305 matches found
API-attack-detection-with-AI
使用人工智能/机器学习检测Web API中的SQL/XSS攻击 该项目旨在使用机器学习检测API请求/参数中的SQL注入和XSS攻击。 项目介绍 该项目旨在通过机器学习 技术检测API请求和参数中的SQL 和XSS 注入。 目标是创建一个简单的流水线，实现： 准备并清洗API请求数据集， 训练一个能够自动将请求分类为benign、sqlinjection或xss的模型， 提供一个可用于测试或未来实时检测API的可复用模型。 项目工作流 1. 准备数据集...
MGASA-2026-0341 Updated golang packages fix security vulnerabilities
CVE-2026-56865 A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. CVE-2026-56864 A malicious GOSUMDB was capable of serving arbitrary...
CVE-2025-8191
CVE-2025-8191 – حقن XSS في Swagger UI الوصف : يحتوي هذا المستودع على إثبات مفهوم PoC لاستغلال الثغرة CVE‑2025‑8191، وهي ثغرة وجدت في Swagger UI. تسمح الثغرة بحقن Cross‑Site Scripting XSS في حقل “description”، مما يؤدي إلى تنفيذ سكربت عن بعد في إصدارات Swagger UI ≤ 1.0.3. المراجع : مدخل NVD:...
CVE-2026-32556 WordPress Boost plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...
BIT-GOLANG-2026-56858 Fix Javascript regexp context tracking in html/template
Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...
CVE-2026-14290
CVE-2026-14290 concerns the WordPress plugin “Embed Google Photos album” (versions
CVE-2026-56858
Technical details about CVE-2026-56858 are not publicly available in the provided connected documents. Monitor for updates. The initial description notes that pathological inputs could close an unescaped '/' to inject content, potentially leading to XSS.
CVE-2026-49864 wetty vulnerable to DOM XSS via file-download filename
wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string escapeMarkup: false. Any output the victim renders - a cat'd file, a tailed log,...
CVE-2026-44762
CVE-2026-44762 describes a misconfigured Content Security Policy in SAP Data Services Management Console. The overly permissive CSP and lack of restrictive directives could enable an authenticated attacker, in combination with another vulnerability, to inject and execute scripts in the applicatio...
Important: php8.5
Issue Overview: PHP: Failure to setup TLS with a remote server can result in a remote DoS CVE-2026-12184 uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes. CVE-2026-42371 In uriparser before 1.0.2, there is pointer...
CVE-2019-20381
TestLink before 1.9.20 allows XSS via non-lowercase javascript: in the index.php reqURI parameter. NOTE: this issue exists because of an incomplete fix for CVE-2019-19491...
CVE-2025-8386
The vulnerability, if exploited, could allow an authenticated miscreant with privilege of "aaConfigTools" to tamper with App Objects' help files and persist a cross-site scripting XSS injection that when executed by a victim user, can result in horizontal or vertical escalation of privileges. The...
EUVD-2017-6031
Malware in sbrugna...
EUVD-2019-2740
Malware in sbrugna...
EUVD-2019-17688
Malware in sbrugna...
EUVD-2007-5682
Malware in sbrugna...
EUVD-2019-9444
Malware in sbrugna...
EUVD-2019-7436
Malware in sbrugna...