-
# Concerns
I'm writing this post in good faith that this is simply an oversight or perhaps lack of knowledge on how to implement this more securely.
I will be only talking about the client-side of …
-
Hi, as my other PRPs status are not finalized, I can write a tsunami plugin for GeoServer RCE vulnerability if you let me.
this is a good reference:
https://github.com/vulhub/vulhub/tree/master/geo…
-
I had tested out if a non contact user intiated various stages of media attachments including voice recordings. I had found that Signal does not process media attachments except stickers. Theoreticall…
-
According to [this research](https://www.wiz.io/blog/probllama-ollama-vulnerability-cve-2024-37032):
> Ollama’s HTTP server exposes [multiple API endpoints](https://github.com/ollama/ollama/blob/main…
-
### Describe the bug
https://github.com/melMass/comfy_mtb/blob/9651a7034120589b059329b21688708e42772453/nodes/graph_utils.py#L479
```python
class MTB_MathExpression:
"""Node to evaluate a si…
-
### Bug Description
## Bug description
I've created a simple reproduction for this issue. You can find it [here](https://github.com/damnmicrowave/posthog-manifest-v3-issue).
Since 1st of August…
-
Hey, I've discovered a vulnerability in `obsidian-annotator`. I'm sticking to GitHub's default template for advisories (maybe consider adding a `SECURITY.md`):
### Summary
Opening an ebook with ma…
-
**Motivation**
When using Falco and testing various variations of certain techniques It became apparent that the rule **Netcat Remote Code Execution in Containers** does not trigger when the nc bin…
-
User Story:
As a host, I don’t want users to be able to arbitrarily execute code on my server to ensure the integrity of the polls and ensure user’s can’t hack me/ cheat.
-
Tracking issue for:
- [ ] https://github.com/2lambda123/cisagov-Malcolm/security/code-scanning/177