201 matches found
CloakBin
CloakBin ゼロ知識暗号化ペーストビン データはブラウザを離れる前に暗号化されます。私たちは読めません。誰も読めません。 ライブデモ • バグ報告 • 機能リクエスト ゼロ知識とは？ 従来のペーストビンはデータを平文で保存します。サーバー管理者、ハッカー、データベースにアクセスできる誰でも、あなたが共有したすべてを読むことができます。 CloakBin は違います。 root@kitploit: ┌─────────────────────────────────────────────────────────────────┐ │ ゼロ知識フロー │...
kestrel
Falco의 커널 수준 가시성에, 커널 네이티브 도구들이 제공하지 않는 라이브 UI를 더했습니다. 빠른 시작 · 스펙 · 뷰 · 로드맵 Kestrel은 eBPF 에이전트로 커널 이벤트프로세스 실행, 파일 접근, 네트워크 연결를 추적하고, 이를 실시간 활동 피드, 프로세스 트리, 호스트 개요, 규칙 기반 알림 엔진을 렌더링하는 SvelteKit 웹 앱으로 스트리밍합니다. 전체 제품/아키텍처 문서는 SPEC.md, 운영 가이드는 AGENTS.md를 참조하세요. 왜 필요한가 eBPF 생태계는 백엔드/CLI/Kubernetes 오퍼레...
CVE-2026-82261
SvelteKit @sveltejs/kit versions =2.49.0 and =2.52.1 with experimental remote functions and form enabled contain a CPU exhaustion vulnerability in form deserialization. An attacker can send malformed form data to cause the server to become unresponsive while processing the request, resulting in...
CVE-2026-82260
SvelteKit @sveltejs/kit versions =2.49.0 and =2.52.1 with experimental remote functions experimental.remoteFunctions and form enabled contain a memory exhaustion vulnerability in remote form deserialization. Malformed form data can cause excessive memory allocation, crashing the server process an...
CVE-2026-82256
SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process...
CVE-2026-82257
SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fields that accept arbitrary user-controlled path names. Attackers can manipulate the deletion path to remove methods on the prototype, potentially disabling application...
CVE-2026-82258
SvelteKit versions from 2.38.0 before 2.60.1 contain a race condition in query.batch that allows concurrent requests from different users to merge under a single request context. Attackers can exploit specific timing conditions to access sensitive data from other users' concurrent requests...
CVE-2026-82259
SvelteKit versions from 2.49.0 through 2.53.2 fixed in 2.53.3 contain a deserialization expansion issue in the experimental form remote function. When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files.length or...
CVE-2026-82261 SvelteKit before 2.52.2 CPU Exhaustion via Remote Form Deserialization
SvelteKit @sveltejs/kit versions =2.49.0 and =2.52.1 with experimental remote functions and form enabled contain a CPU exhaustion vulnerability in form deserialization. An attacker can send malformed form data to cause the server to become unresponsive while processing the request, resulting in...
EUVD-2026-67587
SvelteKit @sveltejs/kit versions =2.49.0 and =2.52.1 with experimental remote functions and form enabled contain a CPU exhaustion vulnerability in form deserialization. An attacker can send malformed form data to cause the server to become unresponsive while processing the request, resulting in...
CVE-2026-82261
SvelteKit (@sveltejs/kit) versions >=2.49.0 and
EUVD-2026-67586
SvelteKit @sveltejs/kit versions =2.49.0 and =2.52.1 with experimental remote functions experimental.remoteFunctions and form enabled contain a memory exhaustion vulnerability in remote form deserialization. Malformed form data can cause excessive memory allocation, crashing the server process an...
CVE-2026-82260 SvelteKit before 2.52.2 Memory Exhaustion via Remote Form Deserialization
SvelteKit @sveltejs/kit versions =2.49.0 and =2.52.1 with experimental remote functions experimental.remoteFunctions and form enabled contain a memory exhaustion vulnerability in remote form deserialization. Malformed form data can cause excessive memory allocation, crashing the server process an...
CVE-2026-82260
SvelteKit (@sveltejs/kit) versions 2.49.0 through 2.52.1 with the experimental remoteFunctions and form features enabled are vulnerable to memory exhaustion in remote form deserialization. Malformed form data triggers excessive memory allocation, crashing the server process and causing a denial o...
CVE-2026-82259 SvelteKit 2.49.0 before 2.53.3 Denial of Service via form
SvelteKit versions from 2.49.0 through 2.53.2 fixed in 2.53.3 contain a deserialization expansion issue in the experimental form remote function. When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files.length or...
CVE-2026-82259
SvelteKit versions 2.49.0 through 2.53.2 (fixed in 2.53.3 ) are affected by a deserialization expansion vulnerability in the experimental form remote function . When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files....
EUVD-2026-67585
SvelteKit versions from 2.49.0 through 2.53.2 fixed in 2.53.3 contain a deserialization expansion issue in the experimental form remote function. When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files.length or...
EUVD-2026-67584
SvelteKit versions from 2.38.0 before 2.60.1 contain a race condition in query.batch that allows concurrent requests from different users to merge under a single request context. Attackers can exploit specific timing conditions to access sensitive data from other users' concurrent requests...
CVE-2026-82258 SvelteKit 2.38.0 before 2.60.1 Cross-User Data Disclosure via query.batch
SvelteKit versions from 2.38.0 before 2.60.1 contain a race condition in query.batch that allows concurrent requests from different users to merge under a single request context. Attackers can exploit specific timing conditions to access sensitive data from other users' concurrent requests...
CVE-2026-82258 SvelteKit 2.38.0 before 2.60.1 Cross-User Data Disclosure via query.batch
SvelteKit versions from 2.38.0 before 2.60.1 contain a race condition in query.batch that allows concurrent requests from different users to merge under a single request context. Attackers can exploit specific timing conditions to access sensitive data from other users' concurrent requests...