python-haystack

python-haystack 内存取证 |travis| |coverage| |landscape| |pypi| |docs| 快速开始 docs/ 文件夹中的 快速使用指南 。 docs/ 文件夹中的 Haystack-reverse CLI 。 更多文档 介绍 python-haystack 是一个堆分析框架，专注于搜索和逆向已分配内存中的 C 结构体。 第一个功能/API 是 SEARCH 函数。 它可以在进程内存转储或活动进程内存中搜索已知的记录类型。 第二个功能/API 是扩展 python-haystack-reverse 中的 REVERSE 函数。...

CVE-2014-6287

Rejetto HttpFileServer 2.3.x - 远程命令执行 CVE-2014-6287 🚨 关于该漏洞利用 这是一个针对 Rejetto HttpFileServer HFS v2.3.x 中已知 远程命令执行漏洞 的概念验证漏洞利用程序，漏洞编号为 CVE-2014-6287 。 通过滥用存在漏洞的搜索功能，攻击者可以注入特制载荷，在目标机器上执行任意系统命令。 📌 详情 漏洞利用名称： Rejetto HttpFileServer 2.3.x - 远程命令执行 RevShell CVE： CVE-2014-6287 作者： Z3R0 0x30 受影响版本：...

MooSocial 3.1.8 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability exisits in the q parameter on search function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. id: CVE-2023-45542 info: name: MooSocial 3.1.8 - Cross-Site Scripting author...

CVE-2023-45542

CVE-2023-45542 Existe una vulnerabilidad de cross-site scripting XSS reflejado en el parámetro q de la función de búsqueda de mooSocial v3.1.8 que permite a los atacantes robar las cookies de sesión de los usuarios y suplantar su cuenta mediante una URL manipulada. Parámetro vulnerable: q Exploit...

CVE-2024-50677

CVE-2024-50677 | OroPlatform CMS v5.1 中的两次点击反射型XSS漏洞 本仓库提供了CVE-2024-50677的概念验证 免责声明： 此代码是该漏洞的概念验证。我不会对任何使用此利用程序的行为负责。 描述： CVE-2024-50677 指的是 OroPlatform CMS v5.1 默认配置中存在的一个两次点击反射型XSS漏洞，具体演示平台可见：https://github.com/oroinc/docker-demo 该漏洞存在于应用程序对搜索功能用户输入的控制方式中。如果用户点击网页界面中包含JavaScript查询（例如）的搜索栏 alert...

CVE-2024-5961

CVE-2024-5961 2ClickPortal中的反射型XSS 版本：7.2.31 至 7.6.4。 intext:"Powered by 2ClickPortal" PoC https://domain/szukaj/?searchlang=pl&search=all&string=" onfocus=alert1 autofocus="...

EUVD-2026-89471

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability...

CVE-2026-68954

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability...

CVE-2026-68954 Toptech TMS7 and TopHAT SQL Injection

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability...

CVE-2026-68954 Toptech TMS7 and TopHAT SQL Injection

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability...

PT-2026-102902

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability...

CVE-2026-81270

Apache Allura versions through 1.20.0 are vulnerable to the exposure of non-public information via the search functionality. This vulnerability allows an unauthorized actor to access sensitive information. To remediate this issue, users are recommended to upgrade to version 1.21.0 .

CVE-2026-78691 Unescaped backslash allows LIKE wildcard injection in AshSql string search

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ashsql allows a user who supplies a search term to contains/2, stringstartswith/2, or stringendswith/2 to inject live SQL LIKE wildcards, turning a literal substring search into an attacker-controlled...

CVE-2026-76212

phpMyFAQ before 4.1.7, when configured to use PostgreSQL via the native pgsql PHP extension, declares an incorrect LIKE ESCAPE character '=' in the Search/Database/Pgsql.php backend while escapeLikeWildcards escapes user input with the '|' prefix. As a result, wildcard escaping is a no-op and...

CVE-2026-56790 CANBoat - Off-by-One Global Buffer Overflow in searchForPgn()

CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in the searchForPgn function in analyzer/pgn.c that allows remote attackers to crash the application. Attackers can deliver a crafted NMEA-2000 message with an out-of-range PGN value over CAN bus or...

CVE-2026-11772 Reflected XSS in DRIMO CMS

DRIMO CMS is vulnerable to Reflected XSS via q parameter in searching functionality. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. Product is in End Of Life phase and will not receive any updates. However, deleting info.php fi...

HCL Digital Experience Compose 安全漏洞

HCL Digital Experience Compose is an enterprise-level content creation and digital experience management platform developed by the Indian company HCL. HCL Digital Experience Compose has a security vulnerability, which stems from a reflection-type cross-site scripting issue in the search center...

EUVD-2026-33473

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...

CVE-2026-10153

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...

CVE-2026-10153

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...