中的一个弱点,可在无需密码的情况下被利用,使攻击者能够轻易控制Active Directory系统中的域控制器。 工具 VMware Workstation Windows Server 2016 Active Directory Kali Linux...
CVE-2026-59277
Spring Security InetAddressMatchers utility provides matchInternal and matchExternal builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal private or external public network. In Spring Security 7.1.0, the internal address classification did...