Needle

Needle 다양한 플랫폼의 버그 바운티 제출 대시보드 + 공개된 보고서 + bugbountytip에 즉시 액세스할 수 있는 Chrome 확장 프로그램 Needle은 여러 플랫폼에서 버그 제출에 원클릭으로 액세스하기 위해 필요한 유일한 Chrome 확장 프로그램입니다. 북마크를 만들거나 URL 표시줄에 입력하고 자동 완성 문제로 번거로울 필요가 없습니다. 현재 포함된 목록은 다음과 같습니다. 1. Hackerone 2. Bugcrowd 3. Intigriti 4. Yes we hack 그리고 지원 추가: 1. H1 공개 보고서...

CVE-2023-0179-POC-

CVE-2023-0179 POC https://github.com/TurtleARM にクレジット 再現手順 Ubuntu-22.04.5-live-server-iso をインストールし、そのバージョンを完全にインストールします。ただし、システムを更新しないでください。 Ubuntu バージョン 24.04.5 の仮想マシンに Linux カーネル バージョン 6.1.6 をインストールします。 カーネルをコンパイルするために、以下のバイナリをインストールします。 root@kitploit: build-essential libncurses-dev bison flex...

needle

Needle는 iOS 앱의 보안 평가를 수행하는 과정을 간소화하기 위한 오픈 소스 모듈식 프레임워크입니다. 참고: 이 도구는 폐기되었으며 더 이상 유지 관리되지 않습니다. 보관 목적으로 원래 프로젝트를 그대로 두고 있습니다. Needle는 원래 iOS 9 및 iOS 10에서 작동하도록 만들어졌습니다. 그 이후로 Frida가 출시되어 모바일 보안 평가에 사용되는 사실상의 도구가 되었습니다. 일부 일반적인 Frida 모바일 보안 스크립트는 나중에 Needle 내에 구현되었는데, 이는 이러한 스크립트 중 일부가 더 잘 작동하거나...

@noema/mfs (>=0.1.0, <=0.3.0), @storm-software/config-tools (>=1.28.2, <=1.30.2) +1 more potentially affected by unknown CVE via @humanfs/node (>=0.11.0, <=0.16.7)

@humanfs/node NPM version =0.11.0, =0.1.0, =1.28.2, =3.0.0, =3.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-P498-V437-472G...

Malicious trading website drops malware that hands your browser to attackers

During our threat hunting, we found a campaign using the same malware loader from our previous research to deliver a different threat: Needle Stealer , data-stealing malware designed to quietly harvest sensitive information from infected devices, including browser data, login sessions, and...

Jailbreaking in the Haystack

Recent advances in long-context language models LMs have enabled million-token inputs, expanding their capabilities across complex tasks like computer-use agents. Yet, the safety implications of these extended contexts remain unclear. To bridge this gap, we introduce NINJA short for...

EUVD-2006-0160

Malware in sbrugna...

CVE-2023-52070

JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the 'setSeriesNeedleint index, int type' method. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have bee...

Important: Red Hat Security Advisory: openstack-neutron security update

An update for openstack-neutron is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 Juno for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: openstack-neutron security update

An update for openstack-neutron is now available for Red Hat OpenStack Platform 8.0 Liberty. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

CVE-2006-5430

Cross-site scripting XSS vulnerability in the search functionality in db-central dbc Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-5430

Cross-site scripting XSS vulnerability in the search functionality in db-central dbc Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-5430

CVE-2006-5430 is an XSS vulnerability affecting db-central (dbc) Enterprise CMS and db-central CMS, exploitable through the search needle parameter. The core issue is a reflected/script injection in the search functionality, enabling remote attackers to inject arbitrary script/HTML. The CVSS v2 v...

Bandmin 1.4 XSS Exploit

Bandmin 1.4 XSS Exploit by Silent Needle A:BACKGROUND Bandmin is a cgi script show you the bandwidth for the sites in the server. B:DESCRIPTION The cross site scripting allow you to print a html or javascript or others in the webpage when it just open not write in the page. C:EXPLOIT These are th...