126 matches found
wordlist_generator
wordlistgenerator wordlistgenerator 도구는 tomnomnom의 비디오 "Who, What, Where, When"에 언급된 기술을 사용하여 대상에 맞는 고유한 워드리스트를 생성합니다. gau에서 URL을 가져와 페이지의 디렉터리, 파일 이름 또는 단어를 추출합니다. 추가 기능으로 HTML 주석을 추출할 수 있습니다. 기본적으로 도구는 2000개의 URL만 요청하고 모든 단어와 디렉터리를 추출합니다. 워드리스트를 정리하기 위해 wordlistgenerator는 "denylists" 디렉터리 파일의 모...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hibernate-validator (UTSA-2026-093189)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093189 advisory. A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in...
Astra Linux – Vulnerability in Firefox
Firefox’s HTML parser did not correctly interpret HTML comment tags, leading to inconsistencies with other browsers. This vulnerability could have been exploited to embed user-controlled data within HTML comments on pages. This issue affects Firefox versions prior to 101...
CVE-2026-11402
The Services Section Block – Showcase Service Details in Grid or Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'link' Block Attribute in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-11402 Services Section Block <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Block Attribute
The Services Section Block – Showcase Service Details in Grid or Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'link' Block Attribute in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-5032
The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3. This is due to the plugin bypassing its entire output buffering and processing pipeline when the request's User-Agent header contains "W3 Total Cache", which causes raw...
Vulnogram 跨站脚本漏洞
Vulnogram is an open-source CVE vulnerability management and publishing tool developed by Vulnogram. Version 1.0.0 of Vulnogram contains a cross-site scripting vulnerability. This vulnerability stems from stored-xss annotations in HTML comments, which may allow remote attackers to inject XSS...
When Skills Lie: Hidden-Comment Injection in LLM Agents
LLM agents often rely on Skills to describe available tools and recommended procedures. We study a hidden-comment prompt injection risk in this documentation layer: when a Markdown Skill is rendered to HTML, HTML comment blocks can become invisible to human reviewers, yet the raw text may still b...
CVE-2022-23549
Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 2.9.0.beta16 on the beta and tests-passed branches, users can create posts with raw body longer than the maxlength site setting by including html comments that are not counted toward the...
EUVD-2009-2426
Malware in sbrugna...
EUVD-2007-4056
Malware in sbrugna...
EUVD-2017-12959
Malware in sbrugna...
EUVD-2001-1399
Malware in sbrugna...
EUVD-2020-0269
Malware in sbrugna...
EUVD-2014-8556
Malware in sbrugna...
EUVD-2020-23291
Malware in sbrugna...
EUVD-2007-0476
Malware in sbrugna...
EUVD-2007-0535
Malware in sbrugna...