Needle

Needle 다양한 플랫폼의 버그 바운티 제출 대시보드 + 공개된 보고서 + bugbountytip에 즉시 액세스할 수 있는 Chrome 확장 프로그램 Needle은 여러 플랫폼에서 버그 제출에 원클릭으로 액세스하기 위해 필요한 유일한 Chrome 확장 프로그램입니다. 북마크를 만들거나 URL 표시줄에 입력하고 자동 완성 문제로 번거로울 필요가 없습니다. 현재 포함된 목록은 다음과 같습니다. 1. Hackerone 2. Bugcrowd 3. Intigriti 4. Yes we hack 그리고 지원 추가: 1. H1 공개 보고서...

CVE-2023-0179-POC-

CVE-2023-0179 POC 크레딧: https://github.com/TurtleARM 재현 단계 Ubuntu-22.04.5-live-server-iso를 설치하고 해당 버전을 전체 설치하되, 시스템을 업데이트하지 마세요. Ubuntu 24.04.5 버전을 사용하는 가상 머신에 Linux 커널 6.1.6 버전을 설치하세요. 커널을 컴파일하기 위해 다음 바이너리를 설치하세요. build-essential libncurses-dev bison flex libssl-dev libelf-dev bc libmnl-dev...

needle

Needle Needle — это open source модульный фреймворк, предназначенный для упрощения процесса оценки безопасности iOS-приложений. ВНИМАНИЕ: Этот инструмент снят с эксплуатации и больше не поддерживается. Мы оставляем оригинальный проект в архивных целях. Изначально Needle был создан для работы с iO...

Removing the NEEDLE in the Haystack: Backdoor Removal in LLMs Via Weight Orthogonalisation

Backdoor attacks can be implanted in Large Language Models LLMs during training, causing unwanted behaviour when a trigger appears in the input. Existing backdoor defences for LLMs attempt to remove the backdoor but inadvertently shift the model's output distribution to benign prompts, which can...

@noema/mfs (>=0.1.0, <=0.3.0), @storm-software/config-tools (>=1.28.2, <=1.30.2) +1 more potentially affected by unknown CVE via @humanfs/node (>=0.11.0, <=0.16.7)

@humanfs/node NPM version =0.11.0, =0.1.0, =1.28.2, =3.0.0, =3.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-P498-V437-472G...

Malicious trading website drops malware that hands your browser to attackers

During our threat hunting, we found a campaign using the same malware loader from our previous research to deliver a different threat: Needle Stealer , data-stealing malware designed to quietly harvest sensitive information from infected devices, including browser data, login sessions, and...

Jailbreaking in the Haystack

Recent advances in long-context language models LMs have enabled million-token inputs, expanding their capabilities across complex tasks like computer-use agents. Yet, the safety implications of these extended contexts remain unclear. To bridge this gap, we introduce NINJA short for...

EUVD-2006-0160

Malware in sbrugna...

CVE-2023-52070

JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the 'setSeriesNeedleint index, int type' method. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have bee...

Important: Red Hat Security Advisory: openstack-neutron security update

An update for openstack-neutron is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 Juno for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: openstack-neutron security update

An update for openstack-neutron is now available for Red Hat OpenStack Platform 8.0 Liberty. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

CVE-2006-5430

Cross-site scripting XSS vulnerability in the search functionality in db-central dbc Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-5430

CVE-2006-5430 is an XSS vulnerability affecting db-central (dbc) Enterprise CMS and db-central CMS, exploitable through the search needle parameter. The core issue is a reflected/script injection in the search functionality, enabling remote attackers to inject arbitrary script/HTML. The CVSS v2 v...

CVE-2006-5430

Cross-site scripting XSS vulnerability in the search functionality in db-central dbc Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-5430: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the search functionality in db-central dbc Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-0152: Undefined Security Weakness

Cross-site scripting XSS in searchresult.php in phpChamber 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Bandmin 1.4 XSS Exploit

Bandmin 1.4 XSS Exploit by Silent Needle A:BACKGROUND Bandmin is a cgi script show you the bandwidth for the sites in the server. B:DESCRIPTION The cross site scripting allow you to print a html or javascript or others in the webpage when it just open not write in the page. C:EXPLOIT These are th...