173 matches found
dynamorio
DynamoRIO О DynamoRIO DynamoRIO — это система манипулирования кодом во время выполнения, которая поддерживает преобразования кода в любой части программы, пока она выполняется. DynamoRIO предоставляет интерфейс для создания динамических инструментов для самых разных целей: анализ и понимание...
ReverseKit
ReverseKit - Динамический набор инструментов для реверс-инжиниринга ReverseKit — это комплексный набор инструментов, предназначенный для помощи специалистам по реверс-инжинирингу в процессе динамического анализа. Благодаря широкому набору функций и возможностей, он предоставляет простой в...
CVE-2026-14704
A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument code results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could ...
CVE-2026-13524 CherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorization
A security vulnerability has been detected in CherryHQ cherry-studio up to 1.9.6. This vulnerability affects unknown code of the file src/main/services/mcp/oauth/callback.ts of the component MCP OAuth Local Callback Server. The manipulation of the argument code leads to improper authorization. Th...
CVE-2026-9379
A weakness has been identified in Edimax BR-6675nD 1.12. This impacts the function formWpsStart of the file /goform/formWpsStart of the component POST Request Handler. This manipulation of the argument pinCode causes command injection. The attack can be initiated remotely. The exploit has been ma...
EUVD-2026-28953
A security flaw has been discovered in Industrial Application Software IAS Canias ERP 8.03. Impacted is the function Runtime.getRuntime.exec of the component RMI Interface. Performing a manipulation of the argument troiaCode results in os command injection. The attack may be initiated remotely. T...
CVE-2022-31207
The Omron SYSMAC Cx product family PLCs CS series, CJ series, and CP series through 2022-05-18 lack cryptographic authentication. They utilize the Omron FINS 9600/TCP protocol for engineering purposes, including downloading projects and control logic to the PLC. This protocol has authentication...
CVE-2022-31206
The Omron SYSMAC Nx product family PLCs NJ series, NY series, NX series, and PMAC series through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software which compiles IEC 61131-3 conformant POU code to native machine code for execution...
CVE-2019-16414
A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating the login page to send back a victim's cleartext credentials to an attacker via a login/?reason=failure= URI...
Full Stack Bank SQL注入漏洞
Full Stack Bank is a banking system by the individual developer Krystian Pińczak. Full Stack Bank suffers from a SQL injection vulnerability that stems from unknown code manipulation of the component User Handler, which could lead to a SQL injection attack...
PT-2025-41706
Name of the Vulnerable Software and Affected Versions jimit105 Project-Online-Shopping-Website versions up to 7d892f442bd8a96dd242dbe2b9bd5ed641e13e64 Description A flaw exists in the Product Inventory Handler component of jimit105 Project-Online-Shopping-Website. The issue involves a SQL injecti...
EUVD-2021-24900
Malware in sbrugna...
EUVD-2024-53746
Malicious code in bioql PyPI...
EUVD-2022-6067
Malicious code in bioql PyPI...
EUVD-2025-2079
Malicious code in bioql PyPI...
EUVD-2025-1736
Malicious code in bioql PyPI...
EUVD-2025-23346
Malicious code in bioql PyPI...
EUVD-2022-25223
Malicious code in bioql PyPI...