13092 matches found
DirtyPipe-CVE-2022-0847
DirtyPipe-CVE-2022-0847 这个仓库是为了分析和理解DirtyPipe漏洞CVE-2022-0847而开发的，用于我的第三学年第一学期的安全软件系统作业。 我写的论文 论文将在学期结束后可用。...
threat-modeling-playbook
はじめに 私たちは、新しい脅威モデリングプレイブックを通じて、製品とソフトウェアのセキュリティを向上させることを目指しています。私たちは、脅威モデリングをソフトウェア保証を向上させるための基盤となる活動と考えています。優れた脅威モデリングの実践が、納品された製品のセキュリティ問題を測定可能な形で減少させると確信しています。 オープンソースの強い信奉者であり、OWASPの積極的なコラボレーターとして、またToreonの顧客を超えて影響を広げるために、この脅威モデリングプレイブックをコミュニティに寄贈します。...
rbndr
rbndr Simple DNS Rebinding Service rbndr is a very simple, non-conforming, name server for testing software against DNS rebinding vulnerabilities. The server responds to queries by randomly selecting one of the addresses specified in the hostname and returning it as the answer with a very low ttl...
guac
GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...
Gitea 1.1.0 - 1.12.5 - Remote Code Execution
Gitea 1.1.0 through 1.12.5 is susceptible to authenticated remote code execution, via the git hook functionality, in customer environments where the documentation is not understood e.g., one viewpoint is that the dangerousness of this feature should be documented immediately above the...
MOVEit Transfer - Remote Code Execution
In Progress MOVEit Transfer before 2021.0.6 13.0.6, 2021.1.4 13.1.4, 2022.0.4 14.0.4, 2022.1.5 14.1.5, and 2023.0.1 15.0.1, a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database...
GHSA-Q496-Q274-JGH9 vulnerabilities
Vulnerabilities for packages: exim...
MINI-6VGX-C24M-5JJG
Bulletin has no description...
MINI-WVG2-F9XQ-2JP6
Bulletin has no description...
CVE-2026-19489
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21...
Dahua IPC/VTH/VTO - Authentication Bypass
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. id: CVE-2021-33045 info: name: Dahua IPC/VTH/VTO - Authentication Bypass author: phantomowl severity:...
CVE-2026-62462
Oracle E-Business Suite Work in Process (component: Internal Operations) versions 12.2.3-12.2.15 is vulnerable. A low-privileged attacker with network access via HTTP can exploit it for full CIA impact (CVSS 8.8 HIGH). Oracle's August 2026 CPU advisory is referenced for patch details; no exploit ...
GHSA-FHGH-WQ4Q-R37X
creationtimestamp| type| source ---|---|--- 2026-08-17 20:32:43+00:00| seen| https://gist.github.com/alon710/714a45d6d9776f210b84a676518696fb...
MINI-35F4-968R-PGMF
Bulletin has no description...
MINI-PJ28-7G45-5439
Bulletin has no description...
MINI-HW33-HVF2-6PGJ
Bulletin has no description...
MINI-PGP2-85MF-4WM8
Bulletin has no description...
MINI-JHH7-GR22-9MJJ
Bulletin has no description...