bash-cve-2014-6271-fixes

CVE-2014-6271 patches for bash The original mailing list post only lets you fetch the patches over unauthenticated HTTP. Sigh I've downloaded these over HTTP and put them into a git repository that you can fetch over HTTPS and check independently. I have not checked whether these files are...

proxify

Features • Installation • Usage • Running Proxify • Installing SSL Certificate • Applications of Proxify • Join Discord Swiss Army Knife Proxy for rapid deployments. Supports multiple operations such as request/response dump, filtering and manipulation via DSL language, upstream HTTP/Socks5 proxy...

reactor

Reactor Reactor started as a fork of the open source project ElastAlert. The maintainer of this project should keep close tabs on the changes to ElastAlert excluding their additional alerters and ensure that any relevant bugs fixes be patched in and any useful feature ported in. Reactor is an...

wssip

This repository does not have a README...

EUVD-2026-125807

IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 is vulnerable to improper credential handling because the X-Upstream-Authorization request header can override the gateway-managed upstream credential for OAuth authorizationcode and clientcredentials, bearer and basic authenticated gateways, which...

PR-DNSd

PR-DNSd Passive-Recursive DNS daemon. What does it do Quickstart go get github.com/korc/PR-DNSd sudo setcap capnetbindservice,capsyschroot=ep go/bin/PR-DNSd go/bin/PR-DNSd -upstream 9.9.9.9:53 -listen 127.0.0.1:53 echo nameserver 127.0.0.1 | sudo tee /etc/resolv.conf dig google.com dig -x $dig...

node-prompt-here

node-prompt-here This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately vulnerable HOT. EXPOSURE will report a HOT verdict against it. Tracked CVE: CVE-2020-7602 no upstream fix; mitigated only via a compensating control. A demo PR opened by EXPOSURE...

CVE-2026-110279

The IBM ContextForge MCP Gateway versions v1.0.0 through v1.1.0 are vulnerable to improper credential handling (CWE-287). The root cause is that the X-Upstream-Authorization request header is automatically renamed to Authorization for upstream requests, allowing an authenticated user to override ...

CVE-2026-124716

Incorrect Authorization vulnerability in Apache APISIX. An authenticated user who holds any one of a route's required permissions or scopes can reach the protected upstream without the others, including HTTP methods the authorization server denied. This issue affects Apache APISIX: from 1.4.0...

CVE-2026-124680

Interpretation Conflict, resulting in Incorrect Authorization vulnerability in Apache APISIX. An unauthenticated client can reach upstream paths protected by a route-level auth plugin when a route without auth exists on the same upstream and the upstream does not collapse encoded dot segments. Th...

CVE-2026-124716 Apache APISIX: authz-keycloak authorization scope mismatch

Incorrect Authorization vulnerability in Apache APISIX. An authenticated user who holds any one of a route's required permissions or scopes can reach the protected upstream without the others, including HTTP methods the authorization server denied. This issue affects Apache APISIX: from 1.4.0...

CVE-2026-124716

Apache APISIX versions 1.4.0 through 3.19.0 are impacted by an Incorrect Authorization vulnerability. An authenticated user possessing only one of the required permissions or scopes for a route can successfully access the protected upstream. This allows the user to bypass remaining security requi...

EUVD-2026-125681

Incorrect Authorization vulnerability in Apache APISIX. An authenticated user who holds any one of a route's required permissions or scopes can reach the protected upstream without the others, including HTTP methods the authorization server denied. This issue affects Apache APISIX: from 1.4.0...

CVE-2026-124680

Apache APISIX versions 0.9 through 3.19.0 are vulnerable to an Interpretation Conflict leading to Incorrect Authorization . An unauthenticated client can bypass route-level auth plugins by accessing upstream paths when a route without authentication exists on the same upstream, provided the upstr...

EUVD-2026-125678

Interpretation Conflict, resulting in Incorrect Authorization vulnerability in Apache APISIX. An unauthenticated client can reach upstream paths protected by a route-level auth plugin when a route without auth exists on the same upstream and the upstream does not collapse encoded dot segments. Th...

invokeai

invokeai This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately vulnerable HOT. EXPOSURE will report a HOT verdict against it. Tracked CVE: CVE-2024-10821 no upstream fix; mitigated only via a compensating control. A demo PR opened by EXPOSURE swaps...

hostap

This is not the development location for hostap.git. See the upstream project at https://w1.fi/...

ollama

ollama This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately vulnerable HOT. EXPOSURE will report a HOT verdict against it. Tracked CVE: CVE-2024-12886 no upstream fix; mitigated only via a compensating control. A demo PR opened by EXPOSURE swaps th...

cve-2024-3094

🛡️ Cybersecurity Project: Analyzing the XZ Backdoor in liblzma 📄 Overview This project analyzes the high-profile backdoor discovered in xz-utils liblzma , affecting versions 5.6.0 and 5.6.1. The malicious code introduced into the upstream build system targeted SSH authentication by modifying how...

http-server-node

http-server-node This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately vulnerable HOT. EXPOSURE will report a HOT verdict against it. Tracked CVE: CVE-2021-23797 no upstream fix; mitigated only via a compensating control. A demo PR opened by EXPOSUR...