CVE-2017-8641_chakra_Js_GlobalObject

描述 更多来自站点 CVE !!是的 Microsoft浏览器（运行于 Microsoft Windows 7 SP1、Windows Server 2008 R2 SP1、Windows 8.1 和 Windows RT 8.1、Windows Server 2012 及 R2、Windows 10 Gold、1511、1607、1703 以及 Windows Server 2016）在内存中处理对象时，由于 Microsoft 浏览器 JavaScript 引擎的渲染方式，允许攻击者在当前用户上下文中执行任意代码，此漏洞被称为“脚本引擎内存损坏漏洞”。此 CVE ID 不同于...

CVE-2025-54726

CVE-2025-54726 JS Archive List = 5.0.12 time-based...

LANs.py

LANs.py 注記 私はこれをメンテナンスしなくなりました。ARP や MITM の用途には bettercap を使うことを強くお勧めします。 最もアクティブな WLAN ユーザを自動的に見つけ、そのうちの 1 人をスパイし、訪問先のページに任意の HTML/JS を注入します。 対象のボックス、ルーター、必要に応じて DNS サーバーの ARP テーブルを個別にポイズンします。ネットワーク上の他のユーザーはポイズンしません。トラフィックの興味深い部分をすべて表示し、訪問先のページにカスタム HTML を注入できます。終了後はクリーンアップします。 また、近くの WiFi...

temcrypt

次世代暗号化 Webでtemcryptを試す → temcrypt SDK 高機密データの保護に特化したtemcryptは、時間の経過とともに拡張可能な複雑性を提供する高度な多層データ進化型暗号化メカニズムであり、一般的なブルートフォース攻撃に対して耐性があります。 デプロイする際に、独自のアプリケーション、スクリプト、自動化を作成できます。 知識 temcrypt が何を表すのか、特徴、作成に至ったインスピレーションなどをご確認ください。知識ドキュメントを読む。これは非常に重要です。 互換性 temcryptはNode.js...

CVE-2023-27703

CVE-2023-27703 CVE-2023-27703 Android版pikpak V1.29.2の要素デバッグインターフェース漏洩の脆弱性 pikpak 1.30.1で修正 推奨説明 pikpak v1.29.2のAndroid版は、デバッグインターフェースを介した情報漏洩を含むことが発見されました。 追加情報 詳細リンク:https://drive.google.com/drive/folders/1Szu9pjivVtG93ceECvnoAjeSABVyfDES?usp=sharing 脆弱性タイプ 不適切なアクセス制御 製品ベンダー https://mypikpak.com...

memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...

CVE-2026-104846

The Seroval library (versions 0.12.0 through 1.6.2 ) is vulnerable to an unexpected code execution flaw during the fromJSON deserialization process. The root cause involves the deserialization of a fulfilled Promise control node, which can pass a plugin-produced callable-bearing thenable to a nat...

Security Bulletin: Multiple Vulnerabilities in IBM CloudPak System

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-29074 DESCRIPTION: SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 2.1.0 to before version 2.8.1,...

CLSA-2026-1790944130 TuxCare security update for js-yaml (1 CVE)

TuxCare rebuilt js-yaml to address 1 CVE. Fixed in 3.15.2-tuxcare.1...

CVE-2026-86536

Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0 and re-generate JS code, which fixes the issue...

EUVD-2026-91397

Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0 and re-generate JS code, which fixes the issue...

CVE-2026-86536 Apache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object's prototype in generated JavaScript

Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0 and re-generate JS code, which fixes the issue...

CVE-2026-86536

Apache Thrift (versions before 0.25.0 ) is vulnerable to a prototype pollution flaw in its all JS bindings . The root cause allows a map key from the wire to replace a decoded object's prototype in the generated JavaScript code. To remediate this issue, users are recommended to upgrade to version...

CVE-2026-93880

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'GET:' Dynamic Placeholder in all versions up to, and including, 13.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

CVE-2026-93880

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 13.2.0 . The root cause is insufficient input sanitization and output escaping involving the '{{GET:}}' Dynamic Placeholder . Specifica...

CVE-2026-93880 Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'GET:' Dynamic Placeholder in all versions up to, and including, 13.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

EUVD-2026-91240

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'GET:' Dynamic Placeholder in all versions up to, and including, 13.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

CVE-2026-93880 Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'GET:' Dynamic Placeholder in all versions up to, and including, 13.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

js-jobs

js-jobs JS Job Manager 要激活插件（此处存在一个限制：插件必须包含 /.php 文件，否则将无法激活）： POST /wp-admin/admin-ajax.php HTTP/1.1 Accept: / Accept-Language: en-GB,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest Content-Length: 78...

jsleak

jsleak jsleakは、正規表現パターンを使用してJSファイル内の機密データを特定するツールです。この目的のために作られていますが、正規表現パターンがあれば何でも特定するために使用できます。 インストール方法 直接: your package manager install pkg-config libpcre++-dev go get github.com/0xTeles/jsleak/v2/jsleak コンパイル済み: リリースページ 使用方法 -json string + 出力先のJsonファイル -pattern string + テストするパターンを含むファイル...