Lucene search
K

29 matches found

Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.2 views

PT-2025-43800

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debuggers Studio Marquee Addons for Elementor marquee-addons-for-elementor allows DOM-Based XSS.This issue affects Marquee Addons for Elementor: from n/a through = 3.7.12...

6.1CVSS6.4AI score0.0003EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-25783

Malicious code in bioql PyPI...

4.8CVSS6.6AI score0.00026EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-53029

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00156EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:18 p.m.2 views

CVE-2025-8700

Invoice Ninja's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access e.g. via a malicious application to attach a debugger, read or modify the process memory, inject code in the application's context...

4.8CVSS6.4AI score0.00026EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/26 12:23 p.m.5 views

CVE-2025-8700 Privilege Escalation via get-task-allow entitlement in Invoice Ninja

Invoice Ninja's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access e.g. via a malicious application to attach a debugger, read or modify the process memory, inject code in the application's context...

4.8CVSS0.00026EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2017-5206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism v...

9CVSS8.1AI score0.0241EPSS
Exploits0References2
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-18146 Malicious code in debuggers (npm)

The package debuggers was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in debuggers (npm)

The package debuggers was found to contain malicious code...

7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 9:9 a.m.2 views

CVE-2024-56231

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debuggers Studio SaasPricing saaspricing allows DOM-Based XSS.This issue affects SaasPricing: from n/a through = 1.2.4...

6.5CVSS7.2AI score0.00156EPSS
Exploits0References1
NVD
NVD
added 2024/12/31 11:15 a.m.12 views

CVE-2024-56231

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debuggers Studio SaasPricing saaspricing allows DOM-Based XSS.This issue affects SaasPricing: from n/a through = 1.2.4...

6.5CVSS0.00156EPSS
Exploits0References1
Prion
Prion
added 2024/12/31 11:15 a.m.3 views

CVE-2024-56231

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debuggers Studio SaasPricing allows DOM-Based XSS.This issue affects SaasPricing: from n/a through 1.1.4...

0.00156EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/31 10:27 a.m.4 views

CVE-2024-56231 WordPress SaasPricing plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debuggers Studio SaasPricing allows DOM-Based XSS.This issue affects SaasPricing: from n/a through 1.1.4...

6.5CVSS6.6AI score0.00156EPSS
Exploits0References1
CVE
CVE
added 2024/12/31 10:27 a.m.56 views

CVE-2024-56231

CVE-2024-56231 affects the SaasPricing WordPress plugin. Connected sources describe an authenticated Stored Cross-Site Scripting (Contributor+ level) in SaasPricing

6.5CVSS7.2AI score0.00156EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/31 12:0 a.m.2 views

PT-2024-36767 · Unknown · Debuggers Studio Saaspricing

Name of the Vulnerable Software and Affected Versions: Debuggers Studio SaasPricing versions 1.1.4 and earlier Description: The issue affects Debuggers Studio SaasPricing, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This enables Cross-site Scripting...

6.5CVSS9AI score0.00156EPSS
Exploits0References5
Kitploit
Kitploit
added 2020/11/08 8:30 p.m.103 views

ShowStopper - Anti-Debug tricks exploration tool

The ShowStopper project is a tool to help malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods. With this tool, you can attach a debugger to its process and research the debugger’s behavior for the...

7.2AI score
Exploits0References3
Kitploit
Kitploit
added 2019/08/16 10:0 p.m.545 views

Iris - WinDbg Extension To Perform Basic Detection Of Common Windows Exploit Mitigations

Iris WinDbg extension performs basic detection of common Windows exploit mitigations 32 and 64 bits. The checks implemented, as can be seen in the screenshot above, are for the loaded modules: DynamicBase ASLR DEP SEH SafeSEH CFG RFG GS AppContainer If you don't know the meaning of some of the...

7.3AI score
Exploits0References5
n0where
n0where
added 2017/08/07 9:35 p.m.41 views

The Windows Malware Analysis Distribution: flare-vm

FLARE VM is a freely available and open sourced Windows-based security distribution designed for reverse engineers, malware analysts, incident responders, forensicators, and penetration testers. Inspired by open-source Linux-based security distributions like Kali Linux, REMnux and others, FLARE V...

0.2AI score
Exploits0References2
OSV
OSV
added 2017/03/23 4:59 p.m.1 views

UBUNTU-CVE-2017-5206

Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument...

9CVSS7.3AI score0.0241EPSS
Exploits0References2
OSV
OSV
added 2017/03/23 4:59 p.m.20 views

CVE-2017-5206

Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument...

9CVSS6.7AI score
Exploits0References6
n0where
n0where
added 2016/10/09 7:56 p.m.25 views

Instruction Trace Visualisation Tool: rgat

An instruction trace visualisation tool intended to help reverse engineers make the link between target behaviour and code. rgat uses dynamic binary instrumentation courtesy of DynamoRIO to produce graphs from running executables. It creates static and animated visualisations in realtime to suppo...

Exploits0References4
Rows per page
Query Builder