sift

SIFT 这是一个元数据仓库，主要用于讨论和问题追踪。 cast -- 安装 CLI saltstack -- 实际执行安装的状态文件 packer -- 使用上述工具构建机器镜像 package-scripts -- 构建托管在 SIFT PPA 中的某些软件包 支持的发行版 20.04 Ubuntu Focal 22.04 Ubuntu Jammy 安装 Cast 是 SIFT CLI 的替代品。虽然 SIFT CLI 应能继续使用，但它已于 2023 年 3 月 1 日正式弃用，之后不再保证可用。 您必须首先安装 CLI 工具，然后才能安装 SIFT。 sudo cast...

CVE-2026-30951

CVE-2026-30951 Inyección SQL en el Cast de JSON de Sequelize ★ CVE-2026-30951 PoC de Inyección SQL en el ORM Sequelize ★ https://github.com/user-attachments/assets/30b19211-890a-4780-acd9-04856ec98381 Descripción general CVE-2026-30951 es una vulnerabilidad de Inyección SQL en Sequelize v6 , un O...

reversemap

reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In interactive mode the program will prompt for user input...

CVE-2025-54068-livewire

CVE-2025-54068 - Livewire v3.6.3 漏洞实验室 此文件夹构建了一个极简的 Laravel + Livewire v3 应用程序，固定使用 Livewire 3.6.3 （易受攻击的版本），用于复现 CVE-2025-54068 。 挂载的组件被有意编写为与公开的漏洞利用链兼容（它允许第 1 阶段的强制类型转换为数组步骤）。 快速开始 docker compose up -d --build 打开： http://localhost:18081/ 验证（安全 PoC） 这会运行一个类似于公开漏洞利用链的两步请求序列，但使用一个带内标记 （echo）作为安全证明...

PT-2026-99932

Name of the Vulnerable Software and Affected Versions DBI versions prior to 1.654 Description Numeric values are incorrectly treated as strings in the sql type cast svpv function. When casting to SQL NUMERIC, the sql type cast svpv function passes the string pointer and length of the SV to grok...

PT-2026-98758

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the af packet module where the tpacket parse header function incorrectly casts the user-provided tpacket hdr.tp len variable, which is a u32 unsigned 32-bit integer, t...

CVE-2026-98095: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afpacket: Don't cast tpackethdr.tplen to int in tpacketparseheader. syzbot reported BUG in socksendmsgnosec. 0 The problem is that tpacketparseheader casts user-provided tpackethdr.tplen, which is u32, to int. If the length is...

CVE-2026-93836

The WPC Product Bundles for WooCommerce WordPress plugin is vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) in all versions up to and including 8.6.6 . The root cause is a float cast used during quantity validation of the qty parameter, which allows numeric-prefixed payloads such ...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the FunctionsBuilder::cast, extract, datePart, or dateAdd methods when user-controlled input is passed to the dataType, part, or unit parameters. An attacker can execute arbitrary SQL commands by supplying crafted inpu...

SQL Injection

Overview cakephp/cakephp is a rapid development framework for PHP which uses commonly known design patterns like Associative Data Mapping, Front Controller, and MVC. Affected versions of this package are vulnerable to SQL Injection via the FunctionsBuilder::cast, extract, datePart, or dateAdd...

EUVD-2026-80791

RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow...

RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration

Summary A logic and resource exhaustion vulnerability exists in the AMQP client's Quality of Service Qos configuration method. The Qos function accepts signed integers int for the prefetchCount and prefetchSize parameters but casts them directly to unsigned integers uint16 and uint32, respectivel...

CVE-2026-77406 RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.Qos in channel.go accepts negative prefetchCount and prefetchSize integers and casts them directly to uint16 and uint32 fields in the basic.qos method because validateQos is absent. Values such as -1 therefore wrap to 65535 o...

CVE-2026-92124

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier checks the operations Groovy will perform with the elements it reads from a collection that a sandboxed script casts to another type but performs the cast on the collection itself, allowing attackers with permission to define and run...

CVE-2026-92124

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier checks the operations Groovy will perform with the elements it reads from a collection that a sandboxed script casts to another type but performs the cast on the collection itself, allowing attackers with permission to define and run...

EUVD-2026-80748

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier checks the operations Groovy will perform with the elements it reads from a collection that a sandboxed script casts to another type but performs the cast on the collection itself, allowing attackers with permission to define and run...

CVE-2026-92124

The Jenkins Script Security Plugin (version 1415.v9a_f9b_3a_c253d and earlier) is vulnerable to a sandbox bypass due to improper handling of Groovy collection type casting . While the plugin correctly checks operations for elements read from a collection, it incorrectly performs the cast on the c...

CVE-2026-92124

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier checks the operations Groovy will perform with the elements it reads from a collection that a sandboxed script casts to another type but performs the cast on the collection itself, allowing attackers with permission to define and run...

Sandbox bypass vulnerability in script-security

script-security provides a sandbox feature that allows running user-provided scripts safely by intercepting and checking potentially unsafe operations. Groovy casts a collection to another type using the elements of that collection, either passing them to a constructor of that type or casting eac...

Chromium CVE-2026-87628: Use after free in Cast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...