1031 matches found
aura
.. image:: https://cdn.sourcecode.ai/imgs/logotype.png :target: https://aura.sourcecode.ai/ ====== .. class:: center |homepageflair| |docsflair| |dockerflair| |licenseflair| |travisflair| |pypiflair| Source code auditing and static code analysis Aura is a static analysis framework developed as a...
aura-inspector
aura-inspector This is not an officially supported Google product. This project is not eligible for the Google Open Source Software Vulnerability Rewards Program. Introduction aura-inspector is a Swiss Army knife of Salesforce Experience Cloud testing. It facilitates in discovering misconfigured...
Aura-State
Aura-State Prove your AI agent is injection-safe, in-spec, and won't act out of bounds — before you ship it. A design-time verifier for LLM agents — not a runtime guardrail. Import your LangGraph / CrewAI / AutoGen / MCP agent and Aura proves five things about the agent you already wrote, then...
CVE-2025-26892
CVE-2025-26892 – WordPress Celestial Aura Theme = 2.2 Arbitrary File Upload Authenticated 📄 Description An Unrestricted File Upload vulnerability exists in the WordPress Celestial Aura theme developed by dkszone up to version 2.2. A low-privileged authenticated user can upload arbitrary PHP files...
Avaya Aura Device Services - OS Command Injection
An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier. id: CVE-2023-3722 info: name:...
aura-botnet
Aura Botnet Servidor C2 El servidor C2 del botnet utiliza el framework Django como backend. Está lejos de ser el servidor web más eficiente, pero esto se compensa con lo siguiente: Django es extremadamente portable y por lo tanto bueno para propósitos de prueba/educativos. El servidor y la base d...
poc_salesforce_lightning
PoC for Salesforce lightning Academic purposes Only. This tool dumps the data of Salesforce object through Aura lightning endpoint with the guest privilege. 雑なコードだけど許してくれい Requirement Python3 Usage $ python3 exploit.py -h usage: exploit.py -h -u URL -o OBJECTS OBJECTS ... -l -c -a AURACONTEXT -r...
aura
This repository has moved to a new location: https://github.com/SourceCode-AI/aura Security Auditing and code introspection About the problem The current trend in the development is to use a lot of packages in the development phase, even if they provide only trivial functionality and consist of 1...
pentaho-exploits
Exploits relating to https://research.aurainfosec.io/pentest/pentah0wnage Note: Some things might not work Thanks to my employer Aura Information Security for providing time for me to work on this project...
CVE-2023-3722
CVE-2023-3722 Python POC for CVE-2023-3722 Avaya Aura Device Services Unrestricted File Upload RCE. This script will use a PUT request to upload a php file with an eight-digit randomly generated filename. Then it will make a GET request to retrieve this file and parse the output to get the comman...
Astra Linux – Vulnerability in Chromium
Using “after free” in Aura in Google Chrome before version 150.0.7871.128 allowed a local attacker to potentially exploit heap corruption through a malicious file. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of after-free in Aura in Google Chrome before version 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
The use of after free in Aura in Google Chrome before version 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of after-free in Aura in Google Chrome before version 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: Critical...
CLEANSTART-2024-WD91968 Use after free in Aura in Google Chrome on Linux prior to 89
Security vulnerability affects the chromium package. Use after free in Aura in Google Chrome on Linux prior to 89...
0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16443 more potentially affected by unknown CVE via adm-zip (>=0.1.4, <=0.6.0)
adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: unknown CVE Source advisory: SNYK:JS-ADMZIP-20335412...
0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16443 more potentially affected by unknown CVE via adm-zip (>=0.1.4, <=0.6.0)
adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: unknown CVE Source advisory: SNYK:JS-ADMZIP-20335421...
0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16443 more potentially affected by unknown CVE via adm-zip (>=0.1.4, <=0.6.0)
adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C6FG-446Q-CG94...
0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16443 more potentially affected by unknown CVE via adm-zip (>=0.1.4, <=0.6.0)
adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8238-W5PM-2374...
