171 matches found
nfstream
NFStreamrepo is a multiplatform Python framework providing fast, flexible, and expressive data structures designed to make working with online or offline network data easy and intuitive. It aims to be Python's fundamental high-level building block for doing practical, real-world network flow data...
Security-Datasets
Security Datasets The Security Datasets project is an open-source initiatve that contributes malicious and benign datasets, from different platforms, to the infosec community to expedite data analysis and threat research. Docs https://securitydatasets.com Goals Provide open portable datasets to...
WSO2 - Cross-Site Scripting
WSO2 contains a reflected cross-site scripting vulnerability in the Management Console of API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0,...
CVE-2021-41277
CVE-2021-41277 PoC Metabase — это платформа для анализа данных с открытым исходным кодом. В некоторых версиях Metabase была обнаружена проблема Local File Inclusion включение локальных файлов. Ниже приведён код PoC для определения, уязвима ли цель. Злоумышленник может читать произвольные файлы на...
The vulnerability of the Azure HDInsight data analytics service, related to the lack of protective measures for website structures, allows attackers to perform spear-phishing attacks.
The vulnerability of the Azure HDInsight data analytics service is related to the lack of security measures for website structures. Exploiting this vulnerability could allow attackers to perform spear-phishing attacks remotely...
CVE-2026-22805: Server-Side Request Forgery (SSRF)
Metabase is an open-source data analytics platform. Prior to 55.13, 56.3, and 57.1, self-hosted Metabase instances that allow users to create subscriptions could be potentially impacted if their Metabase is colocated with other unsecured resources. This vulnerability is fixed in 55.13, 56.3, and...
WSO2多款产品 安全漏洞
WSO2 API Manager is an API lifecycle management solution, WSO2 API Manager Analytics is an analytics component, and WSO2 API Control Plane is a control panel. A security vulnerability exists in a number of WSO2 products. The vulnerability stems from insufficient enforcement of permissions in the...
EUVD-2020-17418
Malware in sbrugna...
EUVD-2017-6151
Malware in sbrugna...
EUVD-2023-27719
Malicious code in bioql PyPI...
EUVD-2024-0054
Malicious code in bioql PyPI...
EUVD-2024-52859
Malicious code in bioql PyPI...
EUVD-2023-27718
Malicious code in bioql PyPI...
EUVD-2024-54233
Malicious code in bioql PyPI...
Human-Centred AI in FinTech: Developing a User Experience (UX) Research Point of View (PoV) Playbook
Advancements in Artificial Intelligence AI have significantly transformed the financial industry, enabling the development of more personalized and adaptable financial products and services. This research paper explores various instances where Human-Centred AI HCAI has facilitated these...
CVE-2024-52290
LF Edge eKuiper is a lightweight internet of things IoT data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service e.g. kuiperUser role can inject a cross-site scripting payload into Connection Configuration key Name confKey parameter. After thi...
CVE-2024-52290 Stored XSS in Configuration Key Functionality
LF Edge eKuiper is a lightweight internet of things IoT data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service e.g. kuiperUser role can inject a cross-site scripting payload into Connection Configuration key Name confKey parameter. After thi...
CVE-2025-24908
Overview The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' doubled triple dot slash sequences that can resolve to a location that is outside of that directory. CWE-35 Description Hitachi...
CVE-2024-52812
LF Edge eKuiper is an internet-of-things data analytics and stream processing engine. Prior to version 2.0.8, auser with rights to modify the service e.g. kuiperUser role can inject a cross-site scripting payload into the rule id parameter. Then, after any user with access to this service e.g...
CVE-2024-52812
LF Edge eKuiper is an internet-of-things data analytics and stream processing engine. Prior to version 2.0.8, auser with rights to modify the service e.g. kuiperUser role can inject a cross-site scripting payload into the rule id parameter. Then, after any user with access to this service e.g...