42 matches found
json-sanitizer
json-sanitizer JSON๊ณผ ์ ์ฌํ ์ฝํ ์ธ ๊ฐ ์ฃผ์ด์ง๋ฉด JSON Sanitizer๋ ์ด๋ฅผ ์ ํจํ JSON์ผ๋ก ๋ณํํฉ๋๋ค. ์์ํ๊ธฐ - ์ฐ๋ฝ์ฒ ์ด๋ ๋ฐ์ดํฐ ํ์ดํ๋ผ์ธ์ ์์ชฝ ๋์ ์ฐ๊ฒฐํ์ฌ Postel์ ์์น์ ์ถฉ์กฑ์ํค๋ ๋ฐ ๋์์ด ๋ ์ ์์ต๋๋ค. ์์ ์ด ํ๋ ์ผ์๋ ๋ณด์์ ์ผ๋ก, ๋ค๋ฅธ ์ฌ๋์๊ฒ์ ๋ฐ์๋ค์ผ ๋๋ ๊ด๋ํ๊ฒ ๋ค๋ฅธ ์ฌ๋์๊ฒ์ ๋ฐ์ JSON๊ณผ ์ ์ฌํ ์ฝํ ์ธ ์ ์ ์ฉํ๋ฉด, ์ฌ์ฉ ์ค์ธ ๋ชจ๋ ํ์๋ฅผ ๋ง์กฑ์ํฌ ์ ์๋ ์ ๊ตฌ์ฑ๋ JSON์ ์์ฑํฉ๋๋ค. ๋ณด๋ด๊ธฐ ์ ์ ์ถ๋ ฅ์ ์ ์ฉํ๋ฉด, ์ธ์ฝ๋ฉ์ ์ฌ์ํ ์ค๋ฅ๋ฅผ ๊ฐ์ ๋ก ์์ ํ๊ณ ...
tenzir
๋ณด์ ํ์ ์ํ ๋ฐ์ดํฐ ํ์ดํ๋ผ์ธ ํ ๋ ๋ฉํธ๋ฆฌ๋ฅผ ์์ง, ๋ณํ, ๋ณด๊ฐ, ๋ผ์ฐํ ํ์ธ์โ๋ชจ๋ ํ๊ณณ์์. Tenzir๋ ๋ฌด์์ธ๊ฐ์? Tenzir๋ ๋ณด์ ํ์ ์ํ ๋ฐ์ดํฐ ํ์ดํ๋ผ์ธ ์์ง์ ๋๋ค. ๋๊ท๋ชจ๋ก ๋ณด์ ํ ๋ ๋ฉํธ๋ฆฌ ๋ฐ์ดํฐ๋ฅผ ์์ง, ํ์ฑ, ๊ฐ๊ณต, ์ ๊ทํ, ์ง๊ณ, ์ ์ฅ, ์ฟผ๋ฆฌ, ๋ผ์ฐํ ํด์ผ ํ๋ค๋ฉด, ํ์ดํ๋ผ์ธ์ด ๋ฐ์ดํฐ ํ๋ฆ์ ๊ด๋ฆฌํ๋ ๋ฐฉ์์ ์ข์ํ๊ฒ ๋ ๊ฒ์ ๋๋ค. Tenzir๋ฅผ ์ฌ์ฉํ๋ฉด ๋ค์ํ ์์ค์ ๋ฐ์ดํฐ๋ฅผ ๋น ๋ฅด๊ฒ ์จ๋ณด๋ฉํ๊ณ ์ ์ฅํ๊ณ , ๋ฐ์ดํฐ ๋ณผ๋ฅจ์ ์ค์ฌ ํด๋ผ์ฐ๋ ๋ฐ ๋ฐ์ดํฐ ๋น์ฉ์ ์ต์ ํํ๋ฉฐ, ์คํธ๋ฆผ ๋ด์์ ํ์ง๋ฅผ ์คํํ๊ณ ๋ถ์์ ์ํ...
json-sanitizer
json-sanitizer JSON๊ณผ ์ ์ฌํ ์ฝํ ์ธ ๊ฐ ์ฃผ์ด์ง๋ฉด JSON Sanitizer๋ ์ด๋ฅผ ์ ํจํ JSON์ผ๋ก ๋ณํํฉ๋๋ค. ์์ํ๊ธฐ - ์ฐ๋ฝ์ฒ ์ด๊ฒ์ ๋ฐ์ดํฐ ํ์ดํ๋ผ์ธ์ ์์ชฝ ๋์ ๋ถ์ฐฉ๋์ด Postel์ ์์น์ ์ถฉ์กฑํ๋ ๋ฐ ๋์์ ์ค ์ ์์ต๋๋ค: ์์ ์ด ํ๋ ์ผ์๋ ๋ณด์์ ์ผ๋ก, ๋จ์๊ฒ์ ๋ฐ์๋ค์ผ ๋๋ ๋๊ทธ๋ฝ๊ฒ ๋ค๋ฅธ ์ฌ๋์ JSON๊ณผ ์ ์ฌํ ์ฝํ ์ธ ์ ์ ์ฉํ๋ฉด, ์ ๊ตฌ์ฑ๋ JSON์ ์์ฑํ์ฌ ์ฌ์ฉํ๋ ๋ชจ๋ ํ์๋ฅผ ๋ง์กฑ์ํฌ ๊ฒ์ ๋๋ค. ๋ณด๋ด๊ธฐ ์ ์ ์ถ๋ ฅ์ ์ ์ฉํ๋ฉด, ์ธ์ฝ๋ฉ์ ์ฌ์ํ ์ค๋ฅ๋ฅผ ๊ฐ์ ๋ณํํ์ฌ JSON์ HTML ๋ฐ...
tenzir v6.15.0
Data Pipelines for Security Teams Collect, transform, enrich, and route your telemetryโall in one place. What is Tenzir? Tenzir is the data pipeline engine for security teams. If you need to collect, parse, shape, normalize, aggregate, store, query, and route security telemetry data at scale,...
Use of Incorrectly-Resolved Name or Reference
Overview apache-airflow-providers-fab is a Provider package apache-airflow-providers-fab for Apache Airflow Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference through the resourcename function in permissions.py and the mirrored core permissions modul...
ndaybench
ndaybench A benchmark for measuring whether AI agents can bui...
Malicious code in data-pipeline-check (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ca0e77c4eda50057aa04c615897f067ee866d02fc1e2fe65cdbb263d3081e8 On import pipelinecheck, the package spawns a daemon thread that, after a random 3-15 second delay, walks /.ssh, /.aws, /.ethereum, /.config, /.docke...
refinance-poc
Refi-Ready POC This project is a Proof-of-Concept for a serve...
CVE-2025-10702: Improper Control of Generation of Code
Improper Control of Generation of Code 'Code Injection' vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JD...
Progressๅคๆฌพไบงๅ ไปฃ็ ๆณจๅ ฅๆผๆด
Progress Hybrid Data Pipeline and others are products of Progress, Inc.Progress Hybrid Data Pipeline is a data pipeline software.Progress Hybrid Data Pipeline Server is a data pipeline server. Progress DataDirect Connect for JDBC is a set of high-performance JDBC drivers. A code injection...
Progressๅคๆฌพไบงๅ ไปฃ็ ๆณจๅ ฅๆผๆด
Progress Hybrid Data Pipeline and others are products of Progress, Inc.Progress Hybrid Data Pipeline is a data pipeline software.Progress Hybrid Data Pipeline Server is a data pipeline server. Progress DataDirect Connect for JDBC is a set of high-performance JDBC drivers. A code injection...
CVE-2025-10703: Improper Control of Generation of Code
Improper Control of Generation of Code 'Code Injection' vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JD...
AthenaBench: A Dynamic Benchmark for Evaluating LLMs in Cyber Threat Intelligence
Large Language Models LLMs have demonstrated strong capabilities in natural language reasoning, yet their application to Cyber Threat Intelligence CTI remains limited. CTI analysis involves distilling large volumes of unstructured reports into actionable knowledge, a process where LLMs could...
EUVD-2025-22997
Malicious code in bioql PyPI...
EUVD-2023-0128
Malicious code in bioql PyPI...
data_pipeline_poc
๐ฆ Catalogue Produit Unifiรฉ โ Data Pipeline ๐ฏ Objectif Ce...
CVE-2025-6505
Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux. This vulnerability allows attackers to combine credentials from different sources, potentially leading to client impersonation and unauthorized access. Whe...
CVE-2025-6505
Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux. This vulnerability allows attackers to combine credentials from different sources, potentially leading to client impersonation and unauthorized access. Whe...
CVE-2025-6505
Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux. This vulnerability allows attackers to combine credentials from different sources, potentially leading to client impersonation and unauthorized access. Whe...
CVE-2025-6505
Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux. This vulnerability allows attackers to combine credentials from different sources, potentially leading to client impersonation and unauthorized access. Whe...