momo安全漏洞库

多模块数据检索平台

登录 注册
共聚合 4942 条情报 漏洞监控 3145 / 网安开源项目 1553 / 威胁情报 244

漏洞监控

来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。

3145总量

网安开源项目

优先展示中文安全团队维护的开源项目,兼顾工具落地场景和最近更新时间。

1553总量

威胁情报

来自 360、奇安信、斗象等官方站点的公开情报聚合。

244总量
JoshuaProvoste/Command-Injection-RCE-Vertex-AI-SDK-v1.121.0
Command Injection / Remote Code Execution (RCE) via Insecure Deserialization in load() of predictor.py in Vertex AI SDK v1.121.0 - (github.com/googleapis/python-aiplatform) | topics: command-injection, command-injection-...
本页此列暂无更多数据
本页此列暂无更多数据
JoshuaProvoste/Command-Injection-RCE-AlphaFold-v3.0.1
Command Injection / Remote Code Execution (RCE) via Insecure Deserialization in _load_ccd_pickle_cached() of chemical_components.py in AlphaFold 3 (v3.0.1) - (github.com/google-deepmind/alphafold3) | topics: command-inje...
Consider if we want to support channel defaults for gRPC clients
See https://github.com/spring-projects/spring-grpc/pull/347 If we do this we should also consider HTTP Service Clients
OTEL_SDK_DISABLED and friends doesn't disable publishing OpenTelemetry
I apologize if this turns out to be a documentation thing, but I am unable to find a way to disable OpenTelemetry publishing based on any of the options I can find. I've tried a number of ways to disable publishing to my...
rippsec/CVE-2024-24590-ClearML-RCE-Exploit
language: Python
rippxsec/CVE-2024-24590-ClearML-RCE-Exploit
language: Python
Docker fails when a 'tcp://' address ends with a slash (for example 'tcp://docker:2375/')
Version 4.0.2 Context: gitlab CI build with DinD configured and DOCKER_HOST defined as tcp://docker:2375 with tls disabled ( environment variables: DOCKER_HOST: tcp://docker:2375/, DOCKER_TLS_VERIFY: '', DOCKER_CERT_PAT...
RouterFunctions descriptions in Actuator do not support nesting
Hello! Currently, I'm migrating over the non-reactive RouterFunctions with Spring Boot 4.0.3 using this code: ```java @Bean public RouterFunction<ServerResponse> testEndpoints() { return RouterFunctions....
Provide a clearer link between the documented managed dependency coordinates and version properties
Going along the lines of https://github.com/spring-projects/spring-boot/issues/21723 etc. (i.e. switching from the Spring Dependency Management Plugin to `platform` declarations), one stumbles upon the following problem:...
kyakei/CVE-2023-43208
CVE-2023-43208: Mirth Connect Pre-Auth RCE PoC | language: Python