sift

SIFT This is a metadata repository that is primarily used for discussiosn and issue tracking. cast -- installer cli saltstack -- states that actually do the work packer -- builds machine images using the above tools package-scripts -- builds certain packages hosted in SIFT PPA Supported Distros...

reversemap

reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In interactive mode the program will prompt for user input...

CVE-2025-54068-livewire

CVE-2025-54068 - Livewire v3.6.3 漏洞实验室 此文件夹构建了一个极简的 Laravel + Livewire v3 应用程序，固定使用 Livewire 3.6.3 （易受攻击的版本），用于复现 CVE-2025-54068 。 挂载的组件被有意编写为与公开的漏洞利用链兼容（它允许第 1 阶段的强制类型转换为数组步骤）。 快速开始 docker compose up -d --build 打开： http://localhost:18081/ 验证（安全 PoC） 这会运行一个类似于公开漏洞利用链的两步请求序列，但使用一个带内标记 （echo）作为安全证明...

CVE-2026-30951

CVE-2026-30951 Sequelize JSON Cast SQLインジェクション ★ CVE-2026-30951 Sequelize ORM SQLインジェクション PoC ★ https://github.com/user-attachments/assets/30b19211-890a-4780-acd9-04856ec98381 概要 CVE-2026-30951 は、広く使用されている Node.js ORM である Sequelize v6 における SQLインジェクション の脆弱性です。 この脆弱性は JSON/JSONB の where...

PT-2026-99932

Name of the Vulnerable Software and Affected Versions DBI versions prior to 1.654 Description Numeric values are incorrectly treated as strings in the sql type cast svpv function. When casting to SQL NUMERIC, the sql type cast svpv function passes the string pointer and length of the SV to grok...

CVE-2026-98095: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afpacket: Don't cast tpackethdr.tplen to int in tpacketparseheader. syzbot reported BUG in socksendmsgnosec. 0 The problem is that tpacketparseheader casts user-provided tpackethdr.tplen, which is u32, to int. If the length is...

PT-2026-98758

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the af packet module where the tpacket parse header function incorrectly casts the user-provided tpacket hdr.tp len variable, which is a u32 unsigned 32-bit integer, t...

CVE-2026-93836

The WPC Product Bundles for WooCommerce WordPress plugin is vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) in all versions up to and including 8.6.6 . The root cause is a float cast used during quantity validation of the qty parameter, which allows numeric-prefixed payloads such ...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the FunctionsBuilder::cast, extract, datePart, or dateAdd methods when user-controlled input is passed to the dataType, part, or unit parameters. An attacker can execute arbitrary SQL commands by supplying crafted inpu...

SQL Injection

Overview cakephp/cakephp is a rapid development framework for PHP which uses commonly known design patterns like Associative Data Mapping, Front Controller, and MVC. Affected versions of this package are vulnerable to SQL Injection via the FunctionsBuilder::cast, extract, datePart, or dateAdd...

EUVD-2026-80791

RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow...

RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration

Summary A logic and resource exhaustion vulnerability exists in the AMQP client's Quality of Service Qos configuration method. The Qos function accepts signed integers int for the prefetchCount and prefetchSize parameters but casts them directly to unsigned integers uint16 and uint32, respectivel...

CVE-2026-77406 RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.Qos in channel.go accepts negative prefetchCount and prefetchSize integers and casts them directly to uint16 and uint32 fields in the basic.qos method because validateQos is absent. Values such as -1 therefore wrap to 65535 o...

CVE-2026-92124

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier checks the operations Groovy will perform with the elements it reads from a collection that a sandboxed script casts to another type but performs the cast on the collection itself, allowing attackers with permission to define and run...

CVE-2026-92124

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier checks the operations Groovy will perform with the elements it reads from a collection that a sandboxed script casts to another type but performs the cast on the collection itself, allowing attackers with permission to define and run...

EUVD-2026-80748

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier checks the operations Groovy will perform with the elements it reads from a collection that a sandboxed script casts to another type but performs the cast on the collection itself, allowing attackers with permission to define and run...

CVE-2026-92124

The Jenkins Script Security Plugin (version 1415.v9a_f9b_3a_c253d and earlier) is vulnerable to a sandbox bypass due to improper handling of Groovy collection type casting . While the plugin correctly checks operations for elements read from a collection, it incorrectly performs the cast on the c...

CVE-2026-92124

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier checks the operations Groovy will perform with the elements it reads from a collection that a sandboxed script casts to another type but performs the cast on the collection itself, allowing attackers with permission to define and run...

Sandbox bypass vulnerability in script-security

script-security provides a sandbox feature that allows running user-provided scripts safely by intercepting and checking potentially unsafe operations. Groovy casts a collection to another type using the elements of that collection, either passing them to a constructor of that type or casting eac...

Chromium CVE-2026-87628: Use after free in Cast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...