S.P.A.R.K--Standard-Python-ASCII-RPG-Kit-

S.P.A.R.K Versione 1.0 Panoramica S.P.A.R.K è un motore di gioco RPG ASCII retrò 2D leggero. È costruito sulla libreria standard, quindi non è richiesta alcuna installazione PIP. Lo scopo del motore è educativo. Lo considero un'estensione della mia serie di tutorial sui 15 mini giochi Python; fun...

CVE-2024-24576-PoC

CVE-2024-24576 PoC Die APIs Command::arg und Command::args geben in ihrer Dokumentation an, dass die Argumente unverändert an den gestarteten Prozess übergeben werden, unabhängig vom Inhalt der Argumente, und nicht von einer Shell ausgewertet werden. Das bedeutet, dass es sicher sein sollte, nich...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

capslock

Capslock هي أداة واجهة سطر أوامر لتحليل إمكانيات الحزم في لغة Go، تتيح للمستخدمين معرفة العمليات المميزة التي يمكن لحزمة معينة الوصول إليها. يعمل ذلك عن طريق تصنيف إمكانيات حزم Go من خلال تتبع الاستدعاءات المتعدية إلى عمليات مكتبة قياسية مميزة. لقد أظهرت الزيادة الأخيرة في هجمات سلسلة التوريد الت...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

GHSA-22W5-2FXG-VRWX OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers

Impact Unauthenticated denial of service. Summary When OpenTofu performs requests against an untrusted or compromised third-party server or connects to an attacker-controlled server, the initial connection negotiation can produce high CPU usage, leading to possible denial of service. These...

[SECURITY] Fedora 43 Update: python3.14-3.14.7-1.fc43

Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...

[SECURITY] Fedora 44 Update: python3.12-3.12.14-1.fc44

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

MINI-F857-C9JM-X8RP

Bulletin has no description...

MINI-3JQ3-2PVH-HPRR

Bulletin has no description...

MINI-88Q6-52FF-J422

Bulletin has no description...

SUSE CVE-2026-33818

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, azuredisk-csi, blob-csi, cloud-provider-gcp-cloud-controller-manager-fips, blob-csi-fips, argo-cd-fips, emissary, kubernetes-csi-driver-hostpath, yunikorn-k8shim, yunikorn-k8shim-fips, rancher-agent, docker-machine-driver-harvester, azurefile-cs...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: skopeo-fips, slsa-verifier, zarf, kyverno, tkn, witness, kots, portieris, ratify, sigstore-scaffolding, portieris-fips, kyverno-policy-reporter-plugins-kyverno-fips, tekton-chains, flux-source-controller-fips, prometheus-podman-exporter-fips, chainctl, cosign-fips,...

GO-2025-3646 vulnerabilities

Vulnerabilities for packages: k3s...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

CVE-2026-33818

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

Denial of Service (DoS)

Overview std/net/url is a Go standard library package std/net/url Affected versions of this package are vulnerable to Denial of Service DoS. Go Vulnerability Report:Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on...

DEBIAN-CVE-2026-18503

Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff...

Astra Linux – Vulnerability in Firefox and Thunderbird

Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...