ladder

Ladder English | 简体中文 Ladder 是一个 HTTP 网页代理。 Ladder 是一个面向开发者的工具，用于测试和分析现代网站上的付费墙实现与内容投放行为。 它可以帮助开发者、研究人员和发布者模拟不同的客户端环境（例如浏览器和爬虫），观察网站在不同条件下如何返回内容。这对于调试付费墙配置、验证访问控制和 HTTP 头、确认不同 User-Agent 下行为一致等场景都非常有用。 Ladder 仅用于合法的测试、研究和质量保障目的，使用时应遵守相关法律法规以及目标网站的服务条款。 工作原理 root@kitploit: sequenceDiagram...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

Malicious code in dolyame-boxy-atom-bnpl-info-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfa5d8518650ddd83b31e9587264a2ed049a47db5c8452af6d62eb50e9fa336 On load, index.js requires./loader.js which reconstructs anonymous host names via array-join obfuscation...

CVE-2026-64874

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs...

EUVD-2026-47912

Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...

EUVD-2026-47914

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs...

CVE-2026-64874

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs...

CVE-2026-9066

The WP Compress WordPress plugin before 7.10.04 does not validate the value of a query parameter that controls the asset CDN host before using it to build the URLs of JavaScript files emitted on the page, leading to Reflected XSS. When a visitor follows a crafted link, the WP Compress WordPress...

EUVD-2026-47886

The WP Compress WordPress plugin before 7.10.04 does not validate the value of a query parameter that controls the asset CDN host before using it to build the URLs of JavaScript files emitted on the page, leading to Reflected XSS. When a visitor follows a crafted link, the WP Compress WordPress...

PT-2026-63609

CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...

PT-2026-63604

Name of the Vulnerable Software and Affected Versions Cache Cleaner Pro extension for Joomla affected versions not specified Description CDN credentials are exposed within administrator request URLs, potentially allowing unauthorized access to the Content Delivery Network configuration...

CVE-2026-62386

The Grav API plugin getgrav/grav-plugin-api before 1.0.0-rc.16 accepts JWT access tokens through the ?token= URL query parameter on every API route JwtAuthenticator::extractBearerToken fallback. Because tokens are embedded in URLs, they are logged verbatim in web server access logs, leaked via th...

CVE-2026-50427

Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-50427

CVE-2026-50427 affects Content Delivery Manager. Description: use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. CVSS v3.1: 7.8 (Local, Low user interaction, Privilege Escalation, high impact on confidentiality, integrity, availability). Connected sourc...

CVE-2026-50427 Content Delivery Manager Elevation of Privilege Vulnerability

...

CVE-2026-50427 Content Delivery Manager Elevation of Privilege Vulnerability

...

Content Delivery Manager Elevation of Privilege Vulnerability

Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally...

PT-2026-58406

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use after free issue in the Content Delivery Manager allows an authorized local attacker to elevate privileges. Use after free is a memory corruption flaw that occurs when an application...

MAL-2026-10144 Malicious code in mdb-vite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d24ffe7ac6e64aab50d9ba84f5b06ffd1047663698d25071770749b36afe6543 The package's default export getPlugin performs an HTTPS fetch to https://svganchordev.net/icons/107 with URL components split across protocol, domai...

Malicious code in px8my (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da37dfbaa4b355a75e38c244bc5614299ecc5a1f3bc1dd072fdc7c4f2dc13b9 px8my's main entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL https://mfmz.gzhrjq.cn/H.html?c=0gjr...