learnjavabug

Questo progetto è destinato esclusivamente alla ricerca sulla sicurezza; è vietato utilizzarlo per lanciare attacchi illegali. Le conseguenze derivanti dall'uso sono a carico dell'utente. Questo è un progetto personale per riprodurre e divulgare alcune vulnerabilità interessanti o di impatto...

hashview

Hashview v0.8.2 Hashview è uno strumento per professionisti della sicurezza volto a organizzare e automatizzare i compiti ripetitivi legati al cracking delle password. È suddiviso in due componenti: il server Hashview e l'agente Hashview. Il server Hashview è un'applicazione web che gestisce uno ...

CVE-2026-39983

Riferimenti https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-chqc-8p9q-pq6q https://github.com/patrickjuchli/basic-ftp/commit/2ecc8e2c500c5234115f06fd1dbde1aa03d70f4b https://github.com/patrickjuchli/basic-ftp/releases/tag/v5.2.1...

EUVD-2026-66677

Applications using AesBytesEncryptor with the two-argument constructor or when passing a null IV generator and CBC as the encryption mode encrypt data with AES/CBC using a null all-zero initialization vector. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Sprin...

CVE-2026-47842

Spring Security 's AesBytesEncryptor deterministically encrypts data with AES/CBC when the two-argument constructor is used or a null IV generator is passed with CBC mode, resulting in a null (all-zero) initialization vector . This causes identical plaintexts to always produce identical ciphertex...

CVE-2026-47842 Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext Correlation

Applications using AesBytesEncryptor with the two-argument constructor or when passing a null IV generator and CBC as the encryption mode encrypt data with AES/CBC using a null all-zero initialization vector. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Sprin...

claude-code-devcontainer

Claude Code in un devcontainer Un ambiente di sviluppo sandbox per eseguire Claude Code con bypassPermissions abilitato in sicurezza. Realizzato presso Trail of Bits per flussi di lavoro di audit di sicurezza. Perché usarlo? Eseguire Claude con bypassPermissions sulla tua macchina host è rischios...

CVE-2026-39371

Riferimenti https://nvd.nist.gov/vuln/detail/CVE-2026-39371 https://github.com/redwoodjs/sdk/security/advisories/GHSA-x8rx-789c-2pxq...

trivy-action

Trivy Action GitHub Action for Trivy Table of Contents Usage Scan CI Pipeline Scan CI Pipeline w/ Trivy Config Cache Trivy Setup Scanning a Tarball Using Trivy with templates Using Trivy with GitHub Code Scanning...

CVE-2026-47841

An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

go-toolset:rhel8 security, bug fix, and enhancement update

An update is available for golang, module.golang, module.delve, delve. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset provides the Go programming...

sentrymcp

sentrymcp Um scanner de segurança estático + runtime para servidores MCP Model Context Protocol. Entre janeiro e abril de 2026, pesquisadores de segurança divulgaram mais de 40 CVEs em implementações de servidores MCP, e uma varredura de 2026 da Endor Labs em servidores MCP públicos encontrou 82%...

zizmor

🌈 zizmor zizmor è uno strumento di analisi statica per sistemi CI/CD. Può trovare e correggere problemi di sicurezza nelle configurazioni CI/CD più comuni, inclusi GitHub Actions, Dependabot e pre-commit. Alcune delle cose che zizmor individua:...

CVE-2026-47841 WebAuthn User Verification Bypass via Session Serialization

An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

EUVD-2026-66639

An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

CVE-2026-47841

Spring Security 's WebAuthn support is vulnerable to a user verification bypass when the application uses a distributed HTTP session store . The root cause is tied to session serialization , which can allow an attacker to bypass the user verification step of a WebAuthn authenticator. Affected ver...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

CVE-2026-79190

A flaw was found in Extensions in Google Chrome. A remote attacker, after compromising the renderer process, could exploit incorrect authorization to bypass the web origin policy via a crafted HTML page. This could allow the attacker to circumvent security restrictions, potentially leading to...

CVE-2026-54569

creationtimestamp| type| source ---|---|--- 2026-08-26 16:35:06+00:00| published-proof-of-concept| https://github.com/senaite/senaite.core/security/advisories/GHSA-jrw6-7x4q-w25j 2026-08-26 18:07:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtywgakaxb2t 2026-08-26...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.44 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.44 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...