graphicator

Graphicator Graphicator — это «скрапер» / экстрактор GraphQL. Инструмент перебирает документ интроспекции, возвращаемый целевой GraphQL-конечной точкой, а затем перестраивает схему во внутреннюю форму, чтобы иметь возможность воссоздать поддерживаемые запросы. Когда такие запросы создаются, они...

CVE-2025-54554

CVE-2025-54554 CVE-2025-54554 – Unauthenticated Access in tiaudit REST API leading to Sensitive Information Disclosure Discoverer: Amanpreet Parmar | Sr. Security Engineer @Harvard Medical School Summary: CVE-2025-54554 identifies a vulnerability in the tiaudit component of the ticrypt platform,...

CVE-2025-27407

Лаборатория GitLab Podman для CVE-2025-27407 Минимальная локальная лаборатория для доказательства того, что HTTP-путь Direct Transfer в GitLab достигает уязвимого загрузчика схем интроспекции graphql-ruby. Лаборатория запускает один уязвимый контейнер GitLab CE; скрипт PoC запускает поддельный...

CVE-2026-41242

CVE-2026-41242 — инъекция кода в protobuf.js с переходом к RCE CVSS 9.4 Critical | Инъекция кода CWE-94 Обзор protobuf.js npm: protobufjs версий ≤ 7.5.4 и ≤ 8.0.0 содержит уязвимость выполнения произвольного кода через имена типов в protobuf-схеме. Модуль @protobufjs/codegen подставляет имя типа...

CVE-2026-61821

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, droppartitionid and droppartitiontime use partconfig.retentionschema as the target for ALTER TABLE SET SCHEMA and accept any nonempty schema name. A role with partmanuser access can select a target...

CVE-2026-61821

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, droppartitionid and droppartitiontime use partconfig.retentionschema as the target for ALTER TABLE SET SCHEMA and accept any nonempty schema name. A role with partmanuser access can select a target...

CVE-2026-61821

CVE-2026-61821 affects the pg_partman PostgreSQL extension (which manages partitioned tables by time or ID). Prior to 5.5.0 , the functions drop_partition_id() and drop_partition_time() accept any nonempty value from part_config.retention_schema as the target for ALTER TABLE SET SCHEMA. A role wi...

CVE-2026-93763 Silent plaintext persistence via unresolved callable database name in encryption schema map

A protection mechanism failure in the object-document mapper's encryption configuration generation can cause fields that an application declared for client-side field-level encryption to be written and kept in cleartext, without any error or warning. A party holding ordinary read access to the...

CVE-2026-93764 Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation

Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level encryption schema. Applications that enable this feature can therefore store values intended to be encrypted in readable form, with no error or warning. A party with routine read...

EUVD-2026-83195

Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level encryption schema. Applications that enable this feature can therefore store values intended to be encrypted in readable form, with no error or warning. A party with routine read...

CVE-2026-93764

Mongoid , MongoDB's Ruby ODM, may omit encryption rules for fields declared on embedded models when generating its client-side field-level encryption schema. Applications that enable this feature can silently store values intended to be encrypted in plaintext , with no error or warning. A party w...

Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation

Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level encryption schema. Applications that enable this feature can therefore store values intended to be encrypted in readable form, with no error or warning. A party with routine read...

CVE-2026-93764 Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation

Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level encryption schema. Applications that enable this feature can therefore store values intended to be encrypted in readable form, with no error or warning. A party with routine read...

sysmon-parser

sysmon-parser Автоматически генерируемый парсер Sysmon для Azure Sentinel Файл Sysmon-AllVersionsParser.txt можно загрузить как функцию в Azure Sentinel для анализа всех ваших событий. Существует конвейер Azure DevOps, который запускается ежедневно для установки последней версии Sysmon, извлекает...

quokka

Quokka изображение создано DALL-E Содержание Введение Установка Использование Сборка Документация FAQ Введение Quokka — это экспортер бинарных файлов: на основе дизассемблирования программы он создает экспортный файл, который можно использовать без дизассемблера. В настоящее время в качестве...

CVE-2026-21005-Docker-Registry-V2-Schema-1-Image-Poisoning

CVE-2026-21005 – Docker Registry V2 Schema 1 이미지 포이즈닝 프로그램 코드 Python Flask + Shell root@kitploit: dockerregistrysim.py - Simulated registry that serves schema1 manifests from flask import Flask, request, jsonify app = Flaskname images = 'myapp': 'v1': 'layers': 'sha256:abc', 'sha256:def', 'config...

GraphCrawler

GraphCrawler Главный инструмент автоматизированного тестирования GraphQL Graph Crawler — это самый мощный инструмент автоматизированного тестирования для любой конечной точки GraphQL. Вышла версия 1.2!! НОВОЕ: Может искать конечные точки за вас, используя мощный инструмент Graphinder от Escape...

CVE-2026-92756

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

CVE-2026-92756

This vulnerability affects the MongoDB Entity Framework Core Provider . Applications that combine independent encryption settings with the provider's own encryption settings may silently lose TLS and schema-map settings , causing protected fields to be stored unencrypted in the database. The flaw...

EUVD-2026-82377

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...