EUVD-2023-30060

Malicious code in bioql PyPI...

EUVD-2023-30059

Malicious code in bioql PyPI...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

Deserialization of untrusted data

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

Design/Logic Flaw

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

JD-GUI 代码问题漏洞

JD-GUI is a Java Decompiler open source independent graphical utility . Displays the Java source code in a CLASS file. A security vulnerability exists in JD-GUI version 1.6.6, which originated when the program allowed an attacker to deserialize it via UIMainWindowPreferencesProvider.singleInstanc...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26234

CVE-2023-26234 affects JD-GUI 1.6.6 and is caused by deserialization via UIMainWindowPreferencesProvider.singleInstance. Several connected records (NVD, Red Hat, OSV, CNNVD, etc.) corroborate the issue, with CVSS 3.1/3.1 base score 9.8 (CRITICAL) and potential full impact on confidentiality, inte...

JD-GUI 跨站脚本漏洞

JD-GUI is a Java Decompiler open source independent graphical utility . Displays the Java source code in a CLASS file. A security vulnerability exists in JD-GUI version 1.6.6, which originates from a program that allows attackers to conduct XSS attacks via...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26235

JD-GUI 1.6.6 is affected by an XSS vulnerability that originates in util/net/InterProcessCommunicationUtil.java, as described across multiple sources (e.g., CVE-2023-26235). The vulnerability details consistently show an XSS flaw enabling injection via the specified InterProcessCommunicationUtil....

50m-ctf: Various vulnerabilities ultimately lead to attacker control over FliteThermostat server and access to internal accounting application source code

Step 1: The Entry Point 3:50 PM PST, Tuesday Afternoon F434398 This image is the entrypoint for the 50m-ctf. It doesn't look like much at first, but one can clearly see that there's a lot of binary digits in the background. The immediate obstacle to trying to decode it is we don't know how many...

Android Pentesting Portable Integrated Environment: Appie

Appie is a software package that has been pre-configured to function as an Android Pentesting Environment on any windows based machine without the need of a Virtual MachineVM or dualboot. It is completely portable and can be carried on USB stick or your smartphone. It is one of its kind Android...

JD-GUI - Fast Java Decompiler Download

JD-GUI - Fast Java Decompiler Download JD-GUI is a standalone graphical utility that displays Java source codes of ".class" files. You can browse the reconstructed source code with the JD-GUI for instant access to methods and fields. JD-GUI is free for non-commercial use. This means that JD-GUI...