nfstream

NFStreamrepo ist ein plattformübergreifendes Python-Framework, das schnelle, flexible und ausdrucksstarke Datenstrukturen bereitstellt, die die Arbeit mit Online- oder Offline-Netzwerkdaten einfach und intuitiv machen. Es soll Pythons grundlegender High-Level-Baustein für die praktische reale...

Security-Datasets

Security Datasets Das Security Datasets-Projekt ist eine Open-Source-Initiative, die bösartige und gutartige Datensätze von verschiedenen Plattformen zur Verfügung stellt, um die Datenanalyse und Bedrohungsforschung in der Infosec-Community zu beschleunigen. Dokumentation...

CVE-2021-41277

CVE-2021-41277 PoC Metabase एक ओपन सोर्स डेटा एनालिटिक्स प्लेटफ़ॉर्म है। मेटाबेस के कुछ संस्करणों में Local File Inclusion समस्या का पता चला है। यह निर्धारित करने के लिए कि लक्ष्य में यह भेद्यता है या नहीं, यहाँ PoC कोड दिया गया है। एक हमलावर मेटाबेस सर्वर में मनमानी फ़ाइलें पढ़ सकता है। बिल्ड...

WSO2 - Cross-Site Scripting

WSO2 contains a reflected cross-site scripting vulnerability in the Management Console of API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0,...

WSO2多款产品 安全漏洞

WSO2 API Manager is an API lifecycle management solution, WSO2 API Manager Analytics is an analytics component, and WSO2 API Control Plane is a control panel. A security vulnerability exists in a number of WSO2 products. The vulnerability stems from insufficient enforcement of permissions in the...

EUVD-2020-17418

Malware in sbrugna...

EUVD-2017-6151

Malware in sbrugna...

EUVD-2023-27718

Malicious code in bioql PyPI...

EUVD-2023-27719

Malicious code in bioql PyPI...

EUVD-2024-0054

Malicious code in bioql PyPI...

EUVD-2024-52859

Malicious code in bioql PyPI...

EUVD-2024-54233

Malicious code in bioql PyPI...

Human-Centred AI in FinTech: Developing a User Experience (UX) Research Point of View (PoV) Playbook

Advancements in Artificial Intelligence AI have significantly transformed the financial industry, enabling the development of more personalized and adaptable financial products and services. This research paper explores various instances where Human-Centred AI HCAI has facilitated these...

CVE-2024-52290

LF Edge eKuiper is a lightweight internet of things IoT data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service e.g. kuiperUser role can inject a cross-site scripting payload into Connection Configuration key Name confKey parameter. After thi...

CVE-2024-52290 Stored XSS in Configuration Key Functionality

LF Edge eKuiper is a lightweight internet of things IoT data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service e.g. kuiperUser role can inject a cross-site scripting payload into Connection Configuration key Name confKey parameter. After thi...

CVE-2025-24908

Overview The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' doubled triple dot slash sequences that can resolve to a location that is outside of that directory. CWE-35 Description Hitachi...

CVE-2024-52812

LF Edge eKuiper is an internet-of-things data analytics and stream processing engine. Prior to version 2.0.8, auser with rights to modify the service e.g. kuiperUser role can inject a cross-site scripting payload into the rule id parameter. Then, after any user with access to this service e.g...

CVE-2024-52812

LF Edge eKuiper is an internet-of-things data analytics and stream processing engine. Prior to version 2.0.8, auser with rights to modify the service e.g. kuiperUser role can inject a cross-site scripting payload into the rule id parameter. Then, after any user with access to this service e.g...

CVE-2025-27141

Metabase Enterprise Edition is affected by CVE-2025-27141: impersonation-enabled users can view cached question results that may contain data they should not access. Affected versions include 1.47.0 up to 1.50.35, 1.51.0 up to 1.51.13, 1.52.0 up to 1.52.10, and 1.53.x prior to the patched builds....

Arbitrary File Download Vulnerability in AnalyticsCloud of Beijing Zhiyuan Internet Software Co.

AnalyticsCloud AnalyticsCloud is a platform that integrates advanced data analytics technologies and tools to process data from a variety of data sources, including cloud data, local data, traditional data, and big data. An arbitrary file download vulnerability exists in AnalyticsCloud of Beijing...