13108 matches found
guac
GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...
threat-modeling-playbook
Introduction Nous visons à améliorer la sécurité des produits et des logiciels avec notre nouveau manuel de modélisation des menaces. Nous considérons la modélisation des menaces comme une activité fondamentale pour améliorer votre assurance logicielle. Nous sommes convaincus qu'une bonne pratiqu...
rbndr
rbndr Simple DNS Rebinding Service rbndr is a very simple, non-conforming, name server for testing software against DNS rebinding vulnerabilities. The server responds to queries by randomly selecting one of the addresses specified in the hostname and returning it as the answer with a very low ttl...
DirtyPipe-CVE-2022-0847
DirtyPipe-CVE-2022-0847 Ce dépôt est développé pour analyser et comprendre l'exploit DirtyPipe CVE-2022-0847 pour mon devoir de système logiciel sécurisé de 3ème année 1ère année. Article que j'ai écrit l'article sera disponible après la fin de mon semestre...
Gitea 1.1.0 - 1.12.5 - Remote Code Execution
Gitea 1.1.0 through 1.12.5 is susceptible to authenticated remote code execution, via the git hook functionality, in customer environments where the documentation is not understood e.g., one viewpoint is that the dangerousness of this feature should be documented immediately above the...
Dahua IPC/VTH/VTO - Authentication Bypass
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. id: CVE-2021-33045 info: name: Dahua IPC/VTH/VTO - Authentication Bypass author: phantomowl severity:...
MOVEit Transfer - Remote Code Execution
In Progress MOVEit Transfer before 2021.0.6 13.0.6, 2021.1.4 13.1.4, 2022.0.4 14.0.4, 2022.1.5 14.1.5, and 2023.0.1 15.0.1, a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database...
GHSA-Q496-Q274-JGH9 vulnerabilities
Vulnerabilities for packages: exim...
MINI-6VGX-C24M-5JJG
Bulletin has no description...
MINI-WVG2-F9XQ-2JP6
Bulletin has no description...
CVE-2026-19489
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21...
The vulnerability of the Adobe Lightroom Classic graphic editor lies in its authentication procedures’ flaws, which allow a hacker to execute arbitrary code.
The vulnerability of Adobe Lightroom Classic’s graphic editor is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code...
CVE-2026-62462
Oracle E-Business Suite Work in Process (component: Internal Operations) versions 12.2.3-12.2.15 is vulnerable. A low-privileged attacker with network access via HTTP can exploit it for full CIA impact (CVSS 8.8 HIGH). Oracle's August 2026 CPU advisory is referenced for patch details; no exploit ...
BELL-CVE-2026-74361
Bulletin has no description...
BELL-CVE-2026-74373
Bulletin has no description...
GHSA-FHGH-WQ4Q-R37X
creationtimestamp| type| source ---|---|--- 2026-08-17 20:32:43+00:00| seen| https://gist.github.com/alon710/714a45d6d9776f210b84a676518696fb...
MINI-35F4-968R-PGMF
Bulletin has no description...
MINI-PJ28-7G45-5439
Bulletin has no description...