20024 matches found
see
Sandboxed Execution Environment :ソース: https://github.com/F-Secure/see :ドキュメント: https://see.readthedocs.io :ダウンロード: https://pypi.python.org/pypi/python-see |travis badge| |docs badge| .. |travis badge| image:: https://travis-ci.org/F-Secure/see.svg?branch=master :target:...
CVE-2020-27976
CVE-2020-27976 Exploit osCommerce Phoenix CE . Esto ha producido los mejores resultados durante las pruebas. Los saltos de línea en el payload se reemplazan con espacios antes de la subida. ================== Fuentes: https://www.tenable.com/cve/CVE-2020-27976...
F-logic DataCube3 - SQL Injection
SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the reqid parameter. id: CVE-2024-31750 info: name: F-logic DataCube3 - SQL Injection author: DhiyaneshDK severity: high description: | SQL injection vulnerability in f-logic...
RTOS-F-16-Exploit---CVE-2019-7711
Green Hills INTEGRITY RTOS F-16 漏洞利用 - CVE-2019-7711 完整格式化字符串利用链 针对 F-16 航空电子设备的真实地面维护攻击 📋 描述 该仓库包含一个针对 CVE-2019-7711 的概念验证（PoC） ——这是 Interpeak IPCOMShell TELNET 服务器（属于 Green Hills INTEGRITY RTOS 5.0.4）中的一个格式化字符串漏洞。 该漏洞利用演示了一条现实完整的攻击链 ，瞄准 F-16 战隼 （Block 60 及类似型号）的彩色显示处理器（CDP）和任务系统，发生在地面维护 期间。 🔄...
CVE-2026-24061-lab
CVE-2026-24061 — 复现实验室 ⚠️ 仅限教育用途。隔离实验环境。 法语见下方 摘要 GNU InetUtils telnetd ≤ 2.7 中存在严重身份验证绕过漏洞（CVSS 9.8）。 通过 Telnet NEWENVIRON 选项将 -f root 作为 USER 变量注入， 未认证的攻击者无需任何密码即可获得 root shell。 根本原因 在 Telnet 协商期间从客户端接收到的 USER 变量被直接传递给 /usr/bin/login 而未经过滤： root@kitploit: /usr/bin/login -p -f root -f 标志指示 login...
B2R2
B2R2 B2R2 是一个完全托管的二进制分析框架，使用 F 编写。它为逆向工程、程序分析和二进制级检查提供了丰富的算法、函数和工具。 名称 B2R2 的灵感来源于星球大战中的标志性机器人 R2-D2。最初名为 B2-R2 ，后来因为 .NET 标识符和命名空间不允许使用连字符，项目采用了无连字符形式 B2R2 。该名称反映了项目的用途："B" 和 "2" 暗示二进制和二态计算，而 "R" 代表逆向（reversing）。简而言之，B2R2 是为二进制逆向而构建的。 概述 1. B2R2 是 分析友好型 的：它使用 F...
Tylium
Tylium 侵入検知、セキュリティ分析、脅威ハンティングのための一次データパイプライン これらのファイルには、標準的なシステムログに加えてEDR（エンドポイント検出および対応）データを生成するための設定が含まれています。これらの設定により、F/OSS（無料および/またはオープンソースツール）を使用したこれらのデータストリームの生成が可能になります。F/OSSツールは、Linux用のAuditd、Windows用のSysmon、Mac用のXnumonで構成されています。また、Suricataのイベントとルールを設定するためのメモも含まれています。...
f-for-java
f-for-java 一个用 Go 和 Java 编写的项目，我放弃了的，针对 CVE-2021-44228，如果你可以的话试着修复它 XD JAVA 中的模块不是我的...
FMD Android
FMD Android Encuentra tu dispositivo a través de SMS, mensajería instantánea o una interfaz web FMD Server. FMD te permite localizar, hacer sonar, borrar y enviar otros comandos a tu dispositivo cuando está perdido. Su objetivo es ser una alternativa de código abierto segura a Encontrar mi...
EUVD-2026-63208
F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...
CVE-2026-71368
F-RevoCRM contains a stored/reflected XSS flaw; an authenticated user viewing a crafted page may have unintended actions performed on their session. CVSS 3.0 scores 6.1 MEDIUM (network, no privileges, active user interaction). No exploitation or fix details are provided in the documents. Monitor ...
PT-2026-72615
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix effective prog array index with BPF F PREORDER replace effective prog and purge effective progs located the slot in the effective array by walking the program hlist and counting entries linearly. That count does not matc...
CVE-2026-72693
openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...
CVE-2026-72693
openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...
EUVD-2026-55468
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: synchronize delayed setalt with teardown The ftcm setalt path defers endpoint setup to a work item and completes the delayed status response from process context. The delayed work uses ftcm private state and ma...
UBUNTU-CVE-2026-64584
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: cancel pending IN work before freeing the midi object The fmidi driver embeds a work item midi-work whose handler, fmidiinwork, dereferences the enclosing struct fmidi through containerof. This work is armed...
CVE-2026-64584 usb: gadget: f_midi: cancel pending IN work before freeing the midi object
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: cancel pending IN work before freeing the midi object The fmidi driver embeds a work item midi-work whose handler, fmidiinwork, dereferences the enclosing struct fmidi through containerof. This work is armed...
CVE-2026-64584
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: cancel pending IN work before freeing the midi object The fmidi driver embeds a work item midi-work whose handler, fmidiinwork, dereferences the enclosing struct fmidi through containerof. This work is armed...
Malicious code in saas-f-lego-landings (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c96f58511420dcd956adbe21ee52dd1acae9956f5b562887a5c6659679fb52d [email protected] executes a native binary dropper as a side effect of loading the package. index.js unconditionally requires./support.js,...