872 matches found
openclaw-technical-analysis
OpenClaw Technical Analysis This repository contains my deep-dive technical reviews and code audits of the OpenClaw AI platform specifically focusing on the February 15 and February 25, 2026 builds. These reviews are grounded in raw architecture analysis, GitHub commit history, and the intersecti...
dscanner
dScanner 🔍 Herramienta automatizada de reconocimiento web para auditorías de seguridad Descripción dScanner consolida múltiples herramientas de reconocimiento en un solo comando para la fase inicial de pentesting web. Solo usar con sistemas autorizados!!!! 🚀 Instalación Dependencias requeridas:...
GHSA-7236-3392-C5C6 vulnerabilities
Vulnerabilities for packages: trivy, conftest, zot, guac, scorecard, kubescape, kaniko, podman, skaffold...
GHSA-C974-W86C-VPFW vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-dsql, podinfo, k8s-metacollector-fips, longhorn-backing-image-manager-fips, opentelemetry-collector-k8s-fips, argo-cd-fips, caddy-fips, databricks-cli, knative-eventing, cerbos, crossplane-provider-aws-appstream-fips, dapr-fips,...
GO-2026-6090 vulnerabilities
Vulnerabilities for packages: knative-eventing, crossplane-provider-aws-appstream-fips, step-kms-plugin, crossplane-provider-aws-devicefarm-fips, flagger-fips, nri-f5-fips, crossplane-provider-aws-schemas-fips, aws-application-networking-k8s-fips, crossplane-provider-aws-autoscaling,...
GO-2026-4412 vulnerabilities
Vulnerabilities for packages: wolfictl, cg...
GO-2025-3678 vulnerabilities
Vulnerabilities for packages: sdp-k8s-injector, fnm, kdash, buck2, tealdeer, oranda, cargo-audit, wadm, pixi, linkerd-extension-init, ztunnel, lychee, ntpd-rs, sqlx, wasmtime, zed, wash, zizmor, shadowsocks-rust, samply, parseable, linkerd2-proxy, wasmcloud, xh, zola, uv, rustup, rustls-ffi, rye,...
GO-2026-5327 vulnerabilities
Vulnerabilities for packages: agentbeat, tempo-fips, virt-operator, consul-k8s-fips, trufflehog-fips, prometheus, argo-cd-fips, splunk-otel-collector, dapr-fips, datadog-agent-fips, authentik-fips, external-secrets-operator, packer-fips, cortex, elastic-agent, ratify, tetragon-fips, thanos,...
GO-2024-2453 vulnerabilities
Vulnerabilities for packages: aactl, melange, pulumi-language-java, crossplane-provider-aws-cloudfront, flux-kustomize-controller, crossplane-provider-aws-sqs, terraform-provider-google, argo-workflows, crossplane-provider-aws-memorydb, sops, crossplane-provider-aws-ec2,...
GO-2026-5019 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-operationalinsights, melange, rancher-machine, prometheus, trufflehog-fips, crossplane-provider-azure-powerbidedicated, cert-manager, step-issuer-fips, argo-cd-fips, caddy-fips, crossplane-provider-azure-alertsmanagement,...
GO-2025-3563 vulnerabilities
Vulnerabilities for packages: git-lfs, flannel-cni-plugin, node-problem-detector-fips, jaeger-operator-fips, caddy-fips, step-kms-plugin, gitleaks, helm-docs, kyverno-policy-reporter-ui-fips, aws-application-networking-k8s-fips, kbld-fips, traefik-fips, opentelemetry-operator-fips,...
GHSA-FM2F-4339-4P2F Flowise: Missing Authorization on Execution Update Endpoint
Flowise Security Audit Report Date: 2026-03-17 Researcher: Dimpal Jadhav [email protected] GitHub: https://github.com/Dimpyj1604 Target: FlowiseAI/Flowise latest main branch Version: [email protected] FINDING 1: Missing Authorization on Execution Update Endpoint Severity: HIGH CVSS 7.5...
TP-Link-TL-WR841ND-Security-Audit
...
Exploit for Signal Handler Race Condition in Sonicwall Sma_6200_Firmware
OpenSSH Security Auditor regreSSHion & 2026 Flaws A lightwe...
SVG `href` attribute bypasses local-reference restriction in Loofah
Summary Loofah's HTML5 sanitizer restricted only the xlink:href attribute on certain SVG elements to local, same-document references. Browsers also accept a plain href attribute as an alternative to the deprecated xlink:href per the SVG 2 spec, but Loofah did not apply the same restriction to it,...
Decidim: CSV census record endpoints improper authorization
Description A participant manager can access and modify the CSV census record admin forms. Technical description The CSV census admin record-management surface under /admin/csvcensus/censuslogs does not enforce admin-only authorization before rendering or mutating Decidim::Verifications::CsvDatum...
PT-2026-60064
Name of the Vulnerable Software and Affected Versions Decidim versions 0.31.1 through 0.31.4 Decidim version 0.32.0.rc1 Description An authorization bypass allows a normal participant to access the demographics questionnaire editor without the required administrator privileges. By directly loadin...
EUVD-2026-41945
FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have a SQL injection vulnerability in the Massmailer module filter functionality. An authenticated administrator can supply crafted filter values when updating a mass email message, causing...