3274 matches found
CVE-2021-38602
CVE-2021-38602 На странице редактирования статьи в версии 5.8.7 PluXML присутствует уязвимость хранимого межсайтового скриптинга XSS. Вводимые пользователем данные не подвергаются должной санитизации в нескольких полях. Уязвимые поля: Заголовок необязательно: Содержимое: После вставки XSS может...
PyMemoryEditor
PyMemoryEditor A pure-Python library built on ctypes that lets you inspect, modify and search the memory of any running process in a few lines of Python — Cheat Engine workflows on Windows, Linux and macOS! Read, write and scan the memory of any process — straight from Python. One unified API...
APKLab
APKLab L'expérience ultime de rétro-ingénierie Android directement dans votre VS Code. APKLab intègre de manière transparente les meilleurs outils open-source : Apktool, smali-lsp, Jadx, uber-apk-signer, apk-mitm et bien d'autres dans l'excellent VS Code afin que vous puissiez vous concentrer sur...
filessh
FileSSH Файловый менеджер на основе TUI для SSH-серверов, позволяющий просматривать файлы на удалённом сервере и управлять ими, редактировать их на месте, а также рекурсивно скачивать каталоги с параллельным обходом. Кроме того, он умеет быстро открывать SSH-сессии для путей на удалённом сервере...
tcpreplay
Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like tcpdump and Wireshark. It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the...
CVE-2025-25062
CVE-2025-25062 Описание Использование Пример Временная шкала Описание Уязвимость хранимого межсайтового скриптинга XSS существует на странице редактирования постов Backdrop CMS 1.29.2. Этот скрипт объединяет уязвимость с CSRF-полезной нагрузкой для повышения привилегий с роли 'Editor' до...
IDArling
Attention Ce projet n'est plus en développement actif et le fork plus complet et à jour est probablement plus intéressant pour les nouveaux arrivants. De plus, IDA a annoncé un support officiel pour les sessions de rétro-ingénierie collaborative, et on pourrait aussi attendre cela. Présentation...
CVE-2026-73975
The research data repository system djehuty , developed by 4TU.ResearchData, is vulnerable to an authenticated SPARQL injection in versions prior to 26.3.2 . An authenticated depositor can supply a crafted session name to inject arbitrary SPARQL into state-modifying (DELETE/INSERT ) queries. This...
CVE-2026-73975 djehuty: Authenticated SPARQL injection in session editing allows writing arbitrary RDF triples
djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated depositor can inject arbitrary SPARQL into a state-modifying DELETE/INSERT query by supplying a crafted session name, letting them write and delete arbitrary triples anywhere in t...
CVE-2026-73975 djehuty: Authenticated SPARQL injection in session editing allows writing arbitrary RDF triples
djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated depositor can inject arbitrary SPARQL into a state-modifying DELETE/INSERT query by supplying a crafted session name, letting them write and delete arbitrary triples anywhere in t...
CVE-2026-70481
CVE-2026-70481 Open WebUI, затронуты версии с 0.5.0 по 0.10.2, исправлено в 0.11.0. Умеренный уровень, CVSS 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L, CWE-284 и CWE-862. В backend/openwebui/routers/channels.py обработчики обновления и удаления сообщений ветвятся в зависимости от типа...
CVE-2026-103273
Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level...
CVE-2026-103273
Ghost versions 4.3.0 before 6.58.0 are affected by an authentication bypass vulnerability. The root cause is incorrect authorization via staff tokens, which allows lower-privilege staff users to bypass post editing restrictions. Specifically, attackers possessing staff credentials can leverage th...
CVE-2026-103273 Ghost 4.3.0 before 6.58.0 Incorrect Authorization via Staff Token
Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level...
CVE-2026-103273 Ghost 4.3.0 before 6.58.0 Incorrect Authorization via Staff Token
Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level...
CVE-2026-103273 Ghost 4.3.0 before 6.58.0 Incorrect Authorization via Staff Token
Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level...
EUVD-2026-90666
Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level...
CentOS Linux 8 [TuxCare] Security Update: xterm / xterm-resize (CENTOS-STREAM8:CLSA-2026:1777030519)
The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1777030519 advisory. - xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command...
Stego-Lab
Stego-Lab Steganography. EXIF. Watermarks. Decode. Batch. Professional image privacy workflows for iPhone, iPad, and macOS. Website · GitLab · Project Page · Privacy Policy · Press Kit · Support · License Why Stego-Lab Stego-Lab brings together workflows that are usually scattered across multiple...