GHSA-VP2X-QP44-57V7 vulnerabilities

Vulnerabilities for packages: open-webui...

CLSA-2026-1788553383 TuxCare security update for log4js (34 CVEs)

TuxCare rebuilt log4js to address 34 CVEs. Fixed in 3.0.3-tuxcare.1...

CVE-2026-55513

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.3.0 to before version 0.5.0, the nebula-mgmt Web UI host-creation path ignores both the server-wide enrollmenttokenttl security setting and per-network networkconfig.enrollmenttokenttl overrides. API host creatio...

CGA-VP64-Q5J7-FRJR

Bulletin has no description...

CGA-P93P-57F5-GCQW

Bulletin has no description...

CGA-84XF-FGJH-6JPR

Bulletin has no description...

CGA-34JG-6G2F-W52M

Bulletin has no description...

AI_Security_Top

🛡️ AI-Security-Knowledge-Base 这是一个系统性的 AI 安全研究项目，涵盖了从基础机器学习算法理论到前沿大模型注入攻击、AI 免杀对抗及深度伪造（Deepfake）的完整知识体系。 🏗️ 知识体系架构 本库内容分为四大板块：AI 核心算法 、威胁建模 、红队进攻 及蓝队防御 。 🧬 一：AI 基础与理论 深入理解模型背后的数学逻辑，是寻找算法漏洞的前提。 AI 概论 - 人工智能发展史、分支及核心概念。 深度学习架构 - 从 CNN/RNN 到 Transformer 架构的深度解构。 核心机器学习算法 -...

training-application-security

Free Secure Coding & Application Security Training — Open Source SCORM Exercises 40 free, open-source secure coding exercises that teach web application security the way developers learn — by exploiting real vulnerabilities like SQL injection, cross-site scripting XSS, and broken access control,...

CVE-2026-69836

cve-id Donate...

Dorset_SmartLock_Vulnerability

DorsetSmartLockVulnerability Este repositorio contiene uno de los problemas de seguridad identificados en Dorset Smart Lock y CVE-2025-25650 fue sugerido por MITRE. Por favor, revise el PDF adjunto para obtener más información sobre el problema. Descubridor : Abhijith Boppe...

CGA-F88V-V3FJ-3JGV

Bulletin has no description...

CGA-FM87-Q976-7R55

Bulletin has no description...

SAFE

SAFE SAFE performs controlled, repository-aware security assessment of Semgrep and Trivy findings in research artifacts. It supports two independent classification tasks: direct binary prediction SECURITYRELEVANT or NONSECURITY and the detailed multiclass contextual taxonomy three labels — see...

CLSA-2026-1788550289 TuxCare security update for 40 packages (4 CVEs)

TuxCare rebuilt 40 packages to address 4 CVEs. Fixed in 10.1.42-tuxcare.9...

CVE-2026-57163

creationtimestamp| type| source ---|---|--- 2026-09-04 18:50:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cuypm3guywh4f 2026-09-06 07:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mutgsgkdef2j...

Config-Extractors

Malwares Decryptors...

cheatsheets

...

EUVD-2026-71683

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an improper access control vulnerability in the DirectIo64.sys kernel driver that allows unprivileged local users to perform privileged hardware operations by opening...

CVE-2026-80112

PassMark PerformanceTest , BurnInTest , and OSForensics each ship a vulnerable DirectIo64.sys kernel driver. The root cause is an improper access control flaw: the device object is created without a security descriptor, so Windows applies a permissive default ACL . This allows unprivileged local ...