30 matches found
HFish
Filosofía de diseño de HFish HFish es un honeypot gratuito de tipo comunitario, centrado en escenarios de seguridad empresarial. Desde tres escenarios: detección de compromiso en la red interna, percepción de amenazas externas y producción de inteligencia de amenazas, proporciona a los usuarios...
EUVD-2020-15241
Malware in sbrugna...
EUVD-2020-15092
Malware in sbrugna...
EUVD-2025-28436
Malicious code in bioql PyPI...
CVE-2025-5247
A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...
CVE-2025-5247
A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...
CVE-2025-5247
CVE-2025-5247 affects Gowabby HFish 0.1, specifically the function LoadUrl in file view/url.go . The vulnerability arises from manipulating the argument r , leading to improper authentication. It can be exploited remotely and an exploit has been disclosed publicly. Remediation guidance present in...
CVE-2025-5247 Gowabby HFish url.go LoadUrl improper authentication
A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...
CVE-2025-5247 Gowabby HFish url.go LoadUrl improper authentication
A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...
CVE-2025-5247: Improper Authentication
A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...
HFish 授权问题漏洞
HFish is a community-based free honeypot by Zachary Individual Developer. An authorization issue vulnerability exists in HFish version 0.1, which stems from improper authentication of parameter r by function LoadUrl in file viewurl.go...
PT-2025-23007 · Unknown · Gowabby Hfish
Name of the Vulnerable Software and Affected Versions: Gowabby HFish version 0.1 Description: A critical issue has been found in Gowabby HFish, affecting the LoadUrl function of the file viewurl.go. The manipulation of the argument r leads to improper authentication. This issue can be exploited...
CVE-2020-22481
An issue was discovered in HFish 0.5.1. When a payload is inserted where the password is entered, XSS code is triggered when the administrator views the information...
CVE-2020-22327
An issue was discovered in HFish 0.5.1. When a payload is inserted where the name is entered, XSS code is triggered when the administrator views the information...
CVE-2020-22327
An issue was discovered in HFish 0.5.1. When a payload is inserted where the name is entered, XSS code is triggered when the administrator views the information...
CVE-2020-22327
An issue was discovered in HFish 0.5.1. When a payload is inserted where the name is entered, XSS code is triggered when the administrator views the information...
Design/Logic Flaw
An issue was discovered in HFish 0.5.1. When a payload is inserted where the name is entered, XSS code is triggered when the administrator views the information...
HFish 跨站脚本漏洞
HFish is a community-based free honeypot open-sourced by HFish.io. A security vulnerability exists in HFish version 0.5.1. Attackers use the vulnerability to insert a payload in the location of the input name , when the administrator to view the information will trigger a cross-site scripting...