19357 matches found
Yordam-Kutuphane-Otomasyonunda-Coklu-HTML-Enjeksiyonu
Yordam-图书馆自动化系统中的多重HTML注入 CVE-2026-77818 · CVSS 3.1 6.1（中危）· 网络安全委员会 · 发布时间 2026-09-04 · TR-26-1011 状态： 漏洞已在 v22.2 版本中修复。受影响的安装必须升级到 v22.2 或更高版本。 概述 Yordam 图书馆自动化系统是土耳其大学、公共和机构图书馆中广泛使用的商业图书馆自动化及在线目录（OPAC）软件。该软件为本地部署（on-premise）；每家客户机构运行独立的副本。 在产品的 v22.1 版本中，存在三个相互独立的位置 的反射型 HTML...
CVE-2026-77393 Inductive Automation Ignition Incorrect Default Permissions
In Ignition 8.1.53 and earlier, the Gateway "Create Project Roles" setting shipped blank, which permitted any authenticated user to create projects if they can execute gateway scripts. Ignition 8.1.54 restricts project creation to Designer sessions and no longer relies on this setting. The 8.3...
CVE-2026-19727
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes. This issu...
CVE-2026-81859 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive information due to the use of a broken or risky cryptographic algorithm...
Orbit Tracer
Orbit Tracer Orbit Tracer Security Agent for Intelligent Security Remediation Automate security vulnerability analysis, risk assessment, and remediation across your entire codebase using AI and Orbit's knowledge graph The Problem Security teams face a critical challenge: Finding vulnerabilities i...
CVE-2026-77818
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing. This issue affects...
EUVD-2026-71213
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes. This issu...
CVE-2026-19727
CVE-2026-19727 is an XSS (targeting HTML attributes) vulnerability in the Yordam Information Technology Consulting Library Information and Document Automation Program , caused by improper neutralization of input during web page generation. The issue affects versions before v22.2 and is rated CVSS...
CVE-2026-19727 HTML Injection via Improper Input Sanitization in Yordam Informatics's Library Automation System
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes. This issu...
EUVD-2026-71101
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing. This issue affects...
CVE-2026-77818 Reflected HTML Injection via Form Hijacking in Yordam Informatics's Library Automation System
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing. This issue affects...
CVE-2026-77818
CVE-2026-77818 is a reflected HTML injection vulnerability in Yordam Informatics' Library Information and Document Automation Program (affects versions from v22.1 before v22.2 ), exploitable via form hijacking during web page generation. The vulnerability allows content spoofing and is rated CVSS...
HSC24RedTeamInfra
HSC24RedTeamInfra 用于红队基础设施自动化工作坊的幻灯片与代码...
DLLirant
DLLirant DLLirant 是一个用于在指定二进制文件上自动化 DLL 劫持和 DLL 代理研究的工具。 发现 DLL 劫持时的最终 PoC 输出： 旧版在线演示（与新版本类似） 如何安装 为 Windows x64 安装 LLVM（LLVM-version-win64.exe）：https://github.com/llvm/llvm-project/releases 安装过程中不要忘记勾选“将 LLVM 添加到当前用户的系统 PATH”选项。 如何使用 选择所需的 PE 文件，如果是 .exe，应用程序当前将搜索 DLL 搜索顺序劫持；如果你选择 DLL，应用程序将为你提供代...
TTPForge
TTPForge TTPForge 是一个网络攻击模拟平台，由 Sam Manzer @d3sch41n、 Alek Straumann @CrimsonK1ng 和 Geoff Pamerleau @Sy14r 设计并构建，并包含了来自 Meta 红队、蓝队和紫队 众多同仁的后续贡献。 Jayson Grace @l50 将项目迁移到 GitHub，并 协助完成了项目开源发布前的准备工作。 本项目在网络安全领域倡导紫队 方法，目标如下： 通过高保真模拟真实攻击者活动，帮助蓝队准确衡量其检测和响应能力。 通过将攻击打包为自动化、可重复的模拟，帮助红队提高其发现成果的 ROI/可操作性。...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation for Multiplatforms
Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 8 used by IBM Tivoli System Automation for Multiplatforms. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the...
LAST
L.A.S.T. Linux Automated Security scanning Tool the LAST tool you will ever use! This tool is used to automate the recon proces of Red Team Excercises. It gathers all the information and reports it back in an easy to read format. The script is made so it is possible for everyone to include his ow...
raptor
Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...
lscript
The lazy script has not been updated for a while due to me being very busy with my life. I will try my best to upload an update when I find the time Welcome to the LAZY script v2.1.4 A video Hackersploit made : https://www.youtube.com/watch?v=oBpo5sElrMY A video sstec made:...