soc-faker

soc-faker soc-faker는 보안 운영 센터, 정보 보안 전문가, 제품 팀 등이 사용할 가짜 데이터를 생성하는 데 사용됩니다. 시작하기 soc-faker는 Python 3.6 이상에서 작동합니다. pip를 사용하거나 이 저장소를 직접 클론하여 soc-faker를 설치할 수 있습니다. 이 문서를 작성하는 시점에서 soc-faker는 다음과 같은 주요 카테고리에 대한 가짜 데이터를 생성할 수 있습니다. 각 카테고리에 대한 자세한 내용은 아래 링크에서 확인할 수 있습니다: 에이전트 알림 애플리케이션 클라우드 컴퓨터 컨테이너...

youzer

youzer Active Directory 환경을 위한 가짜 사용자 생성기 소개 Youzer의 목표는 정보가 풍부한 Active Directory 환경을 만드는 것입니다. 이는 python3 라이브러리 'faker'를 사용하여 무작위 계정을 생성합니다. pip3 install faker 단어 목록을 제공하거나 비밀번호를 생성하도록 할 수 있습니다. 생성 옵션은 hashcat 규칙 마스크와 같은 것을 테스트하는 데 적합합니다. 단어 목록 옵션은 환경에 특정 비밀번호 목록을 시드하거나 사전 공격을 연습할 때 유용합니다. 출력은...

fake-useragent

fake-useragent 最新かつシンプルなユーザーエージェントフェイカー。実際のデータベースを備えています。 特徴 データは Intoli LLC から事前にダウンロードされ、後処理されており、データはパッケージ自体に含まれています データは幅広いブラウザエージェントと様々なブラウザで構成されています ユーザーエージェント文字列を取得します（desktop、tablet、mobile の各タイプの UA） useragent、percent、type、devicebrand、browser、browserversion、os、osversion、platform...

CVE-2026-63325

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

EUVD-2026-81012

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

CVE-2026-63325 Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

CVE-2026-63325 Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

CVE-2026-63325

@redocly/respect-core and @redocly/cli (Redocly CLI) before version 2.33.0 contain an arbitrary code execution vulnerability in the respect command. The root cause is dynamic evaluation of $faker runtime expressions in Arazzo descriptions: a crafted expression can traverse constructor , prototype...

CVE-2026-63325 Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

ROOT-APP-NPM-CVE-2026-73231 CVE-2026-73231 in @faker-js/faker - Patched by Root

Root has patched CVE-2026-73231 in the @faker-js/faker package for Root:npm. Multiple fixed versions available...

CVE-2026-63325: Improper Control of Generation of Code

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

Arbitrary Code Execution

Faker is vulnerable to Arbitrary Code Execution. The vulnerability is due to attacker-controlled fake templates accessing the Function constructor through fakeEval.resolveProperty, which allows an attacker to execute arbitrary JavaScript code...

GHSA-QXC2-J82W-R537 Faker: helpers.fake exploitable into arbritary code execution

Summary faker.helpers.fake can be tricked into arbritary code execution. Details fakeEval.resolveProperty resolves properties on functions itself instead of resolving the nested function first. This can be addressed by recursively calling resolveProperty instead of accessing the property after on...

@depup/artillery (>=2.0.33-depup.28, <=2.0.33-depup.50), @eduzz/e2e-playwright-base (0.4.0) +81 more potentially affected by CVE-2026-73231 via @faker-js/faker (>=10.0.0, <=10.4.0)

@faker-js/faker NPM version =10.0.0, =2.0.33-depup.28, =1.0.0-rc.1, =3.22.0-next.38, =9.0.0-next.68, =19.8.4, =1.0.7, =3.1.2, =0.2.9, =0.4.7, =0.2.12, =1.0.5, =0.2.10, =0.3.2, =0.3.6 and more Source cves: CVE-2026-73231 Source advisory: OSV:GHSA-QXC2-J82W-R537...

EUVD-2026-56923

Faker: helpers.fake exploitable into arbritary code execution...

Faker: helpers.fake exploitable into arbritary code execution

Summary faker.helpers.fake can be tricked into arbritary code execution. Details fakeEval.resolveProperty resolves properties on functions itself instead of resolving the nested function first. This can be addressed by recursively calling resolveProperty instead of accessing the property after on...

CVE-2026-73231

A flaw was found in Faker, a library for generating fake data. The faker.helpers.fake method allows an attacker to control fake templates, which can then access the Function constructor. This access, specifically through fakeEval.resolveProperty when a function returns another function, enables...

SUSE CVE-2026-73231

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

Linux Distros Unpatched Vulnerability : CVE-2026-73231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows...

@depup/artillery (>=2.0.33-depup.28, <=2.0.33-depup.50), @eduzz/e2e-playwright-base (0.4.0) +81 more potentially affected by CVE-2026-73231 via @faker-js/faker (>=10.0.0, <=10.4.0)

@faker-js/faker NPM version =10.0.0, =2.0.33-depup.28, =1.0.0-rc.1, =3.22.0-next.38, =9.0.0-next.68, =19.8.4, =1.0.7, =3.1.2, =0.2.9, =0.4.7, =0.2.12, =1.0.5, =0.2.10, =0.3.2, =0.3.6 and more Source cves: CVE-2026-73231 Source advisory: SNYK:JS-FAKERJSFAKER-18674671...