sklad

Sklad 📦 Sklad is a cross-platform snippet manager that lives in your system tray. Store passwords, API keys, code snippets, and any text you copy frequently — encrypted and always one click away. Sklad Demo ✨ Features 🔒 Master Password Protection — Secrets are AES-256 encrypted with Argon2 key...

GitMiner

⚠️ Repositorio Obsoleto — Proyecto Reemplazado Este repositorio ya no se mantiene y ha sido oficialmente obsoleto. El proyecto continúa en desarrollo activo en: https://github.com/unkl4b/Gitminer3 Por favor, migra a GitMiner3 para acceder a las últimas actualizaciones, mejoras y soporte activo. +...

CVE-2023-5043

CVE-2023-5043 Ingress nginx annotation injection causes arbitrary command execution 1. Create Ingress can be created without Service and Pod apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: ingress-exploit annotations: kubernetes.io/ingress.class: "nginx"...

cve-2024-7646

CVE-2024-7646 Descripción Por defecto, nginx.ingress.kubernetes.io/server-snippet está deshabilitado, pero debido a este CVE, nginx.ingress.kubernetes.io/auth-tls-verify-client puede aún insertar fragmentos personalizados, o incluso se puede incluir código lua. Versión corregida controlador...

some-tweak-to-hide-jwt-payload-values

algunos-ajustes-para-ocultar-valores-de-payload-jwt Un puñado de ajustes e ideas para proteger el payload JWT, haciendo inútil intentar decodificarlo al alterar constantemente su valor, asegurando que la salida decodificada sea ininteligible mientras se impone una sobrecarga de rendimiento mínima...

CVE-2024-7646

CVE-2024-7646 PoC CVE-2024-7646 apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: example-ingress annotations: nginx.ingress.kubernetes.io/server-snippet: | addheader X-Pwn-Header "Pwn\r\n HTTP/1.1 200 OK Content-Type: text/html alert'XSS'; --------"; return 200 "PWNed"; spec: rules:...

WordPress_CVE-2020-8417

WordPressCVE-2020-8417 Vulnerabilidad de fragmento de código CSRF CVE-2020-8417 https://www.youtube.com/watch?v=47OBH4N70f0 Síguenos Vulnmachines YouTube Twitter Facebook LinkedIn...

JSshell

JSshell - versión 3.1 JSshell - un reverse shell de JavaScript. Se utiliza para ejecutar código JS de forma remota, explotar XSS ciego, ... Requisitos: Cualquier sistema operativo + Python 2 o Python 3 Novedades en JSshell versión 3.1 Actualizado en la nueva versión de JSshell 3.1: Nuevo comando...

GoogleIndexRetriever

Google index Retriever ¿Alguna vez has encontrado una página web que parece hablar exactamente de lo que necesitas, pero ha sido eliminada? Sí, el caché de Google es la respuesta, pero... ¿Qué pasa si el caché también ha sido eliminado? ¿Qué pasa si el sitio solo está en la página de índice de...

Zimbra-CVE-2017-8802-Hotifx

CVE-2017-8802 This Zimlet fixes CVE-2017-8802 by disabling the "Show Fragment" / Snippet functionality. For further information see: https://wiki.zimbra.com/wiki/ZimbraSecurityAdvisories How to deploy Zimlets https://www.zimbra.com/docs/os/6.0.10/administrationguide/Zimlets.11.4.html...

OESA-2026-4058 xapian-core security update

Xapian is an Open Source Search Engine Library, released under the GPL v2+. It is a highly adaptable toolkit which allows developers to easily add advanced indexing and search facilities to their own applications. It has built-in support for several families of weighting models and also supports ...

Astra Linux – Vulnerability in SQLite3

The ext/fts3/fts3.c file in SQLite before version 3.32.0 contains a use-after-free in the fts3EvalNextRow function, which is related to the snippet feature...

sklad v0.2.3

Sklad 📦 Sklad is a cross-platform snippet manager that lives in your system tray. Store passwords, API keys, code snippets, and any text you copy frequently — encrypted and always one click away. Sklad Demo ✨ Features 🔒 Master Password Protection — Secrets are AES-256 encrypted with Argon2 key...

CVE-2026-58474 whichllm < 0.5.16 Code Injection via run and snippet commands

whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace repository to achieve arbitrary code execution by crafting a malicious GGUF filename containing double quotes or other special characters. The...

CVE-2026-58474

whichllm before version 0.5.16 contains a code injection vulnerability in the run and snippet commands. The script generation function in cli.py interpolates HuggingFace-derived values—including GGUF variant filenames from the Hub API siblings rfilename field—directly into Python source code with...

JLSEC-2026-1387 A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian...

A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...

CVE-2026-77643

A flaw was found in Xapian xapian-core. This cross-site scripting XSS vulnerability is due to incomplete HTML escaping by the Xapian::MSet::snippet function. A remote attacker could exploit this by injecting malicious script, leading to arbitrary code execution in the user's browser context. This...

SUSE CVE-2026-77643

A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...

EUVD-2026-63667

A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...

Linux Distros Unpatched Vulnerability : CVE-2026-77643

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML...