907 matches found
lava
LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...
nzyme
Nzyme Learn more at https://www.nzyme.org/. Version 2.0.0 of Nzyme is currently in development and alpha releases are available. Contributing There are many ways to contribute and all community interaction is absolutely welcome: Open an issue for any kind of bug you think you have found. Open an...
bettercap
Este repositorio está DEPRECADO, el desarrollo de bettercapse ha movido aquí y cada versión 2.0.0 se considera LEGADO y NO SOPORTADO...
CVE-2026-82669 klaussilveira GitList XML Parsing CommandLine.php SimpleXMLElement denial of service
A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function SimpleXMLElement of the file src/SCM/System/Git/CommandLine.php of the component XML Parsing. Performing a manipulation results in denial of service. The attack is possible to be carried out...
CVE-2026-77781
Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys. The FETCH, EXISTS and DELETE methods throw an exception when on malformed regular expressions. Each method falls back to a regex match when the key is not already stored in the hash, compiling the...
CVE-2026-63038
Apache InLong versions 2.0.0 through 2.3.x are vulnerable to an SQL Injection flaw caused by the improper neutralization of special elements in SQL commands. An attacker can inject arbitrary SQL code by exploiting string concatenation via the dbName, tableName, schemaName, and username parameters...
CVE-2026-33437 Stirling PDF: Stored XSS in Info Summary
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with...
CVE-2026-33437 Stirling PDF: Stored XSS in Info Summary
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with...
CVE-2026-33437
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with...
PT-2026-76739
Name of the Vulnerable Software and Affected Versions Stirling-PDF versions prior to 2.0.0 Description The Get Info workflow in the file app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element using innerHTM...
EUVD-2026-54642
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's /$result endpoint allows a caller who can obtain any valid async export job ID to supply file parameter values containing path...
CVE-2026-47659
Pathling Server prior to 2.0.0 exposes a path traversal vulnerability in the /$result endpoint. An attacker who can obtain a valid async export job ID can supply file parameters containing traversal sequences and the handler only validates the job ID, not the file path, allowing reads across the ...
PT-2026-69132
Name of the Vulnerable Software and Affected Versions Pathling Server versions prior to 2.0.0 Description The /$result endpoint allows a caller with a valid async export job ID to provide file parameter values containing path traversal sequences. Path traversal is a technique used to access files...
CLSA-2026-1774743837 TuxCare security update for handlebars (7 CVEs)
TuxCare rebuilt handlebars to address 7 CVEs. Fixed in 2.0.0-tuxcare.3...
CLSA-2026-1774743832 TuxCare security update for handlebars (2 CVEs)
TuxCare rebuilt handlebars to address 2 CVEs. Fixed in 2.0.0-tuxcare.2...
CLSA-2026-1772756022 TuxCare security update for jsonpointer (1 CVE)
TuxCare rebuilt jsonpointer to address 1 CVE. Fixed in 2.0.0-tuxcare.1...
CVE-2026-55734 guardian atom exhaustion in Guardian.Permissions.encode_permissions!/1
Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian Guardian.Permissions module allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines...
SUSE CVE-2026-34581
goshs is a SimpleHTTPServer written in Go. From version 1.1.0 to before version 2.0.0-beta.2, when using the Share Token it is possible to bypass the limited selected file download with all the gosh functionalities, including code exec. This issue has been patched in version 2.0.0-beta.2...
CLEANSTART-2026-FW89965 Security fixes in kubernetes-csi-external-resizer 2.0.0-r0
Package kubernetes-csi-external-resizer version 2.0.0-r0 fixes 36 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, CVE-2026-39820, CVE-2026-25679...