85545 matches found
cirro
Cirro è una piattaforma estensibile di ricerca sulla sicurezza che consente a ricercatori e penetration tester di raccogliere, analizzare e visualizzare ambienti cloud e relazioni identitarie attraverso database a grafo. Costruita con un'architettura modulare, Cirro può essere estesa per supporta...
keeper
keeper Keeper ist ein kryptografischer Geheimnisspeicher für Go. Er verschlüsselt beliebige Byte- Nutzlasten im Ruhezustand mittels Argon2id-Schlüsselableitung und XChaCha20-Poly1305 Standard authentifizierter Verschlüsselung und speichert sie in einer eingebetteten bbolt-Datenbank. Er wird in dr...
Reproduce-CVE-2024-21513
复现 CVE-2024-21513 概述 本项目演示了 langchain-experimental 包中的漏洞 CVE-2024-21513，该漏洞影响版本 =0.0.15 且 0.0.21。由于对检索到的所有值使用了 eval，VectorSQLDatabaseChain 组件在从数据库检索值时允许任意代码执行。 复现漏洞的工作流程 该应用程序允许你通过与电影相关的 SQL 数据库（包含 ID、标题、导演、年份、评分）进行对话。 使用 langchain 的 SQLDatabase 工具连接到 PostgreSQL 数据库。 利用 OpenAI 的 GPT 模型生成 SQL 查询。 ...
cve-2026-9082
CVE-2026-9082 类型 ：SQL 注入 CWE-89 受影响产品 ：Drupal 核心（数据库抽象 API） Drupal 公告 ：SA-CORE-2026-004 发布时间 ：2026 年 5 月 20 日 严重性 ：高度严重（Drupal 20/25 | NVD CVSS 6.5） 这是什么？ CVE-2026-9082 是 Drupal 核心数据库抽象 API 中的一个 SQL 注入 漏洞。Drupal 的数据库层封装了 PDO 并在查询到达数据库之前对所有查询进行净化处理。此漏洞针对 PostgreSQL 后端 绕过了这一净化机制——精心构造的 HTTP...
CVE-2026-75417
A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the getarrchildid function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FINDINSET SQL clause without proper sanitization. This allows ...
PT-2026-82730
Name of the Vulnerable Software and Affected Versions ServiceNow AI platform affected versions not specified Description An unauthenticated user can execute arbitrary SQL statements against the underlying database of the ServiceNow AI platform. This occurs via a SQL injection in the dynamic schem...
PT-2026-82738
A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have...
PT-2026-82739
Name of the Vulnerable Software and Affected Versions MongoDB client library for PHP affected versions not specified Description The MongoDB client library for PHP fails to properly sanitize special elements within application-supplied namespace identifiers used to construct target namespaces for...
CVE-2026-75417
A SQL injection vulnerability in YzmCMS 7.5 exists in the get_arrchildid() function within application/admin/controller/category.class.php. The user-controlled parentid parameter is concatenated directly into a FIND_IN_SET() SQL clause without proper sanitization, enabling an authenticated admini...
PT-2026-82737
A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of...
subdosec
Subdosec Scanner e strumento di ricognizione per takeover di sottodomini. Installazione • Utilizzo • Basato sul web • Contributo • Scansione online • Riconoscimenti Subdosec è uno scanner per takeover di sottodomini veloce e accurato, senza falsi positivi, con un database pubblico di sottodomini...
slater
Slater Versione attuale:v0.25.2 — tutte le release. In una riga: Slater serve grafi che non stanno in memoria — centinaia di milioni di nodi e miliardi di relazioni in poche centinaia di MB di RAM — tramite il Bolt standard, quindi qualsiasi driver neo4j funziona senza modifiche, con la ricerca...
dbslice
dbslice Extrahiere minimale, referenziell intakte Datenbank-Teilmengen für lokale Entwicklung und Fehlersuche. Das Problem Die gesamte Produktionsdatenbank auf deinen Rechner zu kopieren ist unmöglich. Aber einen Fehler zu reproduzieren erfordert oft genau die Daten, die ihn verursacht haben...
CVE-2025-69295
CVE-2025-69295 — Vulnerabilità di Blind SQL Injection in TeconceTheme Coven Core CVE-2025-69295 è una vulnerabilità di SQL Injection che colpisce il componente Coven Core del tema WordPress TeconceTheme Coven Core. La vulnerabilità esiste a causa di una neutralizzazione impropria dell'input forni...
OpenContacts
OpenContacts für Android Datenschutz für Ihre Kontakte. Übersetzung Möchten Sie diese App in Ihrer eigenen Sprache sehen? Tragen Sie Übersetzungen bei. Über Diese App speichert Kontakte in einer eigenen Datenbank, getrennt von den Android-Kontakten. So hat keine andere App Zugriff auf die Kontakt...
xtrace-sdk
एन्क्रिप्टेड वेक्टर डेटाबेस। आपका डेटा कभी भी प्लेनटेक्स्ट में आपकी मशीन से बाहर नहीं जाता। दस्तावेज़ीकरण | X | LinkedIn अपनी AI मेमोरी प्रबंधित करें → mem.xtrace.ai XTrace क्या है? बाजार में हर वेक्टर डेटाबेस आपको अपना डेटा प्लेनटेक्स्ट में तीसरे पक्ष को देने की आवश्यकता होती है। XTrace ऐसा नहीं...
BlueSAM
BlueSAM BOF Un adattamento di BlueHammer come Beacon Object File per Cobalt Strike che tenta di ottenere una copia del database SAM sfruttando il comportamento degli aggiornamenti di Windows Defender/VSS e elabora i dati offline del registro da Beacon. Crediti a Nightmare-Eclipse per BlueHammer...
CVE-2019-3396_Confluence
CVE-2019-3396Confluence Alle Dokumentation befindet sich in der Skriptdatei. Dieser Exploit ist auch Teil von der Exploit Database, die von Offensive Security verwaltet wird. Screenshots...
