78 matches found
appmon
欢迎使用AppMon！ 已在以下活动中展示： 美国黑帽大会 & 欧洲黑帽大会 AppMon 是一个自动化框架，用于监控和篡改原生 macOS、iOS 和 Android 应用的系统 API 调用。它基于 Frida。 这个项目的实现离不开 Ole André Vadla Ravnås ，我谨将此项目献给他。关注他的 GitHub、Twitter 它包含以下组件： AppMon Sniffer - 拦截 API 调用，发现应用执行的有趣操作 Appmon Intruder - 操作 API 调用数据，改变应用的原始行为 AppMon Android Tracer - 自动追踪 Androi...
CVE-2026-82909
A vulnerability was determined in QuantumNous new-api up to 1.0.0-rc.15. Affected by this issue is some unknown functionality of the file /api/usage/token/ of the component Revoked API Token Handler. Executing a manipulation can lead to session expiration. The attack may be performed from remote...
CVE-2025-70340
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
EUVD-2025-210791
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
CVE-2025-70340
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
CVE-2025-70340
CVE-2025-70340 is a Broken Access Control vulnerability in ThingsBoard Professional Edition (PE) 4.21 and below , specifically within the Alarms comments functionality. An authenticated customer user can manipulate API request parameters to create or modify system-generated alarm comments , enabl...
EUVD-2026-4950
Budibase is a low code platform for creating internal tools, workflows, and admin panels. In versions up to and including 3.26.3, a Creator-level user, who normally has no UI permission to invite users, can manipulate API requests to invite new users with any role, including Admin, Creator, or Ap...
EUVD-2022-52449
Malicious code in bioql PyPI...
EUVD-2024-16576
Malicious code in bioql PyPI...
EUVD-2023-34332
Malicious code in bioql PyPI...
EUVD-2024-45394
Malicious code in bioql PyPI...
EUVD-2023-12615
Malicious code in bioql PyPI...
EUVD-2025-20986
Malicious code in bioql PyPI...
EUVD-2025-23283
Malicious code in bioql PyPI...
EUVD-2024-41600
Malicious code in bioql PyPI...
EUVD-2025-6433
Malicious code in bioql PyPI...
EUVD-2023-34350
Malicious code in bioql PyPI...
EUVD-2022-43211
Malicious code in bioql PyPI...
CVE-2025-29556
ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control. Since version 6.3, ExaGrid enforces restrictions preventing users with the Admin role from creating or modifying users with the Security Officer role without approval. However, a flaw in the account creation process allows an...
BIT-GITLAB-2025-3396 Incorrect Authorization in GitLab
An issue has been discovered in GitLab EE affecting all versions from 13.3 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that could have allowed authenticated project owners to bypass group-level forking restrictions by manipulating API requests...