19 matches found
ImHex
リバースエンジニア、プログラマー、そして午前3時に作業する際に網膜を大切にする人々のためのヘックスエディタ。 /ˈɪmhɛks/...
ladder
Ladder Ladder は HTTP ウェブプロキシです。 简体中文 Ladder は、現代のウェブサイトにおけるペイウォール実装とコンテンツ配信動作をテスト・解析するための開発者ツールです。 これにより、開発者、研究者、パブリッシャーは、さまざまなクライアント環境（ブラウザやクローラーなど）をシミュレートし、さまざまな条件下でコンテンツがどのように配信されるかを観察できます。そのため、ペイウォール設定のデバッグ、アクセス制御や HTTP ヘッダーの検証、さまざまなユーザーエージェント間での一貫した動作の確認に役立ちます。 Ladder...
conscryptchecker
conscryptchecker IMPORTANTE! aggiungi il tuo file app/google-services.json per compilare correttamente...
oproxy
oproxy oproxy è un proxy locale HTTP, HTTPS e SOCKS5 per ispezionare, riprodurre e modificare il traffico. È pensato per sviluppatori che testano browser, CLI, app mobili, client API, servizi e suite di test sulla propria macchina o in un container Docker locale. Caratteristiche Cattura il traffi...
teller
:computer: Non lasciare mai il tuo terminale per i segreti :pager: Crea flussi di lavoro semplici e puliti per lavorare con ambienti cloud :magright: Scansiona i segreti e combatti la proliferazione dei segreti Teller - il gestore universale di segreti open-source per sviluppatori Non lasciare ma...
inspector
MCP Inspector Uno strumento per sviluppatori per ispezionare i server Model Context Protocol MCP. È distribuito come un unico pacchetto, @modelcontextprotocol/inspector, che offre tre modi per ispezionare un server: Web — un'app single-page Vite + React + Mantine con backend Node. CLI — un client...
Malicious code in arjson (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00290c05e0c41a8f51d38c629ade5b3fe76f2a89302db8daac669b0c80d13197 package.json declares "preinstall": "./.github/scripts/precheck", which on npm install executes a 976KB UPX-packed Linux ELF binary shipped under...
EUVD-2024-1586
Malicious code in bioql PyPI...
CVE-2025-49596 MCP Inspector proxy server lacks authentication between the Inspector client and proxy
The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio...
CVE-2024-32980
Spin is the developer tool for building and running serverless applications powered by WebAssembly. Prior to 2.4.3, some specifically configured Spin applications that use self requests without a specified URL authority can be induced to make requests to arbitrary hosts via the Host HTTP header...
CVE-2024-32980
CVE-2024-32980 affects Spin prior to 2.4.3. Specifically configured Spin applications that use self requests without a URL authority can be induced to make requests to arbitrary hosts via the Host header. Vulnerable conditions include: routing requests based on URL rather than Host while preservi...
Ecwid Ecommerce Shopping Cart < 6.12.4 - Missing Authorization on multiple functions
Description The plugin is vulnerable to unauthorized access of data and modification of data due to missing capability checks on multiple functions in all versions up to, and including, 6.12.3. This makes it possible for authenticated attackers to access developer tool pages...
Oracle SQL Developer 安全漏洞
Oracle SQL Developer is a free integrated development environment from Oracle Corporation that simplifies the development and management of Oracle databases. A security vulnerability exists in Oracle SQL Developer versions prior to 23.1.0. An attacker exploiting this vulnerability could take over...
Amr Shortcode Any Widget <= 4.0 - Contributor+ Stored XSS
The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. 1. Insert a...
Elastic: Synthetics Recorder: Code injection when recording website with malicious content
A vulnerability was discovered in the Synthetics Recorder tool, which allows attackers to inject arbitrary code into a recording session. The waitForNavigation event calls quote within the context of a multi-line comment, which can be escaped with a specially crafted URL. This can lead to code...
CVE-2022-24072
The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow, leading to extensions downloading and uploading when users open the developer tool...
HM Multiple Roles < 1.3 - Arbitrary Role Change
The plugin does not have any access control to prevent low privilege users to set themselves as admin via their profile page As any authenticated user, go to your Profile page and Tick the Administrator Role checkbox. In v1.2, the checkboxes are disabled in the UI but can be tampered with by eith...
Unspecified Vulnerability in Bond Technology Management JetSelect
Bond Technology Management JetSelect is an application for managing IP and networks on board. An unspecified vulnerability exists in Bond Technology Management JetSelect. An attacker could exploit this vulnerability to obtain user credentials via the Developer tool or similar...
Microsoft Internet Explorer 9 "Iedvtool.dll"畸形HTML拒绝服务漏洞
BUGTRAQ ID: 49165 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 9 Iedvtool.dll在处理畸形HTML的实现上存在空指针引用漏洞，远程攻击者可利用此漏洞使受影响浏览器崩溃，造成拒绝服务，也可能会破坏进程内存并执行任意代码 “Internet Explore 9 /Developer Tool F12”中存在远程空指针引用漏洞。 Microsoft Internet Explorer 9 厂商补丁： Microsoft ---------...