GithubHelp home page GithubHelp logo

Hi šŸ‘‹

NĀ° CVE Severity Description
1 CVE-2022-1993 High Path Traversal vulnerability on the endpoint '/info/refs' in gogs/gogs
2 CVE-2022-3607 Medium ZipSlip Symlink variant allows to read any file within OctoPrint Box in octoprint/octoprint
3 CVE-2022-23530 Medium GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
4 CVE-2023-25804 Medium Limited Path Traversal in name parameter hap-wi/roxy-wi
5 CVE-2023-25803 CVE-2023-25802 High Directory Traversal vulnerability in hap-wi/roxy-wi
6 CVE-2022-23522 High Arbitrary File Write when Extracting Tarballs retrieved from a remote location using shutil.unpack_archive()
7 CVE-2023-30620 High Arbitrary File Write when Extracting a Remotely retrieved Tarball using Tarfile.extractall() in mindsdb/mindsdb
8 CVE-2023-31131 Medium Arbitrary File Write when Extracting Tarballs retrieved from a remote location using shutil.unpack_archive() in greenplum-db/gpdb
9 CVE-2023-35932 High Configuration Injection in tanghaibao/jcvi due to unsanitized user input
10 GHSA-373w-rj84-pv6x Low Hostname blocklist does not block FQDNs in IncludeSecurity/safeurl-python
11 CVE-2023-39911 Medium ---
12 CVE-2023-42183 Low A Post-Unicode Normalization Vulnerability in lockss/lockss-daemon
13 CVE-2023-41889 Medium Late-Unicode normalization vulnerability in shirasagi/shirasagi
14 CVE-2023-52081 Low Late-Unicode normalization vulnerability in ewen-lbh/ffcss
15 CVE-2024-21623 Critical Arbitrary Expression Injection in github workflow leads to Command execution & leaking secrets in mehah/otclient
16 CVE-2024-23343 Medium
17 CVE-2024-23826 High Uploading an image with a specific filename causes a server-side DoS in spbu-se/spbu_se_site
18 CVE-2024-24759 Critical --
19 CVE-2024-0081 High Unicode use in a user-controlled filename may cause a server-side DoS in Nvidia/NeMo - Nvidia security acknowledgement
20 CVE-2024-32874 Critical -

āœØ Feel free to subscribe to my little newsletter sim4n6.beehiiv.com.

Some of the articles already published :

NĀ° Subject Publication Date
1 Unicode characters to Bypass Security Checks x
2 The One Million Unicode Denial Of Service Attack x
3 How CodeQL works: Summary x
4 Arbitrary Configuration Injection x

šŸ’¬ By the way, I'm looking for a remote opportunity ...

āš”sim4n6 AT gmail.com āš”

Sim4n6<script>print();</script>'s Projects

apentestbox icon apentestbox

A Docker image made with the most commonly used CLI tools for pentesting and bug bounty hunting.

codeql-pun icon codeql-pun

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

contracts icon contracts

A small collection of potentially useful contract templates

dfir_ntfs icon dfir_ntfs

An NTFS parser for digital forensics & incident response

dnscewl icon dnscewl

A DNS Bruteforcing Wordlist Generator

ezxss icon ezxss

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

faraday icon faraday

Open Source Vulnerability Management Platform

gmail-randomer icon gmail-randomer

Pick a random message from Gmail inbox or from a provided search query.

holytips icon holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

juice-shop icon juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

pdtm icon pdtm

ProjectDiscovery's Open Source Tool Manager

pntsh icon pntsh

PNT.sh provides documented pentest cmds right from the CLI using cURL.

pyfsig icon pyfsig

python file signature identifier - Use this to identify files from their headers

unfurl icon unfurl

Extract and Visualize Data from URLs using Unfurl

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    šŸ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. šŸ“ŠšŸ“ˆšŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ā¤ļø Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.