Lucene search
+L

7066 matches found

Kitploit
Kitploit
•added 2026/10/08 2:55 a.m.•6 views

alter-zero

Alter Zero 为你的终端赋予一个编码智能体。 与一个协同工作的智能体一起阅读、构建、调试和审查代码。 使用相同的工具进行网络安全研究、技术调查和日常自动化。 快速开始 · 功能特性 · 模型提供商 · 命令与快捷键 · 支持 · 致谢 在 YouTube 上观看视频演示 为什么选择 Alter Zero Alter Zero 是一个用 Rust 编写的开源 AI 编码智能体。它直接在你的项目中工作:读取文件、进行编辑、运行命令并检查结果,而你可以在一旁的终端中全程跟进。编码是它的核心,同时也能灵活地调查安全问题、探索陌生的系统,并使用你现有的工具自动化任务。 你将获得| 为什么重...

6.2AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/10/07 6:00 a.m.•8 views

EUVD-2026-94178

The Yaad Sarig Payment Gateway For WC WordPress plugin before 2.2.13 does not verify authorization or that the requesting user owns the target order in several of its order payment-processing actions, allowing any authenticated user, including subscribers, to act on and alter orders belonging to...

4.3CVSS5.9AI score0.00152EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•7 views

PT-2026-107401

The Yaad Sarig Payment Gateway For WC WordPress plugin before 2.2.13 does not verify authorization or that the requesting user owns the target order in several of its order payment-processing actions, allowing any authenticated user, including subscribers, to act on and alter orders belonging to...

5.9AI score0.00152EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/05 12:41 p.m.•7 views

radioguard

RadioGuard: Android向けゼロトラスト携帯電話防御サブサービス RadioGuard は、オープンソースで本番環境に対応し、Google Play Store に準拠した Android セキュリティアプリケーション兼バックグラウンドサブサービスです。不正な携帯基地局(IMSIキャッチャー / セルサイトシミュレータ / SMSブラスター)を能動的に検出し、敵対的な 2G/4G 携帯電話操作を識別し、信頼できない携帯電話リンク上でモバイルデバイスを保護するために暗号化された安全ルーティング隔離を展開します。 目次 1. 脅威モデルと RadioGuard が存在する理由 ...

6.3AI score
SaveExploits0References2
OSV
OSV
•added 2026/10/05 11:55 a.m.•7 views

BIT-MOODLE-2026-102578 Moodle: sql injection in question bank web service

A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...

8.8CVSS5.8AI score0.00299EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/02 3:58 p.m.•51 views

CVE-2026-101104 Missing Authorization in Meari IoT Cloud Platform OpenAPI Service

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. This vulnerability enables attackers to perform unauthorized actions, such as altering device settings or triggering...

7.7CVSS0.00268EPSS
SaveExploits0References3
Redos
Redos
•added 2026/10/02 12:00 a.m.•9 views

ROS-20261002-73-0082

The vulnerability of the ALTER TABLE/ALTER TYPE command in the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to delete or modify data...

3.8CVSS6.2AI score0.00318EPSS
SaveExploits0
Redos
Redos
•added 2026/10/02 12:00 a.m.•10 views

ROS-20261002-73-0084

The vulnerability of the ALTER TABLE/ALTER TYPE command in the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to delete or modify data...

3.8CVSS6.2AI score0.00318EPSS
SaveExploits0
Redos
Redos
•added 2026/10/02 12:00 a.m.•7 views

ROS-20261002-73-0083

The vulnerability of the ALTER TABLE/ALTER TYPE command in the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to delete or modify data...

3.8CVSS6.2AI score0.00318EPSS
SaveExploits0
Redos
Redos
•added 2026/10/02 12:00 a.m.•6 views

ROS-20261002-73-0085

The vulnerability of the ALTER TABLE/ALTER TYPE command in the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to delete or modify data...

3.8CVSS6.2AI score0.00318EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2026/10/01 8:25 p.m.•13 views

K000163494: PostgreSQL vulnerability CVE-2026-6469

Security Advisory Description Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly allows the table owner to run DROP STATISTICS and ALTER STATISTICS via this improper ownership. It wrongl...

3.8CVSS5.7AI score0.00318EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/10/01 5:54 p.m.•17 views

CVE-2026-47574

A flaw was found in the NVIDIA Virtual GPU vGPU Manager for Linux. A local user with basic privileges can exploit an incorrect transfer of resources across isolation spheres. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, cause a denial of service...

7.8CVSS6.3AI score0.00127EPSS
SaveExploits0References4
F5 Networks
F5 Networks
•added 2026/10/01 4:11 p.m.•13 views

K000163505: PostgreSQL vulnerability CVE-2026-6471

Security Advisory Description Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly allows the table owner to run DROP STATISTICS and ALTER STATISTICS via this improper ownership. It wrongl...

3.8CVSS6AI score0.00318EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2026/10/01 3:53 p.m.•15 views

K000163496: PostgreSQL vulnerability CVE-2026-6470

Security Advisory Description Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and referencin...

4.3CVSS5.7AI score0.00329EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/09/30 9:17 a.m.•15 views

CVE-2026-102578

A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...

8.8CVSS0.00299EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/30 9:17 a.m.•9 views

UBUNTU-CVE-2026-102578

A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...

8.8CVSS5.8AI score0.00299EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/09/30 9:17 a.m.•11 views

CVE-2026-102578

A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...

5.5CVSS5.8AI score0.00299EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/30 8:36 a.m.•14 views

EUVD-2026-89717

A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...

5.5CVSS5.8AI score0.00299EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/30 8:36 a.m.•26 views

CVE-2026-102578

A SQL injection vulnerability exists in the Moodle learning management system. An authenticated attacker who has access to the question bank web service can submit unsanitized input that is directly processed into database queries. This flaw allows the attacker to view, alter, or delete sensitive...

8.8CVSS5.8AI score0.00299EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
•added 2026/09/30 7:06 a.m.•14 views

CVE-2026-102578

A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...

8.8CVSS5.8AI score0.00299EPSS
SaveExploits0References2
Rows per page
Query Builder