xed

Intel® X86 인코더 디코더 Intel® XED Doxygen API 매뉴얼 및 소스 빌드 매뉴얼: https://intelxed.github.io 버그: https://github.com/intelxed/xed/issues/new 간단한 GITHUB 빌드 지침: git clone https://github.com/intelxed/xed.git xed git clone https://github.com/intelxed/mbuild.git mbuild cd xed ./mfile.py 그런 다음 obj 디렉터리에서...

SwaggerSpy

SwaggerSpy 개요 SwaggerSpy는 SwaggerHub에서 자동화된 오픈 소스 인텔리전스OSINT를 수행하도록 설계된 도구입니다. 이 프로젝트는 SwaggerHub에 문서화된 API로부터 인텔리전스를 수집하는 과정을 간소화하여 보안 연구자, 개발자 및 IT 전문가에게 귀중한 통찰력을 제공하는 것을 목표로 합니다. Swagger란 무엇인가? Swagger는 개발자가 RESTful 웹 서비스를 설계, 구축, 문서화 및 사용할 수 있도록 하는 오픈 소스 프레임워크입니다. JSON 또는 YAML 형식을 사용하여 REST...

POC-CVE-2018-25031

CVE-2018-25031 - 4.1.3 이전의 Swagger UI 피해자를 속여 인증 코드를 입력하게 하여, 해당 코드가 공격자에게 전송되도록 하는 간단한 POCCVE-2018-25031입니다. XSS 취약점 https://github.com/VictorNS69/swagger-ui-xss 와 함께 사용할 수 있습니다. 매개변수를 찾아 올바른 파일을 지정해야 합니다: configUrl 에는 JSON 파일, url 에는 YAML 파일을 지정합니다. 예시:...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Subdomain Lookup Columbus returned 638...

SDK

Intelligence X 공개 SDK 소프트웨어 개발 키트SDK를 사용하면 누구나 Intelligence X 검색 엔진을 사용할 수 있습니다. 무료로 사용할 수 있으며, Intelligence X는 제3자 도구 및 서비스로의 모든 통합을 환영합니다. Intelligence X는 검색 엔진이자 데이터 아카이브입니다. 자세한 내용은 https://intelx.io를 방문하세요. SDK는 다음 부분으로 구성되어 있습니다: 1. API 문서 2. HTML 코드 예제 3. PHP 코드 예제 4. Python 코드 예제 5. Go 패키...

CVE-2026-4103

Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrusted user input to be rendered without proper encoding or neutralization. This enables the injection and execution of malicious JavaScript when affected API documents are viewed. Successful exploitation may...

CVE-2026-4103 Cross-Site Scripting via HTML Sanitization in WSO2 Publisher and Developer Portals Allows Malicious Script Execution

Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrusted user input to be rendered without proper encoding or neutralization. This enables the injection and execution of malicious JavaScript when affected API documents are viewed. Successful exploitation may...

CVE-2026-4103 Cross-Site Scripting via HTML Sanitization in WSO2 Publisher and Developer Portals Allows Malicious Script Execution

Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrusted user input to be rendered without proper encoding or neutralization. This enables the injection and execution of malicious JavaScript when affected API documents are viewed. Successful exploitation may...

EUVD-2026-77586

Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrusted user input to be rendered without proper encoding or neutralization. This enables the injection and execution of malicious JavaScript when affected API documents are viewed. Successful exploitation may...

CVE-2026-4103

CVE-2026-4103 is a stored cross-site scripting (XSS) vulnerability in WSO2 API Manager's Publisher Portal and Developer Portal , caused by insufficient HTML sanitization that allows untrusted user input to be rendered without proper encoding or neutralization. When affected API documents are view...

CVE-2026-4103: Improper Neutralization of Input During Web Page Generation

Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrusted user input to be rendered without proper encoding or neutralization. This enables the injection and execution of malicious JavaScript when affected API documents are viewed. Successful exploitation may...

PT-2026-91260

Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrusted user input to be rendered without proper encoding or neutralization. This enables the injection and execution of malicious JavaScript when affected API documents are viewed. Successful exploitation may...

CVE-2026-21759

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

CVE-2026-21759

HCL Hive is affected by an information exposure vulnerability in which Swagger API documentation was publicly accessible to unauthenticated users. No sensitive data (credentials, PII) was discovered, but the exposure increases the overall attack surface by revealing API structure to potential att...

EUVD-2026-64837

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

CVE-2026-21759 HCL Hive is affected by an information exposure vulnerability

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

PT-2026-80822

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

CVE-2026-14161

Hospital Quening Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API documentation...

CVE-2026-14162

Advantech Hospital Queuing Management is listed under CVE-2026-14162 with a Missing Authentication/Unauthenticated access scenario. The description states a Sensitive Data Exposure where unauthenticated remote attackers can access a URL to obtain API documentation. The connected CVE entry confirm...

CVE-2026-14162

Hospital Queuing Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API documentation...