654 matches found
DotGit
DotGit An extension for checking if .git is exposed in visited websites Features Check if a .git/.svn/.hg folder exists for each site you visit Check if a .env file exists for each site you visit Check if a .DSStore file exists for each site you visit Check if the site is open source github/gitla...
composer-CVE-2026-40261-CVE-2026-40176-PoC
!CAUTION THIS REPOSITORY CONTAINS PROOF-OF-CONCEPT CODE FOR VULNERABILITIES CVE-2026-40261 AND CVE-2026-40176 IN COMPOSER. !CAUTION THE CODE IS INTENDED FOR EDUCATIONAL AND TESTING PURPOSES ONLY. !CAUTION DO NOT USE THIS CODE IN PRODUCTION ENVIRONMENTS OR AGAINST SYSTEMS WITHOUT PROPER...
PT-2026-117059
In the Linux kernel, the following vulnerability has been resolved: vc screen: reload vc pointer before if ret in vcs write to avoid UAF The reload of 'vc' added by commit 8fb9ea65c9d1 "vc screen: reload load of struct vc data pointer in vcs write to avoid UAF" sits after the 'if ret' block, so t...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: tty: vt: initialize unicode screen buffer The syzbot report indicates a kernel vulnerability at the vcsread function 1. The buffer can be read immediately after the resizing operation. Initialize the buffer using kzalloc...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: vcscreen: The load of the struct vcdata pointer in vcsread was moved to avoid a Use-After-Free UAF condition. After a call to consoleunlock in vcsread, the struct vcdata structure can be freed using vcdeallocate. Therefore, the...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15
In the Linux kernel, the following vulnerability has been resolved: vcscreen: The load of the struct vcdata pointer in vcswrite was reloaded to avoid a Use-After-Free UAF condition. After a call to consoleunlock in vcswrite, the struct vcdata structure can be freed using vcportdestruct. Therefore...
Astra Linux – Vulnerability in Composer
Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26, and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::generateP4Command method. This method constructs shell commands by interpolating user-supplied Perforce connection parameters port, user, client...
CVE-2026-103497
In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...
CVE-2026-103489
In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible...
CVE-2026-103497
In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...
CVE-2026-103497
The JetBrains YouTrack application is affected by a Server-Side Request Forgery (sSRF) vulnerability in versions prior to 2026.2.19422 . The flaw exists within the GitHub VCS integration , potentially allowing an attacker to make requests from the server. No specific exploit details or proof-of-c...
CVE-2026-103497
In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...
EUVD-2026-90588
In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...
CVE-2026-103489
In JetBrains YouTrack versions prior to 2026.2.19422 , an HTML injection vulnerability exists within VCS command failure notifications . This flaw allows for the improper neutralization of input during web page generation (CWE-79). While the vulnerability is present, no specific exploit details o...
CVE-2026-103489
In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible...
CVE-2026-103489
In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible...
EUVD-2026-90580
In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible...
Rocky Linux 9 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (crlsa-2025_13935)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202513935 advisory. cmd/go: Go VCS Command Execution Vulnerability CVE-2025-4674 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note th...
CVE-2026-103489: Improper Neutralization of Input During Web Page Generation
In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible...