the-art-of-pivoting

The Art of Pivoting Techniques for Intelligence Analysts to Discover New Relationships in a Complex World PDF HTML EPUB Markdown Abstract This book explores how intelligence and cyber-security analysts can uncover hidden links between threat actor infrastructure and ongoing investigations by...

BlackDex

BlackDex BlackDex is an Android unpack tool, it supports Android 5.012 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds. Declaration This project is not directed against any encryption, it does not deal with...

platform_art_AOSP10_r33_CVE-2021-0511

This repository does not have a README...

Art Gallery Management System Project v1.0 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar. id: CVE-2023-23161 info: name: Art...

pics

ようこそ！ バイナリポスター 25枚のポスター2017-10-30 59点のトレーシング2022-28-11 !https://assets.kitploit.com/production/public/readmes/48012/84626b76dd9955afaa8d...

CVE-2024-4956

私の"Art of Defence"ブログの一環として作成されたスクリプトのリポジトリです。 Art-of-Defence - Sonatype Nexus CVE-2024-4956:...

CVE-2025-15399

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2026-1029 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

EUVD-2026-83136

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

CVE-2025-15399

CVE-2025-15399 is a cross-site request forgery (CSRF) vulnerability (CWE-352) affecting IBM Common Licensing (also known as IBM License Key Server Administration and Reporting Tool / LKS Administration Agent) versions 9.0, 9.0.0.1, and 9.0.0.2 . An attacker could execute malicious and unauthorize...

CVE-2026-1025: Improper Neutralization of Input During Web Page Generation

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

CVE-2026-19543 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit...

CVE-2026-19543

IBM Common Licensing Agent and IBM LKS Administration and Reporting Tool (ART) , versions 9.0, 9.0.0.1, and 9.0.0.2 , perform input validation exclusively on the client side without enforcing equivalent restrictions on the server side. An attacker with local access can modify requests to bypass v...

PT-2026-91395

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit...

EUVD-2026-75877

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain due to improper validation of the HTTP Host header...

CVE-2026-19646 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain due to improper validation of the HTTP Host header...

CVE-2026-19646 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain due to improper validation of the HTTP Host header...

Security Bulletin: Due to use of bootstrap, IBM License Key Server Administration and Reporting Tool is affected by Cross-site scripting

Summary IBM License Key Server Administration and Reporting Tool uses bootstrap javascript library internally. Vulnerability Details CVEID:CVE-2025-1647 DESCRIPTION: Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Bootstrap allows...

The vulnerability of the /admin/adminHome.php file on the web platform used for displaying and selling art works in the Online Art Gallery Shop Project allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the /admin/adminHome.php file on the web platform used for displaying and selling art works in the Online Art Gallery Shop Project is related to incorrect elimination of special elements in the output data. Exploitation of this vulnerability could allow an attacker, operating...

Path Traversal

art-template is vulnerable to Path Traversal. The vulnerability is due to the template sub-template resolution logic using path.resolveroot, filename without validating that the resolved path remains within the intended root directory, which allows an attacker to use path traversal sequences to...