hello-ReGrade-security

hello-ReGrade-security Практическая демонстрация обнаружения zero-day уязвимостей с помощьюReGrade. Вы направите обычный набор тестов на ReGrade, запишете его работу против крошечного сервиса, воспроизведёте её на второй копии того же сервиса и с помощью Claude Code + ReGrade MCP-инструментов...

ROOT-APP-MAVEN-CVE-2018-5968 CVE-2018-5968 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2018-5968 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

MINI-H858-7VVV-5968

Bulletin has no description...

CVE-2023-5968

creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:22+00:00| seen| Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U 2026-07-17 00:00:39+00:00| seen| Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U 2026-07-18 00:00:11+00:00| published-proof-of-concept|...

MINI-5968-CGHP-2FGW

Bulletin has no description...

MINI-62WG-HC95-5968

Bulletin has no description...

ECHO-5968-ECB0-CBEF Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

CGA-5968-RXP5-934W

Bulletin has no description...

CVE-2024-5968

The Photo Gallery by 10Web WordPress plugin before 1.8.28 does not properly sanitise and escape some of its Gallery settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

CVE-2019-5968

Cross-site request forgery CSRF vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administrators via updating user's 'Basic Info'...

CVE-2024-5968

creationtimestamp| type| source ---|---|--- 2024-10-09 08:57:24+00:00| seen| https://t.me/cvedetector/7433...

CVE-2024-5968 Photo Gallery by 10Web <= 1.8.27 - Admin+ Stored XSS

The Photo Gallery by 10Web WordPress plugin before 1.8.28 does not properly sanitise and escape some of its Gallery settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

CVE-2024-5968 Photo Gallery by 10Web <= 1.8.27 - Admin+ Stored XSS

The Photo Gallery by 10Web WordPress plugin before 1.8.28 does not properly sanitise and escape some of its Gallery settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

CGA-CFM2-89CM-5968

Bulletin has no description...

CGA-8JWW-5968-HV59

Bulletin has no description...

Mattermost Server < 7.8.12 / 8.0.x < 8.0.4 / 8.1.x < 8.1.3 / 9.0.0 Multiple Vulnerabilities (MMSA-2023-00240) (MMSA-2023-00242) (MMSA-2023-00246)

The version of Mattermost Server running on the remote host is prior to 7.8.12, 8.0.x prior to 8.0.3, 8.1.x prior to 8.1.3 or 9.0.0. It is, therefore, affected by multiple vulnerabilities: - Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request...

CVE-2023-5968

Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body...

CVE-2023-5968

Mattermost: CVE-2023-5968 is a vulnerability where the server fails to properly sanitize the user object during username updates, causing the password hash to be included in the response body. Affected data exposure is limited to the password hash disclosure in responses per the available documen...

CVE-2023-5968 Password hash in response body after username update

Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body...

U.S. Dept Of Defense: DOM-XSS

A DOM-XSS vulnerability was found on a subdomain of a website, which could allow an attacker with access to the Siteminder CA to perform a cross-site scripting attack and cause information leaks, privilege escalation, and/or denial of service. The vulnerability was assigned CVE-2013-5968 and a...