CVE-2023-34843

Раскрытие CVE-2023-34843 traggo/server версии 0.3.0 уязвим к обходу каталогов. Шаги для воспроизведения: 1. Настройте traggo/server на вашей конечной точке/сервере. https://traggo.net/install/ 2. Выполните GET-запрос по следующему URL. curl -X GET...

CanoP

CanoP CLI Быстрый автономный инструмент статического анализа, специально разработанный для обнаружения уязвимостей, вносимых AI-ассистентами программирования. CanoP анализирует вашу кодовую базу локально, чтобы выявить риски безопасности в коде, сгенерированном ИИ. Возможности Высокое соотношение...

bom-view

Vue BOM Une application web statique simple pour afficher les dépendances logicielles à partir de fichiers de nomenclature logicielle SBOM. Étant un site statique, elle peut être facilement hébergée sur n'importe quel service d'hébergement web statique, comme GitLab Pages, GitHub Pages ou Netlify...

CVE-2025-59059-Misattributed-RCE-in-Apache-Ranger-Static-Analysis-Correction

CVE-2025-59059: RCE в Apache Ranger с ошибочной атрибуцией — исправление CVE: CVE-2025-59059 Затронутые версии: Apache Ranger «Уязвимость удалённого выполнения кода в NashornScriptEngineCreator обнаружена в Apache Ranger версиях = 2.7.0». Это неверно или как минимум вводит в заблуждение...

CVE-2024-23334-PoC

CVE‑2024‑23334 Path Traversal - PoC J'ai créé ce script pour automatiser l'exploitation de CVE‑2024‑23334 sur la machine Hack The Box Chemistry. Cette vulnérabilité affecte les versions d'aiohttp ≥ 1.0.5 et 3.9.2 lorsque l'application est configurée pour servir des fichiers statiques avec...

AlmaLinux 9.2 [TuxCare] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools (ALMALINUX9.2:CLSA-2025:1762868654)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762868654 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CentOS Linux 8.5 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1790252568)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1790252568 advisory. - Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts functio...

CentOS Linux 7.9 [CIQ] Security Update: expat / expat-debuginfo / expat-devel / expat-static (ciqsa-2026_0659)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260659 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2016-9063. Tenable has extracted the preceding...

CentOS Linux 7 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (CENTOS7:CLSA-2023:1696877712)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2023:1696877712 advisory. - Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function. CVE-2022-23990 - In libexpat through 2.4.9, there is...

CentOS Linux 7 [TuxCare] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools (CENTOS7:CLSA-2025:1762544201)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1762544201 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

CentOS Linux 8.4 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1786009371)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1786009371 advisory. - libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy...

AlmaLinux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static (ALMALINUX9.6:CLSA-2025:1765987202)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1765987202 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static (ALMALINUX9.6:CLSA-2025:1765987202)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1765987202 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CentOS Linux 8.5 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1767799681)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1767799681 advisory. - expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the...

CentOS Linux 8.4 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-static / python3-libxml2 Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1752654760)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1752654760 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 7 [TuxCare] Security Update: glibc / glibc-common / glibc-devel / glibc-headers / glibc-static / etc (CENTOS7:CLSA-2025:1757700003)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1757700003 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

CentOS Linux 7 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-fam / glib2-static / etc (CENTOS7:CLSA-2025:1758709327)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1758709327 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

AlmaLinux 9.2 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-static / python3-libxml2 Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1752747463)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752747463 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Rocky Linux 9.6 [CIQ] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools (ciqsa-2026_1334)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261334 advisory. This advisory aggregates security fixes for the libtiff SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2023-52356. Tenable has extracted the preceding description...

CentOS Linux 7 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (CENTOS7:CLSA-2026:1776243051)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1776243051 advisory. - In Expat aka libexpat before 2.4.5, an attacker can trigger stack exhaustion in buildmodel via a large nesting depth in the DTD elemen...