CVE-2026-102784 Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0

Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST. addLanguage does not require POST inside the action and reads url and zip through the generic request...

CVE-2026-102784 Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0

Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST. addLanguage does not require POST inside the action and reads url and zip through the generic request...

CVE-2026-102784

The Joomla Extension - balbooa.com - Gridbox (versions

CVE-2023-23752

CVE-2023-23752 Joomla 信息泄露利用代码，使用 C++ 编写。...

cve-2013-2094

= CVE-2013-2094 的利用代码 http://timetobleed.com/a-closer-look-at-a-recent-privilege-escalation-bug-in-linux-cve-2013-2094/ == 构建方法 你需要像这样编译你选择的 C 文件： gcc -O2 file-name.c 需要 -O2 参数，因为漏洞利用的实际运作方式（更多信息请参阅博客文章）。 == 为什么 我认为原始的漏洞利用代码很酷且非常有趣，但对初学者来说难以理解，因此我决定稍微重写它，添加大量注释，并撰写一篇关于它的博客文章。...

IfritProxy

🔥 AI 驱动的威胁欺骗与情报平台 将攻击者转化为情报来源，通过自适应蜜罐响应 📦 快速开始 • ✨ 特性 • 🔄 工作原理 • 📚 文档 • 🔌 API 由社区提供 🎯 什么是 IFRIT？ IFRIT 是一个智能反向代理 ，位于互联网和你的应用程序之间，实时分析每个请求。合法流量无缝通过。恶意流量？它会获得 AI 生成的蜜罐响应，浪费攻击者的时间，同时你收集情报。 🏗️ 系统架构 🎨 点击展开交互式图表 mermaid graph TB subgraph Internet A👤 Attacker L✅ Legitimate User end subgraph "IFRIT Proxy...

deleting-the-trace

针对使用工具代理的控制令牌注入攻击 针对使用工具的语言模型代理的两种输入级攻击研究的代码和记录测量结果。第一种攻击将模型自身通道控制令牌的短字符串附加到不可信输入中；分词器将其读取为已关闭的推理通道，因此模型不输出思维链，直接进行工具调用。这删除了监控器所依赖的推理轨迹，并且在模型原本会拒绝的请求上，将拒绝转化为已完成的动作。第二个结果是，相同的工具调用生成是否实际触发由测试框架解析器而非模型决定，因此代理的鲁棒性是模型及其解码和解析测试框架的联合属性。 每个实验都以全精度（bfloat16）运行，通过发布的工具沙箱进行贪婪解码，results/ 下记录的 JSON 完全由这里的脚本生成...

Network-Detection-Engine

バージョン: 0.001 ネットワーク検出エンジン 軽量な'Network Intrusion Detection Engine'で、ライブトラフィックをキャプチャし、実際のライブ攻撃をリアルタイムで検出します。Zig0.15.2。 機能 - libpcapを使用したライブパケットキャプチャ - カスタムパケット解析: - Ethernet - IPv4 - TCP / UDP / ICMP - 攻撃検出: - SYN Flood検出 - ICMP Flood検出 - TCP/UDPポートスキャン検出 - Ping of Death - シグネチャベースの検出: - SQLインジェクショ...

CVE-2026-107224

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, a Zip64 uncompressed size with the high bit set is converted from uint64 to a negative int64 before signed size-limit checks and allocation. ReadZipReader obtains UncompressedSize64 throu...

CVE-2026-107222

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditional-format extraction indexes required child slices or dereferences an optional colorScale child without validating malformed rule structure. GetConditionalFormats reaches...

CVE-2026-107224

The Excelize Go library (versions 2.1.0 to 2.11.0 ) is vulnerable to a panic during workbook opening due to an integer overflow/wraparound . When a crafted Zip64 entry declares an uncompressed size between $2^{63}$ and $2^{64}-1$, the library converts the uint64 value into a negative int64. This ...

CVE-2026-107223 Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, flatCols expands file-loaded column ranges without validating Min and Max against the worksheet column limit. SetColWidth reaches flatCols, which expands xlsxCol.Min through xlsxCol.Max...

CVE-2026-107223 Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, flatCols expands file-loaded column ranges without validating Min and Max against the worksheet column limit. SetColWidth reaches flatCols, which expands xlsxCol.Min through xlsxCol.Max...

CVE-2026-107222 Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditional-format extraction indexes required child slices or dereferences an optional colorScale child without validating malformed rule structure. GetConditionalFormats reaches...

CVE-2026-107222

The Excelize Go library, used for reading and writing Microsoft Excel spreadsheets, is vulnerable in versions 2.7.0 to 2.11.0 . The GetConditionalFormats function fails to perform sufficient length or nil checks when extracting conditional-formatting rules. Specifically, it indexes required child...

CVE-2026-107221 Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

CVE-2026-107221 Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

CVE-2026-107221 Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

CVE-2026-107220 Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.1 to 2.11.0, mergeCellsParser leaves the cached rectangle empty for an empty mergeCell ref and then passes that empty slice to cellInRange without a length check. GetCellValue reaches mergeCellsParser...

EUVD-2026-94550

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.1 to 2.11.0, mergeCellsParser leaves the cached rectangle empty for an empty mergeCell ref and then passes that empty slice to cellInRange without a length check. GetCellValue reaches mergeCellsParser...