167 matches found
nfstream
NFStream is a multiplatform Python framework providing fast, flexible, and expressive data structures designed to make working with online or offline network data easy and intuitive. It aims to be Python's fundamental high-level building block for doing practical, real-world network flow data...
Security-Datasets
보안 데이터셋 Security Datasets 프로젝트는 다양한 플랫폼의 악성 및 정상 데이터셋을 정보 보안 커뮤니티에 제공하여 데이터 분석 및 위협 연구를 촉진하는 오픈소스 이니셔티브입니다. 문서 https://securitydatasets.com 목표 데이터 분석 개발을 가속화하기 위해 개방형 이식 가능한 데이터셋을 제공합니다. 적 기술 시뮬레이션을 용이하게 하고 가속화합니다. 전 세계 보안 분석가가 실제 데이터로 기술을 테스트할 수 있도록 합니다. 탐지 분석의 테스트 및 검증을 더 쉽고 실용적이며 모듈화되고 저렴한 방식으...
WSO2 - Cross-Site Scripting
WSO2 contains a reflected cross-site scripting vulnerability in the Management Console of API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0,...
CVE-2021-41277
CVE-2021-41277 PoC Metabaseはオープンソースのデータ分析プラットフォームです。一部のバージョンでローカルファイルインクルージョン（LFI）の問題が発見されました。このPoCコードは、ターゲットがこの脆弱性を持つかどうかを判定するためのものです。攻撃者はMetabaseサーバー上の任意のファイルを読み取ることができます。 ビルド root@kitploit: go build -o CVE-2021-41277 main.go インストール root@kitploit: go get github.com/tahtaciburak/CVE-2021-41277 P...
The vulnerability of the Azure HDInsights data analytics service, related to the lack of protective measures for website structures, allows attackers to carry out spear-phishing attacks.
The vulnerability of the Azure HDInsights data analytics service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...
CVE-2026-22805: Server-Side Request Forgery (SSRF)
Metabase is an open-source data analytics platform. Prior to 55.13, 56.3, and 57.1, self-hosted Metabase instances that allow users to create subscriptions could be potentially impacted if their Metabase is colocated with other unsecured resources. This vulnerability is fixed in 55.13, 56.3, and...
WSO2多款产品 安全漏洞
WSO2 API Manager is an API lifecycle management solution, WSO2 API Manager Analytics is an analytics component, and WSO2 API Control Plane is a control panel. A security vulnerability exists in a number of WSO2 products. The vulnerability stems from insufficient enforcement of permissions in the...
EUVD-2020-17418
Malware in sbrugna...
EUVD-2017-6151
Malware in sbrugna...
EUVD-2023-27718
Malicious code in bioql PyPI...
EUVD-2024-52859
Malicious code in bioql PyPI...
EUVD-2023-27719
Malicious code in bioql PyPI...
EUVD-2024-0054
Malicious code in bioql PyPI...
EUVD-2024-54233
Malicious code in bioql PyPI...
Human-Centred AI in FinTech: Developing a User Experience (UX) Research Point of View (PoV) Playbook
Advancements in Artificial Intelligence AI have significantly transformed the financial industry, enabling the development of more personalized and adaptable financial products and services. This research paper explores various instances where Human-Centred AI HCAI has facilitated these...
CVE-2024-52290
LF Edge eKuiper is a lightweight internet of things IoT data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service e.g. kuiperUser role can inject a cross-site scripting payload into Connection Configuration key Name confKey parameter. After thi...
CVE-2024-52290 Stored XSS in Configuration Key Functionality
LF Edge eKuiper is a lightweight internet of things IoT data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service e.g. kuiperUser role can inject a cross-site scripting payload into Connection Configuration key Name confKey parameter. After thi...
CVE-2025-24908
Overview The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' doubled triple dot slash sequences that can resolve to a location that is outside of that directory. CWE-35 Description Hitachi...
CVE-2024-52812
LF Edge eKuiper is an internet-of-things data analytics and stream processing engine. Prior to version 2.0.8, auser with rights to modify the service e.g. kuiperUser role can inject a cross-site scripting payload into the rule id parameter. Then, after any user with access to this service e.g...
CVE-2024-52812
LF Edge eKuiper is an internet-of-things data analytics and stream processing engine. Prior to version 2.0.8, auser with rights to modify the service e.g. kuiperUser role can inject a cross-site scripting payload into the rule id parameter. Then, after any user with access to this service e.g...