1485 matches found
cve-lite-cli
Most tools tell you what's wrong. CVE Lite CLI tells you what to run. CVE Lite CLI 🏆 Officially recognized as anOWASP Lab Project Vulnerability scanning that starts in your terminal and fits cleanly into CI. Scan your lockfile, get copy-and-run fix commands, and ship clean code. Scan. Understand...
security-skills
Security Skills for Claude Code A plugin marketplace of Claude Code skills that automate security operations. Install individual skills to automate specific platforms, or combine several for end-to-end integration across your security stack. Available Skills...
idacode
IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...
Liferay Portal - Cross-Site Scripting
A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated...
WCFM WooCommerce Multivendor Marketplace < 3.4.12 - SQL Injection
The wcfmajaxcontroller AJAX action of the WCFM Marketplace WordPress plugin before 3.4.12, available to unauthenticated and authenticated user, does not properly sanitise multiple parameters before using them in SQL statements, leading to SQL injections. id: CVE-2021-24849 info: name: WCFM...
community-scripts
Community Scripts A collection of ZAP scripts provided by the community, i.e. you lot : The easiest way to use this repo in ZAP is to install the 'Community Scripts' add-on from the ZAP Marketplace. !CAUTION While we do review all scripts to ensure they don't do anything obviously malicious, you...
skills
Trail of Bits 技能市场 Trail of Bits 提供的 Claude Code 插件市场，提供增强 AI 辅助安全分析、测试和开发工作流程的技能。Codex 可通过其 Claude 市场兼容性加载此市场。 另请参阅： claude-code-config · skills-curated · claude-code-devcontainer · dropkit 安装 Claude Code 市场 root@kitploit: /plugin marketplace add trailofbits/skills 浏览并安装插件 root@kitploit: /plugin...
fastfuz-chrome-ext
FastFuzz Chrome Extension Fast fuzzing websites with chrome extension Screenshot Install Add Your Custom Files Open files.txt Paste your file or directory name in line by line Happy Hunting TODO Add response size foundings Add new specific file and directory names Add Extension to chrome extensio...
CVE-2024-58290-Xhibiter-SQLi
CVE-2024-58290-Xhibiter-SQLi 针对 Xhibiter NFT Marketplace 1.10.2（Collections 端点）中 SQL 注入的概念验证（PoC）。由 Sohel Yousef 发现。 CVE-2024-58290: Xhibiter NFT Marketplace SQL 注入 漏洞利用标题： Xhibiter NFT Marketplace 1.10.2 - SQL 注入（未认证） 日期： 2024-12-11 漏洞利用作者： Sohel Yousef 厂商主页： https://themeforest.net/user/deothem...
U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto
The U.S. Department of Justice DoJ on Wednesday announced coordinated actions aimed at an illicit online marketplace called Xinbi Guarantee that offered scam services, including seizing Telegram channels used to run the service, confiscating two cryptocurrency wallets, and deploying the Scam Cent...
CVE-2019-15233
CVE-2019-15233 FAB-2019-00157 由我发现的安全漏洞 CVE-2019-15233 安全公告: advisory 基本信息 root@kitploit: Advisory ID: FAB-2019-00157 Product: Live Input Macros Manufacturer: Old Street Solutions Affected Versions: 2.10 and before Tested Versions: 2.10 Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level:...
CVE-2026-86438 Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Action
Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-Superadmin administrators to install modules. Attackers can download and auto-activate arbitrary PHP modules from the marketplace over unsigned HTTP requests, achieving remote...
CVE-2026-86505
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace...
CVE-2026-86505
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace...
EUVD-2026-72521
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace...
CVE-2026-86505
JetBrains IntelliJ IDEA prior to 2026.2.2 contains a missing project-trust check that allowed project metadata to be leaked to the JetBrains Marketplace . The vulnerability requires a local attack vector with user interaction, resulting in a low confidentiality impact (CVSS 3.1 score: 3.3 LOW ). ...
CVE-2026-86505
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace...
CVE-2024-8289
CVE-2024-8289 CVE-2024-8289 https://vulners.com/cve/CVE-2024-8289, 供应商 wcmp 产品 MultiVendorX – 终极 WooCommerce 多供应商市场解决方案...