Librsvg: use-after-free when xml includes have duplicated entities
Evidence Sep 25, 2026
- CVSS
- 7.8High
- EPSS
- —Not available
- Exploits
- 1
Evidence Sep 25, 2026
Evidence Sep 25, 2026
Evidence Sep 25, 2026
asmitdesai/ubuntilsPython CLI/TUI for forensic triage of Ubuntu systems — detects and remediates persistence mechanisms with artifact collection, timeline correlation,…
1-3-7/disrobeStatic software recovery in Rust: decompile, deobfuscate, and unpack native code, bytecode, scripts, firmware, and application packages; 15+…
yaklang/javajivePure-Go Java Decompiler and Serialization Operator
atomdrift-project/scan0-day malware detection for binaries, source & scripts (that doesn't suck)
cbuijs/sdproxyDNS Proxy that is simple and fast with not so simple features. Focused on routed DNS forwarding, filtering and parental control.
newliver666/apk-reverseSuitable for Android APK reverse engineering analysis
mondoohq/cnspecAn open source, cloud-native security to protect everything from build to runtime
ut-dacs/anycast-censusLACeS: an Open, Fast, Responsible and Efficient Longitudinal Anycast Census System
hac01/azure-pentesting-suiteGo toolkit for authorized Azure security assessments: enumerates subscriptions and resources, audits misconfigurations, and attacks public Blob…
forefy/reburpA Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI
ch4120n/ch4120n-cve-pulseLive CVE PoC (Proof-of-Concepts) Aggregator with Smart Search & Threat Intelligence
ngwg/ceastareverse engineering tool with a built-in MCP server: an AI can debug your binary, not just read it — breakpoints, stepping, memory, calling…
koala73/worldmonitorReal-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…
prowler-cloud/prowlerProwler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…
google/osv-scannerVulnerability scanner written in Go which uses the data provided by https://osv.dev
blackhillsinfosec/skyhookA round-trip obfuscated HTTP file transfer setup built to bypass IDS detections.
ultralytics/ultralyticsDeep learning framework for object detection, segmentation, classification, pose estimation, and tracking using pre-trained YOLO models and…
datalux/osintgramOsintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
koala73/worldmonitorReal-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…
prowler-cloud/prowlerProwler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…
google/osv-scannerVulnerability scanner written in Go which uses the data provided by https://osv.dev
blackhillsinfosec/skyhookA round-trip obfuscated HTTP file transfer setup built to bypass IDS detections.
ultralytics/ultralyticsDeep learning framework for object detection, segmentation, classification, pose estimation, and tracking using pre-trained YOLO models and…
datalux/osintgramOsintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname