Needle

Needle Chrome扩展，一键访问你在各大平台的漏洞赏金提交面板 + 公开披露报告 + bugbountytip Needle是你唯一需要的Chrome扩展，只需一键即可访问你在各大平台的漏洞提交信息。 无需创建书签、无需在地址栏输入网址、也无需处理自动补全的麻烦。 目前包含的列表如下： 1. Hackerone 2. Bugcrowd 3. Intigriti 4. Yes we hack 以及附加功能： 1. H1公开披露报告（来自 h1.nobbd.de） 2. bugbountytips 链接（通过 @TheBugBot） 截图-...

needle

Needle Needle 是一个开源、模块化的框架，旨在简化 iOS 应用安全评估的流程。 注意：此工具已停用，不再维护。我们保留原始项目仅供存档。 Needle 最初是为 iOS 9 和 iOS 10 设计的。此后，Frida 发布并成为移动安全评估的事实标准工具。后来 Needle 中实现了一些常见的 Frida 移动安全脚本，这些脚本在某些情况下表现更好，或解决了 Needle 自定义工具中的一些问题。 随着 iOS 11 的发布，新的安全保护措施对用户有利，但对 Needle 不利。这些增强功能实际上破坏了 Needle 的功能，因此 F-Secure 面临两个选择： 从头重写...

Removing the NEEDLE in the Haystack: Backdoor Removal in LLMs Via Weight Orthogonalisation

Backdoor attacks can be implanted in Large Language Models LLMs during training, causing unwanted behaviour when a trigger appears in the input. Existing backdoor defences for LLMs attempt to remove the backdoor but inadvertently shift the model's output distribution to benign prompts, which can...

CVE-2023-0179-POC-

CVE-2023-0179 POC Créditos a https://github.com/TurtleARM Pasos para reproducir Instala Ubuntu-22.04.5-live-server-iso y realiza una instalación completa de la versión, pero no actualices el sistema. Instala la versión 6.1.6 del kernel de Linux en la máquina virtual con la versión de Ubuntu...

@noema/mfs (>=0.1.0, <=0.3.0), @storm-software/config-tools (>=1.28.2, <=1.30.2) +1 more potentially affected by unknown CVE via @humanfs/node (>=0.11.0, <=0.16.7)

@humanfs/node NPM version =0.11.0, =0.1.0, =1.28.2, =3.0.0, =3.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-P498-V437-472G...

Malicious trading website drops malware that hands your browser to attackers

During our threat hunting, we found a campaign using the same malware loader from our previous research to deliver a different threat: Needle Stealer , data-stealing malware designed to quietly harvest sensitive information from infected devices, including browser data, login sessions, and...

Jailbreaking in the Haystack

Recent advances in long-context language models LMs have enabled million-token inputs, expanding their capabilities across complex tasks like computer-use agents. Yet, the safety implications of these extended contexts remain unclear. To bridge this gap, we introduce NINJA short for...

EUVD-2006-0160

Malware in sbrugna...

CVE-2023-52070

JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the 'setSeriesNeedleint index, int type' method. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have bee...

Important: Red Hat Security Advisory: openstack-neutron security update

An update for openstack-neutron is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 Juno for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: openstack-neutron security update

An update for openstack-neutron is now available for Red Hat OpenStack Platform 8.0 Liberty. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

CVE-2006-5430

Cross-site scripting XSS vulnerability in the search functionality in db-central dbc Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-5430

CVE-2006-5430 is an XSS vulnerability affecting db-central (dbc) Enterprise CMS and db-central CMS, exploitable through the search needle parameter. The core issue is a reflected/script injection in the search functionality, enabling remote attackers to inject arbitrary script/HTML. The CVSS v2 v...

CVE-2006-5430

Cross-site scripting XSS vulnerability in the search functionality in db-central dbc Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-5430: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the search functionality in db-central dbc Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-0152: Undefined Security Weakness

Cross-site scripting XSS in searchresult.php in phpChamber 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Bandmin 1.4 XSS Exploit

Bandmin 1.4 XSS Exploit by Silent Needle A:BACKGROUND Bandmin is a cgi script show you the bandwidth for the sites in the server. B:DESCRIPTION The cross site scripting allow you to print a html or javascript or others in the webpage when it just open not write in the page. C:EXPLOIT These are th...