Search: github.com/aivis | Heykuki News

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

91.

Nx compromised: malware uses Claude code CLI to explore the filesystem (semgrep.dev)

493 points

9 months ago

92.

CVE-2026-33691: OWASP CRS whitespace padding bypass vulnerability

3 points

2 months ago

93.

Malicious versions of Nx and some supporting plugins were published (github.com/nrwl)

443 points

9 months ago

94.

Helm local code execution via a malicious chart (github.com/helm)

172 points

a year ago

95.

Arbitrary file execution in TZinfo (Ruby) (github.com/tzinfo)

106 points

4 years ago

96.

Trivy ecosystem supply chain temporarily compromised (github.com/aquasecurity)

102 points

3 months ago

97.

Composer leaks contents of tokens configured as GitHub OAuth tokens (github.com/composer)

70 points

23 days ago

98.

Malicious URLs cause Git (v2.26.0) to present stored credentials to wrong server (github.com/git)

29 points

6 years ago

99.

CVE-2024-23832 Mastodon Vulnerability: Remote user impersonation and takeover (github.com/mastodon)

21 points

2 years ago

100.

Flatpak: Complete Sandbox Escape (github.com/flatpak)

20 points

2 months ago

101.

CVE-2025-5689: New authd users logging in via SSH are members of the root group (github.com/ubuntu)

11 points

a year ago

102.

Unauthenticated Remote Code Execution in Erlang/OTP SSH (github.com/erlang)

8 points

a year ago

103.

1-day RCE vulnerability in vim (github.com/vim)

7 points

2 months ago

104.

Insecure Random Number Generation (github.com/juliangruber)

7 points

5 years ago

105.

Libfuse io_uring use-after-free and NULL deref (CVE-2026-33150, CVE-2026-33179) (github.com/libfuse)

5 points

2 months ago

106.

Hardcoded Auth Token in RustFS (CVE-2025-68926) (github.com/rustfs)

5 points

5 months ago

107.

CVE in jsoup: users should upgrade to version 1.14.2 [CVSS 7.5] (github.com/jhy)

3 points

5 years ago

108.

Axios: Unrestricted Cloud Metadata Exfiltration via Header Injection Chain (github.com/axios)

3 points

2 months ago

109.

Unauthorized of Cline CLI with modified postinstall script to install OpenClaw (github.com/cline)

3 points

4 months ago

110.

New authd users logging in via SSH are members of the root group (github.com/ubuntu)

3 points

a year ago

111.

Container breakout through process.cwd trickery and leaked fds (github.com/opencontainers)

3 points

2 years ago

112.

Show HN: Automated Kubernetes Pod Security Policy Creation (github.com/sysdiglabs)

3 points

7 years ago

113.

Heap memory corruption in ASN.1 parsing code (github.com/programa-stic)

3 points

10 years ago

114.

Unauthenticated Object Write Vulnerability in MinIO (github.com/minio)

2 points

2 months ago

115.

Displaying a crafted file in Tabby terminal can run shell commands (github.com/Eugeny)

2 points

17 days ago

116.

Denial of Service Vulnerability in React Server Components (github.com/facebook)

2 points

a month ago

117.

macOS Stats: Local Privilege Escalation via Exposed XPC Method (github.com/exelban)

2 points

4 months ago

118.

.NET Security Feature Bypass Vulnerability (github.com/dotnet)

2 points

8 months ago

119.

Malicious versions of Nx and some supporting plugins were published (github.com/nrwl)

2 points

9 months ago

120.

Visual Studio Code for Linux Remote Code Execution Vulnerability CVE-2024-43601 (github.com/microsoft)

2 points

2 years ago