Lucene search
+L

141 matches found

Kitploit
Kitploit
•added 2026/10/25 4:35 p.m.•16 views

IDARustDemangler

IDA Rust Demangler This project provides a script that demangles Rust function names and normalize it for IDA, making it easier to read and understand the code. Requirements Python 3.x IDA Pro 7.x or later Dependencies The demangling algorithm used in this script is based on rs-dml binary so make...

5.9AI score
SaveExploits0References1
osv_clsa
osv_clsa
•added 2026/10/20 2:27 p.m.•12 views

CLSA-2026-1792506479 TuxCare security update for @babel/plugin-transform-function-name (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-function-name to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

9.3CVSS6.5AI score0.00563EPSS
SaveExploits0
osv_clsa
osv_clsa
•added 2026/10/20 2:27 p.m.•7 views

CLSA-2026-1792506477 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

9.3CVSS6.8AI score0.00525EPSS
SaveExploits0
osv_clsa
osv_clsa
•added 2026/10/20 2:27 p.m.•8 views

CLSA-2026-1792506478 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

9.3CVSS6.8AI score0.00525EPSS
SaveExploits0
osv_clsa
osv_clsa
•added 2026/10/20 2:27 p.m.•8 views

CLSA-2026-1792506472 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

9.3CVSS6.8AI score0.00525EPSS
SaveExploits0
osv_clsa
osv_clsa
•added 2026/10/20 11:43 a.m.•9 views

CLSA-2026-1792496621 TuxCare security update for @babel/helper-function-name (2 CVEs)

TuxCare rebuilt @babel/helper-function-name to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

9.3CVSS6.5AI score0.00563EPSS
SaveExploits0
osv_clsa
osv_clsa
•added 2026/10/20 11:43 a.m.•10 views

CLSA-2026-1792496622 TuxCare security update for @babel/helper-function-name (1 CVE)

TuxCare rebuilt @babel/helper-function-name to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

9.3CVSS6.8AI score0.00525EPSS
SaveExploits0
osv_clsa
osv_clsa
•added 2026/10/20 11:43 a.m.•10 views

CLSA-2026-1792496614 TuxCare security update for @babel/helper-function-name (1 CVE)

TuxCare rebuilt @babel/helper-function-name to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

9.3CVSS6.8AI score0.00525EPSS
SaveExploits0
osv_clsa
osv_clsa
•added 2026/10/20 11:43 a.m.•8 views

CLSA-2026-1792496615 TuxCare security update for @babel/helper-function-name (1 CVE)

TuxCare rebuilt @babel/helper-function-name to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

9.3CVSS6.8AI score0.00525EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/11 2:29 a.m.•22 views

go_parser

Otro analizador de binarios Golang para IDAPro Inglés |中文 NOTA : Ahora la última rama master es la versión de Python3. La rama master anterior se ha cambiado a la rama py2 , y temporalmente no se mantiene. Instrucciones para la rama Python3 Esta versión se desarrolla y prueba en macOS/Windows,...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/10 6:20 a.m.•16 views

rust_syscalls

RUSTSYSCALLS Stub singolo per syscall dirette e indirette con risoluzione runtime degli SSN per Windows. Caratteristiche: Una singola riga per tutte le tue syscall Hashing dei nomi delle funzioni in fase di compilazione Syscall dirette o indirette Supporto nativo per x8664, WOW64 e x86 Progettato...

6.2AI score
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/02 10:42 p.m.•19 views

NPM: Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function name

NPM: Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler POST /api/v1/query via unsanitized window-function name vulnerability discovered by ? in WordPress Npm trigger.dev versions = 4.5.5...

5.9AI score
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2026/10/02 10:42 p.m.•28 views

Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function name

Summary A cross-tenant SQL injection in the TSQL query compiler lets any authenticated trigger.dev customer read every other tenant's analytics data. The customer-facing query endpoint POST /api/v1/query accepts a TSQL/TRQL query that is compiled to ClickHouse SQL by internal-packages/tsql. The...

6AI score
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/09/14 2:00 p.m.•30 views

CVE-2026-82439

The Apache Storm DRPC server is vulnerable to unauthenticated unbounded memory growth because it maintains a map of function names to request queues. While requests are cleared, the map entries are never removed, persisting for the life of the process. Since function names are client-provided and...

9.8CVSS5.8AI score0.00338EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2026/09/10 12:00 a.m.•27 views

Function Name Is All You Need to Detect Blockchain Application Attacks

Blockchain application attacks, targeting business logic bugs in decentralized applications dApps, have been an increasing concern to their developers and users, causing significant financial loss. Existing attack detectors either rely on handcrafted rules for detection, or need difficult-to-obta...

5.8AI score
SaveExploits0
NVD
NVD
•added 2026/07/23 8:17 p.m.•38 views

CVE-2026-47670

DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution RCE. Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized functionName parameter in the /runners/load-reader endpoint...

9.4CVSS0.01757EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2026/07/23 7:12 p.m.•28 views

CVE-2026-47670 DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection

DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution RCE. Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized functionName parameter in the /runners/load-reader endpoint...

9.4CVSS6.5AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/07/23 7:12 p.m.•52 views

CVE-2026-47670 DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection

DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution RCE. Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized functionName parameter in the /runners/load-reader endpoint...

9.4CVSS0.01757EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/07/23 7:12 p.m.•20 views

CVE-2026-47670 DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection

DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution RCE. Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized functionName parameter in the /runners/load-reader endpoint...

9.4CVSS6.5AI score0.01757EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/07/23 5:34 p.m.•56 views

CVE-2026-47668 DbGate: Unauthenticated Remote Code Execution via JSON Script Runner

DbGate is cross-platform database manager. In versions 7.1.8 and prior, DbGate's JSON script runner POST /runners/start allows remote code execution via code injection in the functionName parameter of JSON script assign commands. The functionName value is interpolated directly into dynamically...

10CVSS0.03882EPSS
SaveExploits5References3
Rows per page
Query Builder