shazhupan

This is a placeholder for a future readme. Basically, this repository is a collection of knowledge associated with my ongoing research into 杀猪盘 sha zhu pan, pig butchering scams...

CVE-2026-115997

A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/data/resolver/SqlFilterArgumentResolver.java. Executing a manipulation of the argument ascs/descs can lead to sql injectio...

Pig-Mesh Pig input validation error vulnerability

Versions 4.0 and 4.1.0 of Pig Mesh contain a security vulnerability. This vulnerability stems from improper handling of the “ascs” and “descs” parameters in the orderItem.getColumn function within the file...

CVE-2026-115997 pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection

A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/data/resolver/SqlFilterArgumentResolver.java. Executing a manipulation of the argument ascs/descs can lead to sql injectio...

CVE-2026-115997 pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection

A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/data/resolver/SqlFilterArgumentResolver.java. Executing a manipulation of the argument ascs/descs can lead to sql injectio...

EUVD-2026-109323

A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/data/resolver/SqlFilterArgumentResolver.java. Executing a manipulation of the argument ascs/descs can lead to sql injectio...

CVE-2026-115997

A SQL injection vulnerability exists in pig-mesh pig versions up to 4.1.0 . The flaw is located in the orderItem.getColumn function within the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/data/resolver/SqlFilterArgumentResolver.java. Specifically, manipulating the ascs/d...

CVE-2026-115997 pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection

A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/data/resolver/SqlFilterArgumentResolver.java. Executing a manipulation of the argument ascs/descs can lead to sql injectio...

PT-2026-122670

A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/data/resolver/SqlFilterArgumentResolver.java. Executing a manipulation of the argument ascs/descs can lead to sql injectio...

EUVD-2026-102487

pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/details/id. Low-privilege attackers can enumerate sequential user ids to obtain usernames, real names, phone numbers,...

CVE-2026-111343

pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/details/id. Low-privilege attackers can enumerate sequential user ids to obtain usernames, real names, phone numbers,...

CVE-2026-111343 pig through 4.1.1 Missing Authorization via GET /admin/user/details/{id}

pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/details/id. Low-privilege attackers can enumerate sequential user ids to obtain usernames, real names, phone numbers,...

CVE-2026-111343 pig through 4.1.1 Missing Authorization via GET /admin/user/details/{id}

pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/details/id. Low-privilege attackers can enumerate sequential user ids to obtain usernames, real names, phone numbers,...

CVE-2026-111343

pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/details/id. Low-privilege attackers can enumerate sequential user ids to obtain usernames, real names, phone numbers,...

CVE-2026-111343 pig through 4.1.1 Missing Authorization via GET /admin/user/details/{id}

pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/details/id. Low-privilege attackers can enumerate sequential user ids to obtain usernames, real names, phone numbers,...

CVE-2026-111343

The pig through 4.1.1 software contains a missing authorization vulnerability in the SysUserController.user component. This flaw allows any authenticated user to access the GET /admin/user/details/{id} endpoint without proper permission checks. By enumerating sequential user IDs, a low-privilege ...

PT-2026-115287

Name of the Vulnerable Software and Affected Versions pig versions prior to 4.1.2 Description A missing authorization issue exists in the user function of SysUserController. This allows any authenticated user to access other users' profiles through the 'GET /admin/user/details/id' endpoint...

CVE-2026-111343: Missing Authorization

pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/details/id. Low-privilege attackers can enumerate sequential user ids to obtain usernames, real names, phone numbers,...

Pig-mesh pig authorization issue vulnerability

The Pig-Mesh Pig version 4.1.1 and earlier have an authorization issue. This vulnerability stems from a lack of authorization verification in the SysUserController.user component. Any authenticated user can retrieve other users’ profiles via the GET /admin/user/details/id endpoint. Low-privilege...

pig

Pig Pig que puede entenderse como Packet intruder generator es una herramienta de creación de paquetes para Linux. Puedes usar Pig para probar tu IDS/IPS, entre otras cosas. Pig incluye un conjunto de firmas de ataque conocidas listas para usar y puedes ampliar esta colección con cosas más...