3408 matches found
hget
hget This project is my personal project to learn golang to build something useful. Build Status : Install root@kitploit: $ go get -d github.com/huydx/hget $ cd $GOPATH/src/github.com/huydx/hget $ make clean install Binary file will be built at ./bin/hget, you can copy to /usr/bin or /usr/local/b...
CVE-2026-56135
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...
CVE-2026-48711
SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as -oProxyCommand=CMD:/path and findbasepath removes the brackets, leaving a host value that begins with - and is passed directly to ssh as a command-line...
CVE-2026-70456
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is...
CVE-2026-53785
rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by crafting relative paths with symlink components in --relative mode. The makepath function follows symlinks pointing outside the destination...
GHSA-WVPP-8HX9-P66J vulnerabilities
Vulnerabilities for packages: opal, checkov, awx...
GHSA-4GMW-GG2M-W46P vulnerabilities
Vulnerabilities for packages: checkov...
GHSA-HH9P-6WH2-4MFC vulnerabilities
Vulnerabilities for packages: checkov...
CVE-2026-45021 vulnerabilities
Vulnerabilities for packages: kuma...
GHSA-RHH3-JPG6-66XH vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: zipkin, keycloak, dependency-track, apicurio-registry, infinispan...
CVE-2026-56847 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-12061 vulnerabilities
Vulnerabilities for packages: open-webui, nemo...
CVE-2026-12075 vulnerabilities
Vulnerabilities for packages: open-webui, nemo...
CVE-2026-68480
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection An attacker injecting interrupts while the Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return sequence, potentially leading to data...
CVE-2025-49506
APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...
CVE-2026-64591
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid WARNING in sva unbind path The Intel IOMMU driver allows SVA on devices even if they do not support PCI/PRI. Commit 39c20c4e83b9 "iommu/vt-d: Only handle IOPF for SVA when PRI is supported" modified the SVA bind...
GHSA-RW9V-FQFW-2QXC vulnerabilities
Vulnerabilities for packages: chromium...