534 matches found
detectree
Detectree Detectree is a data visualisation tool for blue teams. It provides a graphical representation of detection data, which allows an analyst generate almost instant opinions about the nature of the underlying activity and to understand complex relationships between the data points...
Striker
Striker C2 Striker is a simple Command and Control C2 program. Disclaimer This project is under active development. Most of the features are experimental, with more to come. Expect breaking changes. Features A Agents Native agents for linux and windows hosts. Self-contained, minimal python agent...
CVE-2026-126362
Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...
CVE-2026-126362: withastro astro: Astro is a web framework for content-driven websites
Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...
Astro: Reflected XSS via unescaped slot names in @astrojs/svelte
Summary The @astrojs/svelte renderer wraps slotted content passed to Svelte components in an element, and writes the slot name into its name attribute without HTML escaping. A slot name containing " could end the attribute and inject arbitrary HTML into the page. For example, a page that takes a...
GHSA-F4J9-CRRJ-867Q Astro: Reflected XSS via unescaped slot names in @astrojs/svelte
Summary The @astrojs/svelte renderer wraps slotted content passed to Svelte components in an element, and writes the slot name into its name attribute without HTML escaping. A slot name containing " could end the attribute and inject arbitrary HTML into the page. For example, a page that takes a...
EUVD-2026-124743
Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...
CVE-2026-126362 Astro: Reflected XSS via unescaped slot names in @astrojs/svelte
Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...
CVE-2026-126362
The @astrojs/svelte renderer (versions >= 5.7.3 and <= 9.1.1 ) is vulnerable to Reflected Cross-Site Scripting (XSS) because it inserts named slots into the name attribute of an wrapper without proper HTML escaping. An attacker can provide a request-controlled input (e.g., via a query para...
CVE-2026-126362 Astro: Reflected XSS via unescaped slot names in @astrojs/svelte
Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...
CVE-2026-126362
Astro is a web framework for content-driven websites. From 5.7.3 until 9.1.2, the @astrojs/svelte renderer inserted a named slot into the quoted name attribute of an astro-slot wrapper without HTML escaping. Request-controlled slot names containing a quote could terminate the attribute and inject...
PT-2026-146085
Summary The @astrojs/svelte renderer wraps slotted content passed to Svelte components in an element, and writes the slot name into its name attribute without HTML escaping. A slot name containing " could end the attribute and inject arbitrary HTML into the page. For example, a page that takes a...
CLSA-2026-1792462295 TuxCare security update for @storybook/svelte-webpack5 (1 CVE)
TuxCare rebuilt @storybook/svelte-webpack5 to address 1 CVE. Fixed in 7.0.7-tuxcare.1...
CLSA-2026-1792458833 TuxCare security update for @storybook/preset-svelte-webpack (1 CVE)
TuxCare rebuilt @storybook/preset-svelte-webpack to address 1 CVE. Fixed in 7.0.7-tuxcare.1...
PT-2026-133318
TuxCare rebuilt @storybook/preset-svelte-webpack to address 1 CVE. Fixed in 7.0.7-tuxcare.1...
PT-2026-133334
TuxCare rebuilt @storybook/svelte-webpack5 to address 1 CVE. Fixed in 7.0.7-tuxcare.1...
CLSA-2026-1792270009 TuxCare security update for @storybook/svelte-vite (1 CVE)
TuxCare rebuilt @storybook/svelte-vite to address 1 CVE. Fixed in 7.0.7-tuxcare.1...
PT-2026-127325
TuxCare rebuilt @storybook/svelte-vite to address 1 CVE. Fixed in 7.0.7-tuxcare.1...