vscode-frida

Frida Workbench für VSCode Repository | Probleme | Installieren Dies ist ein von der Community beigetragenes Projekt und steht in keiner Verbindung zum offiziellen Frida-Team. Es wird von @CodeColorist als Open-Source-Erweiterung für Visual Studio Code entwickelt und gepflegt, um die...

redai

RedAI Un banco di lavoro terminale per la scoperta di vulnerabilità guidata dall'IA e la validazione live. La maggior parte degli strumenti di "sicurezza IA" si ferma a segnalare codice che sembra vulnerabile. RedAI va oltre: dopo che gli agenti scanner producono risultati candidati, gli agenti...

nebula

Nebula Pentesting Potenziato dall'IA Il workbench Zero Layer Ringraziamenti Prima di tutto, vorrei ringraziare Dio Onnipotente, che è la fonte di ogni conoscenza. Senza di Lui, questo non sarebbe possibile. Nebula riunisce gli elementi operativi di un engagement di sicurezza in un'unica superfici...

Rogue-Framework

إطار روج "اجعلها تمطر. " "روج أمينديرس" أفضل وسيط معلومات في نايت سيتي إطار روج هو منصة عمل مكتبية لـ AFL++، والفحص عبر البنى باستخدام محاكي QEMU، وتطوير قوالب الاختبار harnesses، وتحليل Ghidra الرأسي الخفيف بدون واجهة رسومية، ومحوّرات مخصصة، ومقارنة التصحيحات. صُمم عمدًا ليكون منصة عمل قابلة...

jsdeob-workbench

jsdeob-workbench منصة عمل مرئية لفك تشويش JavaScript. قم ببناء سلاسل تحويل، وتنقّل عبرها، واكتب إضافاتك الخاصة. عرض يوتيوب توضيحي https://www.youtube.com/watch?v=7zuqKoJT2BM https://www.youtube.com/watch?v=bOVnPIfjoco ما هذا؟ يكشف هذا التطبيق شجرة النحو المجرد AST لبرنامج JavaScript. جاءت الفكرة...

Linux Distros Unpatched Vulnerability : CVE-2026-34399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data fr...

CVE-2026-71022

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Workbench. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2026-78013

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Workbench. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-34399

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...

DEBIAN-CVE-2026-34399

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...

CVE-2026-34398

In FreeCAD 0.19 through 1.1.1, the BIM Project Manager's Load Template flow passes attacker-controlled FCStd Meta property values (wpposition, wpu, wpv, wpaxis) directly to Python's eval(), enabling arbitrary code execution when a user opens a malicious BIM project template. Fixed in version 1.1....

CVE-2026-34398 FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbench

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval,...

CVE-2026-34398 FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbench

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval,...

CVE-2026-34399 FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...

CVE-2026-34399 FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...

CVE-2026-34399

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...

CVE-2026-34399

FreeCAD versions 0.19 through 1.1.0 pass SVG template scale-field data through an eval() call in src/Mod/BIM/bimcommands/BimTDPage.py (line 87), allowing arbitrary Python execution when a user creates a TechDraw page from a malicious SVG template. No in-the-wild exploitation is reported. The fix ...

PT-2026-76780

Name of the Vulnerable Software and Affected Versions FreeCAD versions 0.19 through 1.1.0 Description The BIM Workbench contains an eval call that processes untrusted data from SVG template files. If a user creates a TechDraw page using a malicious SVG template, arbitrary Python code can be...

Malicious code in workbench-browser-server (npm)

npm/workbench-browser-server is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11992 Malicious code in workbench-browser-server (npm)

npm/workbench-browser-server is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...