wordlist.rb

Wordlist Source Issues Documentation Description Wordlist は、ワードリストを効率的に読み取り、結合、変異、構築するための Ruby ライブラリおよび CLI です。 Features .txt ワードリストと、.gz、.bz2、.xz、.zip、.7z 圧縮ワードリストの読み取りに対応。 任意のテキストからワードリストを構築可能。.gz, .bz2, .xz, .zip, .7z 圧縮にも対応。 テキストを単語に解析する高度なレキサーを提供。 数字、特殊文字、整数、頭字語を解析/スキップ可能。...

voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass

CVE-2026-17351 — pgAdmin 4 AI アシスタントのレキサー差分による読み取り専用バイパス CVE-2026-17351 の PoC。pgAdmin 4 の AI アシスタントに存在する重大な（CVSS 9.0）SQL インジェクションバイパスです。 脆弱性の概要 pgAdmin 4 バージョン 9.13 から 9.16 は、Python の sqlparse ライブラリを使用して、LLM が生成した SQL クエリが単一の読み取り専用ステートメントであることを検証します。PostgreSQL の standardconformingstrings =...

GO-2026-6548 Dasel: Selector lexer panics on trailing whitespace in `parseCurRune` in github.com/tomwright/dasel

Dasel: Selector lexer panics on trailing whitespace in parseCurRune in github.com/tomwright/dasel...

CVE-2025-46819

CVE-2025-46819 – Redis Lua 長文字列デリミタの範囲外読み取り 不正な長文字列デリミタにより、Redis 8.2.1 の Lua レキサーで範囲外読み取り（OOB read）が発生します。 概要 Redis 8.2.1 の Lua 長文字列パーサーは、不正な =... シーケンスを誤って処理し、バッファアンダーフローや過剰な再帰を引き起こすセンチネル値を返します。攻撃者はこれにより、Redis に範囲外読み取りを発生させたり、C スタックをオーバーフローさせたりすることができます。 環境 Redis サーバー 8.2.1（または 8.2.2...

Rocky Linux 8 [CIQ] Security Update: python3-mako (crlsa-2023_2893)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20232893 advisory. mako: REDoS in Lexer class CVE-2022-40023 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has not...

Rocky Linux 9 [CIQ] Security Update: python3-mako (crlsa-2023_2258)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20232258 advisory. python-mako: REDoS in Lexer class CVE-2022-40023 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has...

Linux Distros Unpatched Vulnerability : CVE-2026-62866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.2, selector/lexer/tokenize.go...

CVE-2026-88345

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema ends with an unterminated quotation mark, the C-string scanning logic in lex dereferences the input pointer after it has reached the end of the buffer. A specially crafted...

CVE-2026-88344

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema buffer ends with a digit, the integer digit-scan loop in lex advances past the end of the input buffer and dereferences the out-of-bounds pointer. A specially crafted schema...

EUVD-2026-84016

Dasel: Selector lexer panics on trailing whitespace in parseCurRune...

Dasel: Selector lexer panics on trailing whitespace in `parseCurRune`

Same panic class as GHSA-m5j3-4634-c2vq and GHSA-m6xr-fvfg-5g64, sister site on the same function. Trigger is any selector ending in whitespace: dasel query 'a ' panics at selector/lexer/tokenize.go:60. The whitespace-skip loop right above lines 55-57 advances p.i to p.srcLen when the input is...

GHSA-65GG-G7RW-6CPC Dasel: Selector lexer panics on trailing whitespace in `parseCurRune`

Same panic class as GHSA-m5j3-4634-c2vq and GHSA-m6xr-fvfg-5g64, sister site on the same function. Trigger is any selector ending in whitespace: dasel query 'a ' panics at selector/lexer/tokenize.go:60. The whitespace-skip loop right above lines 55-57 advances p.i to p.srcLen when the input is...

CVE-2026-88345

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e . The flaw is triggered when an exact-length FlatBuffers schema ends with an unterminated quotation mark , causing the C-string scanning logic in the lex() function to dereference the input pointer beyond the buffer...

CVE-2026-88344

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema buffer ends with a digit, the integer digit-scan loop in lex advances past the end of the input buffer and dereferences the out-of-bounds pointer. A specially crafted schema...

CVE-2026-88344

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema buffer ends with a digit, the integer digit-scan loop in lex advances past the end of the input buffer and dereferences the out-of-bounds pointer. A specially crafted schema...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-mako (UTSA-2023-002842)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002842 advisory. Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugi...

CVE-2026-88345: Out-of-bounds Read

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema ends with an unterminated quotation mark, the C-string scanning logic in lex dereferences the input pointer after it has reached the end of the buffer. A specially crafted...

CVE-2026-88345

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema ends with an unterminated quotation mark, the C-string scanning logic in lex dereferences the input pointer after it has reached the end of the buffer. A specially crafted...

PT-2026-97029

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema ends with an unterminated quotation mark, the C-string scanning logic in lex dereferences the input pointer after it has reached the end of the buffer. A specially crafted...