momo安全漏洞库

多模块数据检索平台

登录 注册
共聚合 7122 条情报 漏洞监控 4621 / 网安开源项目 2501
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
PYatiM/Secure-Sandbox
Designed a containerized secure execution engine with enforced CPU/memory constraints, syscall restriction awareness, and network isolation to mitigate RCE and fork bomb attacks. | topics: docker, docker-compose, flask, ...
Upgrade to Jackson Bom 2.21.1
`jackson-core` 2.19.4, as used in Spring Boot 3.5.11, is affected by [Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition](https://github.com/advisories/GHSA-72hv-8253-57qq). I've [asked](ht...
Upgrade to Jackson Bom 3.1.0
Spring Boot 4.0.x includes `tools.jackson.core:jackson-core:3.0.4`, which is affected by the vulnerability GHSA-72hv-8253-57qq (CVSS 8.7). This is the same async parser `maxNumberLength` bypass issue that is being addres...
boot-redis(webflux)4.1 IllegalStateException
boot-redis(webflux)4.1 -> lettuce7.2.1 -> netty4.2.10 -> netty4.2.10.final IllegalStateException: incompatible event loop type: io.netty.channel.SingleThreadIoEventLoop temporary fixed: implementation ('org.springframew...
boot-redis webflux-4.1SNAPSHOT
boot-redis-4.1 -> lettuce7.2.1 -> netty4.2.10.final -> SingleThreadIoEventLoop -> IllegalStateException: incompatible event loop type: io.netty.channel.SingleThreadIoEventLoop temporary fixed: implementation ('org.spri...
KOSEC-LLC/BYOVD-Research
BYOVD research performed by KOSEC. Includes vulnerable drivers and writeups (CVE-2026-0828). | language: C
DeathShotXD/0xKern3lCrush-Foreverday-BYOVD-CVE-2026-0828
Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Driver) TTPs for Ring 0 process termination and physical memory R/W. Researching EDR-Kil...
standard-profile/zsskolni-rce
language: CSS
Alpastx/CVE-2023-3452---WordPress-Canto-Plugin-RCE
CVE-2023-3452 exploit for WordPress Canto plugin RCE, HTTPS support included | language: Python
agustfricke/erlang-ssh-rce-CVE-2025-32433
language: Go
优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。
当前条件下没有命中网安开源项目。