13640 matches found
Easy Digital Downloads - Privilege Escalation
Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1. id: CVE-2023-30869 info: name: Easy Digital Downloads - Privilege Escalation author: daffainfo severity: critical...
WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection
WordPress Easy Digital Downloads plugin 3.1.0.2 and 3.1.0.3 contains a SQL injection vulnerability in the s parameter of its edddownloadsearch action. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...
DCBI-Netlog-LAB v1.0 - Command Injection
An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request. id: CVE-2023-26802 info: name: DCBI-Netlog-LAB v1.0 - Command Injection author: pussycat0x...
Digital Watchdog DW Spectrum Server 4.2.0.32842 - Information Disclosure
Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call. id: CVE-2022-34534 info: name: Digital Watchdog DW Spectrum Server 4.2.0.32842 - Information Disclosure author: ritikchaddha severity: high description: | Digital Watchdog DW...
WordPress Easy Digital Downloads <= 3.2.12 - SQL Injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12. id: CVE-2024-5057 info: name: WordPress Easy Digital Downloads = 3.2.12 - SQL Injecti...
covertchannels-steganography
很多人问我如何入门隐写术/隐蔽信道领域，或如何提升相关技能。我编写这份合集，提供一些我使用和阅读过的优秀参考资料、工具和书籍（后续我会补充更多）。 书籍与论文/文章 信息隐藏技术：隐写术与数字水印 -...
StegoLab
🕵️ StegoLab – 一体化图像隐写分析工具包 StegoLab 是一个轻量级的一体化图像隐写分析套件 ，专为 CTF、网络安全挑战和数字取证 而构建。 它会自动调用 binwalk、steghide、stegseek、zsteg、exiftool 等常用工具——全部整合在一个交互式界面中。 ✨ 功能特性 🔍 元数据提取（EXIF、XMP、IPTC、ICC） 🧩 隐藏数据检测：LSB 提取、字符串搜索、zsteg 🛠 自动化工具封装：binwalk、steghide、stegseek、exiftool、strings 🎨 可视化分析：RGB 通道、灰度、位平面拆分 🔧...
CVE-2026-78904-Digital-Dinar-Drain
CVE-2026-78904 — 数字迪拉姆盗取 CBDC 发行 API — 逻辑缺陷（无限铸造） 字段| 值 ---|--- 严重性| 9.8（严重） 攻击向量| 网络 受影响版本| 2.1.0 – 2.1.3 发现者| 𝕍𝕠𝕤𝕤🥷 描述 CBDC 发行 API 中的一个严重逻辑缺陷允许具有低级别访问权限的攻击者操纵铸造和赎回端点。这能够在未经授权的情况下创建或销毁 CBDC 单位。 影响 未经授权铸造 CBDC 单位 操纵赎回请求 无限铸造攻击向量 缓解措施 升级至 CBDC 发行 API 2.1.4 或更高版本 对铸造/赎回端点实施速率限制 对所有管理操作强制执行多因素授权 时间线...
liboqs
liboqs liboqs is an open source C library for quantum-safe cryptographic algorithms. liboqs Overview Status Supported Algorithms Key encapsulation mechanisms Signature schemes Stateful signature schemes Limitations and Security Platform limitations Support limitations Quickstart Linux and Mac...
cve-2013-3900-remediation-report
Remediation Report: CVE-2013-3900 – WinVerifyTrust Vulnerability on Windows Server 2019 Azure VM Overview During a recent authenticated vulnerability assessment conducted using Tenable Nessus, CVE-2013-3900 was detected on a Windows Server 2019 virtual machine hosted in Microsoft Azure. This scan...
CVE-2025-48466
CVE-2025-48466 Advantech WISE 4060LAN / ドア制御用IoTゲートウェイにおけるModbusパケットインジェクション（スクリプト: main.py を参照） 概要 ネットワーク上のドア制御用IoTゲートウェイで動作しているModbusサーバーを何らかの方法で操作するのは非常に簡単であることがわかりました。リモートの攻撃者は、WISE-4060/LANの管理パネルにアクセスすることなく、スクリプトを実行してWISE-4060/LAN 4チャンネルデジタル入力/4チャンネルリレー出力 IoT Ethernet...
LinuxForensics
Linux 取证 一切与 Linux 取证相关的内容 注意：为便于浏览，请访问仓库主页 此处 目录 演讲 工作坊 当前团队成员： Ali Hadi，Twitter Mariam Khader，Twitter，（2019 年至今） Alayna Cash，（Linux 图形界面环境，2022 年至今） Tom Claflin，Twitter，（DFRWS USA，2023 年至今） Leahy Center，Twitter，（2021 年至今） 前团队成员 Brendan Brown，Twitter，（2019 - 2020） Victor Griswold，Twitter，（2019 -...
CVE-2026-9160
Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
EUVD-2026-76158
Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-9160 CSTI in Arma Digital's Website Template
Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-9160
CVE-2026-9160 is a template engine vulnerability in Arma Digital Media Inc. Website Template (affected through version 11092026 ). The root cause is improper neutralization of special elements in the template engine, which allows code injection . The vulnerability is rated CVSS 4.3 (MEDIUM) with ...
DFIRArtifactMuseum
DFIR Artifact Museum 描述 DFIR Artifact Museum 是一个由社区驱动的 DFIR 相关痕迹（artifacts）档案库，旨在为来自各种操作系统的痕迹示例提供一个集中的存放位置。 目的 提高样本痕迹的可获取性，让个别研究人员无需重复劳动去生成数据——坦率地说，这些数据本应只生成一次，然后与社区共享，从而将更多时间和精力花在分析上，而不是痕迹生成上。 益处 希望随着来自各种操作系统的痕迹集中存放于同一处、获得更多曝光，从未使用过 Linux 的人也能更熟悉 Linux 痕迹的样子。同样，对于只用 Linux、不用 Windows 的人来说也是如此。...
mig
MIG: Mozilla InvestiGator MIG is Mozilla's platform for investigative surgery of remote endpoints. ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the Mozilla InvestiGator MIG project. Mozilla is also no longer making use of this code internally. You are welcome to use this code as is...
rekall
Rekall discontinuation This project is no longer maintained. In December 2011, a new branch within the Volatility project was created to explore how to make the code base more modular, improve performance, and increase usability. This branch was later forked to become Rekall. The modularity allow...