905 matches found
nzyme
Nzyme 詳細は https://www.nzyme.org/ をご覧ください。 Nzyme バージョン 2.0.0 は現在開発中であり、アルファ版が公開されています。 コントリビューション コントリビューションには多くの方法があり、すべてのコミュニティとの交流を歓迎します: 見つけたと思われるあらゆるバグについて issue を開いてください。 不明瞭だと感じた点については issue を開いてください。不十分・欠落・不明瞭なドキュメントはバグとみなされます。 新機能またはバグ修正の Pull Request...
lava
LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...
bettercap
이 저장소는 더 이상 사용되지 않습니다deprecated, bettercap 개발은 여기로 이동되었으며 2.0.0 미만의 모든 버전은 레거시legacy로 간주되며 지원되지 않습니다NOT SUPPORTED...
CVE-2026-82669 klaussilveira GitList XML Parsing CommandLine.php SimpleXMLElement denial of service
A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function SimpleXMLElement of the file src/SCM/System/Git/CommandLine.php of the component XML Parsing. Performing a manipulation results in denial of service. The attack is possible to be carried out...
CVE-2026-77781
Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys. The FETCH, EXISTS and DELETE methods throw an exception when on malformed regular expressions. Each method falls back to a regex match when the key is not already stored in the hash, compiling the...
CVE-2026-63038
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache InLong. This allows an attacker to inject arbitrary SQL code through the dbName, tableName, schemaName, and username parameters. This issue affects Apache InLong: from 2.0.0 before 2.4.0...
CVE-2026-33437 Stirling PDF: Stored XSS in Info Summary
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with...
CVE-2026-33437
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with...
CVE-2026-33437 Stirling PDF: Stored XSS in Info Summary
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with...
PT-2026-76739
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.0.0, the Get Info workflow in app/core/src/main/resources/templates/security/get-info-on-pdf.html inserts untrusted PDF Title and Author metadata into the summary-text element with...
EUVD-2026-54642
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's /$result endpoint allows a caller who can obtain any valid async export job ID to supply file parameter values containing path...
CVE-2026-47659
Pathling Server prior to 2.0.0 exposes a path traversal vulnerability in the /$result endpoint. An attacker who can obtain a valid async export job ID can supply file parameters containing traversal sequences and the handler only validates the job ID, not the file path, allowing reads across the ...
PT-2026-69132
Name of the Vulnerable Software and Affected Versions Pathling Server versions prior to 2.0.0 Description The /$result endpoint allows a caller with a valid async export job ID to provide file parameter values containing path traversal sequences. Path traversal is a technique used to access files...
CLSA-2026-1774743837 TuxCare security update for handlebars (7 CVEs)
TuxCare rebuilt handlebars to address 7 CVEs. Fixed in 2.0.0-tuxcare.3...
CLSA-2026-1774743832 TuxCare security update for handlebars (2 CVEs)
TuxCare rebuilt handlebars to address 2 CVEs. Fixed in 2.0.0-tuxcare.2...
CLSA-2026-1772756022 TuxCare security update for jsonpointer (1 CVE)
TuxCare rebuilt jsonpointer to address 1 CVE. Fixed in 2.0.0-tuxcare.1...
CVE-2026-55734 guardian atom exhaustion in Guardian.Permissions.encode_permissions!/1
Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian Guardian.Permissions module allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines...
SUSE CVE-2026-34581
goshs is a SimpleHTTPServer written in Go. From version 1.1.0 to before version 2.0.0-beta.2, when using the Share Token it is possible to bypass the limited selected file download with all the gosh functionalities, including code exec. This issue has been patched in version 2.0.0-beta.2...
CLEANSTART-2026-FW89965 Security fixes in kubernetes-csi-external-resizer 2.0.0-r0
Package kubernetes-csi-external-resizer version 2.0.0-r0 fixes 36 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, CVE-2026-39820, CVE-2026-25679...