Lucene search
+L

42 matches found

Kitploit
Kitploit
โ€ขadded 2026/10/04 5:47 a.m.โ€ข19 views

json-sanitizer

json-sanitizer JSON๊ณผ ์œ ์‚ฌํ•œ ์ฝ˜ํ…์ธ ๊ฐ€ ์ฃผ์–ด์ง€๋ฉด JSON Sanitizer๋Š” ์ด๋ฅผ ์œ ํšจํ•œ JSON์œผ๋กœ ๋ณ€ํ™˜ํ•ฉ๋‹ˆ๋‹ค. ์‹œ์ž‘ํ•˜๊ธฐ - ์—ฐ๋ฝ์ฒ˜ ์ด๋Š” ๋ฐ์ดํ„ฐ ํŒŒ์ดํ”„๋ผ์ธ์˜ ์–‘์ชฝ ๋์— ์—ฐ๊ฒฐํ•˜์—ฌ Postel์˜ ์›์น™์„ ์ถฉ์กฑ์‹œํ‚ค๋Š” ๋ฐ ๋„์›€์ด ๋  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์ž์‹ ์ด ํ•˜๋Š” ์ผ์—๋Š” ๋ณด์ˆ˜์ ์œผ๋กœ, ๋‹ค๋ฅธ ์‚ฌ๋žŒ์—๊ฒŒ์„œ ๋ฐ›์•„๋“ค์ผ ๋•Œ๋Š” ๊ด€๋Œ€ํ•˜๊ฒŒ ๋‹ค๋ฅธ ์‚ฌ๋žŒ์—๊ฒŒ์„œ ๋ฐ›์€ JSON๊ณผ ์œ ์‚ฌํ•œ ์ฝ˜ํ…์ธ ์— ์ ์šฉํ•˜๋ฉด, ์‚ฌ์šฉ ์ค‘์ธ ๋ชจ๋“  ํŒŒ์„œ๋ฅผ ๋งŒ์กฑ์‹œํ‚ฌ ์ˆ˜ ์žˆ๋Š” ์ž˜ ๊ตฌ์„ฑ๋œ JSON์„ ์ƒ์„ฑํ•ฉ๋‹ˆ๋‹ค. ๋ณด๋‚ด๊ธฐ ์ „์— ์ถœ๋ ฅ์— ์ ์šฉํ•˜๋ฉด, ์ธ์ฝ”๋”ฉ์˜ ์‚ฌ์†Œํ•œ ์˜ค๋ฅ˜๋ฅผ ๊ฐ•์ œ๋กœ ์ˆ˜์ •ํ•˜๊ณ ...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
โ€ขadded 2026/10/03 11:14 p.m.โ€ข16 views

tenzir

๋ณด์•ˆ ํŒ€์„ ์œ„ํ•œ ๋ฐ์ดํ„ฐ ํŒŒ์ดํ”„๋ผ์ธ ํ…”๋ ˆ๋ฉ”ํŠธ๋ฆฌ๋ฅผ ์ˆ˜์ง‘, ๋ณ€ํ™˜, ๋ณด๊ฐ•, ๋ผ์šฐํŒ…ํ•˜์„ธ์š”โ€”๋ชจ๋‘ ํ•œ๊ณณ์—์„œ. Tenzir๋ž€ ๋ฌด์—‡์ธ๊ฐ€์š”? Tenzir๋Š” ๋ณด์•ˆ ํŒ€์„ ์œ„ํ•œ ๋ฐ์ดํ„ฐ ํŒŒ์ดํ”„๋ผ์ธ ์—”์ง„์ž…๋‹ˆ๋‹ค. ๋Œ€๊ทœ๋ชจ๋กœ ๋ณด์•ˆ ํ…”๋ ˆ๋ฉ”ํŠธ๋ฆฌ ๋ฐ์ดํ„ฐ๋ฅผ ์ˆ˜์ง‘, ํŒŒ์‹ฑ, ๊ฐ€๊ณต, ์ •๊ทœํ™”, ์ง‘๊ณ„, ์ €์žฅ, ์ฟผ๋ฆฌ, ๋ผ์šฐํŒ…ํ•ด์•ผ ํ•œ๋‹ค๋ฉด, ํŒŒ์ดํ”„๋ผ์ธ์ด ๋ฐ์ดํ„ฐ ํ๋ฆ„์„ ๊ด€๋ฆฌํ•˜๋Š” ๋ฐฉ์‹์„ ์ข‹์•„ํ•˜๊ฒŒ ๋  ๊ฒƒ์ž…๋‹ˆ๋‹ค. Tenzir๋ฅผ ์‚ฌ์šฉํ•˜๋ฉด ๋‹ค์–‘ํ•œ ์†Œ์Šค์˜ ๋ฐ์ดํ„ฐ๋ฅผ ๋น ๋ฅด๊ฒŒ ์˜จ๋ณด๋”ฉํ•˜๊ณ  ์ €์žฅํ•˜๊ณ , ๋ฐ์ดํ„ฐ ๋ณผ๋ฅจ์„ ์ค„์—ฌ ํด๋ผ์šฐ๋“œ ๋ฐ ๋ฐ์ดํ„ฐ ๋น„์šฉ์„ ์ตœ์ ํ™”ํ•˜๋ฉฐ, ์ŠคํŠธ๋ฆผ ๋‚ด์—์„œ ํƒ์ง€๋ฅผ ์‹คํ–‰ํ•˜๊ณ  ๋ถ„์„์„ ์ˆ˜ํ–‰...

5.8AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/10/02 11:00 p.m.โ€ข11 views

json-sanitizer

json-sanitizer JSON๊ณผ ์œ ์‚ฌํ•œ ์ฝ˜ํ…์ธ ๊ฐ€ ์ฃผ์–ด์ง€๋ฉด JSON Sanitizer๋Š” ์ด๋ฅผ ์œ ํšจํ•œ JSON์œผ๋กœ ๋ณ€ํ™˜ํ•ฉ๋‹ˆ๋‹ค. ์‹œ์ž‘ํ•˜๊ธฐ - ์—ฐ๋ฝ์ฒ˜ ์ด๊ฒƒ์€ ๋ฐ์ดํ„ฐ ํŒŒ์ดํ”„๋ผ์ธ์˜ ์–‘์ชฝ ๋์— ๋ถ€์ฐฉ๋˜์–ด Postel์˜ ์›์น™์„ ์ถฉ์กฑํ•˜๋Š” ๋ฐ ๋„์›€์„ ์ค„ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค: ์ž์‹ ์ด ํ•˜๋Š” ์ผ์—๋Š” ๋ณด์ˆ˜์ ์œผ๋กœ, ๋‚จ์—๊ฒŒ์„œ ๋ฐ›์•„๋“ค์ผ ๋•Œ๋Š” ๋„ˆ๊ทธ๋Ÿฝ๊ฒŒ ๋‹ค๋ฅธ ์‚ฌ๋žŒ์˜ JSON๊ณผ ์œ ์‚ฌํ•œ ์ฝ˜ํ…์ธ ์— ์ ์šฉํ•˜๋ฉด, ์ž˜ ๊ตฌ์„ฑ๋œ JSON์„ ์ƒ์„ฑํ•˜์—ฌ ์‚ฌ์šฉํ•˜๋Š” ๋ชจ๋“  ํŒŒ์„œ๋ฅผ ๋งŒ์กฑ์‹œํ‚ฌ ๊ฒƒ์ž…๋‹ˆ๋‹ค. ๋ณด๋‚ด๊ธฐ ์ „์— ์ถœ๋ ฅ์— ์ ์šฉํ•˜๋ฉด, ์ธ์ฝ”๋”ฉ์˜ ์‚ฌ์†Œํ•œ ์˜ค๋ฅ˜๋ฅผ ๊ฐ•์ œ ๋ณ€ํ™˜ํ•˜์—ฌ JSON์„ HTML ๋ฐ...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
โ€ขadded 2026/09/04 5:51 a.m.โ€ข13 views

tenzir v6.15.0

Data Pipelines for Security Teams Collect, transform, enrich, and route your telemetryโ€”all in one place. What is Tenzir? Tenzir is the data pipeline engine for security teams. If you need to collect, parse, shape, normalize, aggregate, store, query, and route security telemetry data at scale,...

5.9AI score
SaveExploits0
Snyk
Snyk
โ€ขadded 2026/07/13 4:37 p.m.โ€ข8 views

Use of Incorrectly-Resolved Name or Reference

Overview apache-airflow-providers-fab is a Provider package apache-airflow-providers-fab for Apache Airflow Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference through the resourcename function in permissions.py and the mirrored core permissions modul...

8.6CVSS6.1AI score0.00599EPSS
SaveExploits0References3
GithubExploit
GithubExploit
โ€ขadded 2026/05/26 3:04 a.m.โ€ข185 views

ndaybench

ndaybench A benchmark for measuring whether AI agents can bui...

7CVSS7.6AI score0.30391EPSS
SaveExploits7
OSSF Malicious Packages
OSSF Malicious Packages
โ€ขadded 2026/05/24 1:45 a.m.โ€ข23 views

Malicious code in data-pipeline-check (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ca0e77c4eda50057aa04c615897f067ee866d02fc1e2fe65cdbb263d3081e8 On import pipelinecheck, the package spawns a daemon thread that, after a random 3-15 second delay, walks /.ssh, /.aws, /.ethereum, /.config, /.docke...

5.9AI score
SaveExploits0References7
GithubExploit
GithubExploit
โ€ขadded 2026/02/20 3:28 p.m.โ€ข179 views

refinance-poc

Refi-Ready POC This project is a Proof-of-Concept for a serve...

5.5AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
โ€ขadded 2025/11/19 12:00 a.m.โ€ข1 views

CVE-2025-10702: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JD...

8.6CVSS6.2AI score0.00299EPSS
SaveExploits0References1
CNNVD
CNNVD
โ€ขadded 2025/11/19 12:00 a.m.โ€ข14 views

Progressๅคšๆฌพไบงๅ“ ไปฃ็ ๆณจๅ…ฅๆผๆดž

Progress Hybrid Data Pipeline and others are products of Progress, Inc.Progress Hybrid Data Pipeline is a data pipeline software.Progress Hybrid Data Pipeline Server is a data pipeline server. Progress DataDirect Connect for JDBC is a set of high-performance JDBC drivers. A code injection...

8.6CVSS7.9AI score0.00299EPSS
SaveExploits0References1
CNNVD
CNNVD
โ€ขadded 2025/11/19 12:00 a.m.โ€ข30 views

Progressๅคšๆฌพไบงๅ“ ไปฃ็ ๆณจๅ…ฅๆผๆดž

Progress Hybrid Data Pipeline and others are products of Progress, Inc.Progress Hybrid Data Pipeline is a data pipeline software.Progress Hybrid Data Pipeline Server is a data pipeline server. Progress DataDirect Connect for JDBC is a set of high-performance JDBC drivers. A code injection...

8.6CVSS7.7AI score0.00299EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
โ€ขadded 2025/11/19 12:00 a.m.โ€ข2 views

CVE-2025-10703: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JD...

8.6CVSS6AI score0.00299EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
โ€ขadded 2025/11/02 12:00 a.m.โ€ข23 views

AthenaBench: A Dynamic Benchmark for Evaluating LLMs in Cyber Threat Intelligence

Large Language Models LLMs have demonstrated strong capabilities in natural language reasoning, yet their application to Cyber Threat Intelligence CTI remains limited. CTI analysis involves distilling large volumes of unstructured reports into actionable knowledge, a process where LLMs could...

6.8AI score
SaveExploits0
EUVD
EUVD
โ€ขadded 2025/10/03 8:07 p.m.โ€ข31 views

EUVD-2025-22997

Malicious code in bioql PyPI...

8.1CVSS6.6AI score0.00333EPSS
SaveExploits0References1
EUVD
EUVD
โ€ขadded 2025/10/03 8:07 p.m.โ€ข22 views

EUVD-2023-0128

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00659EPSS
SaveExploits0References4
GithubExploit
GithubExploit
โ€ขadded 2025/09/08 9:37 a.m.โ€ข246 views

data_pipeline_poc

๐Ÿ“ฆ Catalogue Produit Unifiรฉ โ€” Data Pipeline ๐ŸŽฏ Objectif Ce...

8.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
โ€ขadded 2025/07/31 1:49 p.m.โ€ข18 views

CVE-2025-6505

Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux. This vulnerability allows attackers to combine credentials from different sources, potentially leading to client impersonation and unauthorized access. Whe...

8.1CVSS7.1AI score0.00333EPSS
SaveExploits0References1
OSV
OSV
โ€ขadded 2025/07/29 1:15 p.m.โ€ข14 views

CVE-2025-6505

Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux. This vulnerability allows attackers to combine credentials from different sources, potentially leading to client impersonation and unauthorized access. Whe...

8.1CVSS5.8AI score0.00333EPSS
SaveExploits0References1
NVD
NVD
โ€ขadded 2025/07/29 1:15 p.m.โ€ข40 views

CVE-2025-6505

Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux. This vulnerability allows attackers to combine credentials from different sources, potentially leading to client impersonation and unauthorized access. Whe...

8.1CVSS0.00333EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
โ€ขadded 2025/07/29 12:56 p.m.โ€ข18 views

CVE-2025-6505

Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux. This vulnerability allows attackers to combine credentials from different sources, potentially leading to client impersonation and unauthorized access. Whe...

8.1CVSS6.5AI score0.00333EPSS
SaveExploits0References1
Rows per page
Query Builder