Lucene search
+L

242 matches found

Kitploit
Kitploit
•added 2026/10/10 1:22 a.m.•14 views

Mnemosyne

Mnemosyne 나의 개인 정보보안 메모 재미있는 사실 이 프로젝트의 이름은 그리스의 기억의 여신 Mnemosyne 에서 유래했습니다. 더 나아가, 우리 이야기와 관련하여 흥미로운 점은 이것이 memory라는 단어의 기원이라는 것입니다. 사용법 Mnemosyne는 제 웹사이트의 동일한 이름의 서브도메인에서 공개적으로 이용 가능합니다. 사이트는 GitLab Pages로 호스팅됩니다. 이 링크를 통해 접속할 수 있습니다. 나만의 웹사이트 실행하기 웹사이트를 실행하려면 먼저 Hugo를 설치해야 합니다. 그런 다음, 제 저장소를...

6.3AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/09/25 12:33 a.m.•12 views

EUVD-2026-86474

Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone. Catalyst::Seal replaces the dispatcher's prepareaction with a version that memoises how a path resolved: which...

5.9AI score0.00357EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 10:17 p.m.•14 views

CVE-2026-85491

Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone. Catalyst::Seal replaces the dispatcher's prepareaction with a version that memoises how a path resolved: which...

8.8CVSS0.00357EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/24 9:54 p.m.•34 views

CVE-2026-85491

The Catalyst::Seal library for Perl (versions before 0.03 ) contains a vulnerability where a dispatch memo is keyed solely on the request path. Because the memo does not account for state such as HTTP methods, content types, or schemes, it can provide incorrect resolution results for subsequent r...

8.8CVSS5.9AI score0.00357EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/24 9:54 p.m.•38 views

CVE-2026-85491 Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone

Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone. Catalyst::Seal replaces the dispatcher's prepareaction with a version that memoises how a path resolved: which...

0.00357EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/24 9:54 p.m.•14 views

CVE-2026-85491 Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone

Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone. Catalyst::Seal replaces the dispatcher's prepareaction with a version that memoises how a path resolved: which...

5.9AI score0.00357EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•6 views

CVE-2026-85491: Incomplete Comparison with Missing Factors

Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone. Catalyst::Seal replaces the dispatcher's prepareaction with a version that memoises how a path resolved: which...

8.8CVSS5.9AI score0.00357EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/19 5:19 p.m.•17 views

CVE-2026-73136 Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay

Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated third party to obtain paid resources by replaying a transfer settled by an unrelated payer. MPP.Methods.Tempo normally binds a settled TIP-20 TransferWithMemo to the specific challenge under verification through an...

8.2CVSS5.9AI score0.00595EPSS
SaveExploits0References9
OSV
OSV
•added 2026/08/19 5:19 p.m.•15 views

EEF-CVE-2026-73136 Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay

Summary Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated third party to obtain paid resources by replaying a transfer settled by an unrelated payer. MPP.Methods.Tempo normally binds a settled TIP-20 TransferWithMemo to the specific challenge under verification...

8.2CVSS5.8AI score0.00595EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/19 5:19 p.m.•19 views

EUVD-2026-62592

Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated third party to obtain paid resources by replaying a transfer settled by an unrelated payer. MPP.Methods.Tempo normally binds a settled TIP-20 TransferWithMemo to the specific challenge under verification through an...

8.2CVSS5.9AI score0.00595EPSS
SaveExploits0References4
NVD
NVD
•added 2026/08/10 8:16 a.m.•28 views

CVE-2026-64940

Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the affected product to log in to the management console. As a result, the attacker may perform any operations available from...

8.8CVSS0.00398EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/10 7:09 a.m.•79 views

CVE-2026-64940

CVE-2026-64940 pertains to Tegalog -Fumy Otegaru Memo Logger- from Nishishi Factory. The issue arises from a permissive regular expression, enabling an attacker who can access the affected product to log in to the management console and perform operations available there. Connected advisories (NV...

8.8CVSS7.7AI score0.00398EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/10 7:09 a.m.•46 views

CVE-2026-64940

Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the affected product to log in to the management console. As a result, the attacker may perform any operations available from...

8.8CVSS0.00398EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/10 7:09 a.m.•17 views

CVE-2026-64940

Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the affected product to log in to the management console. As a result, the attacker may perform any operations available from...

8.8CVSS7.7AI score0.00398EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/10 7:09 a.m.•23 views

EUVD-2026-55081

Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the affected product to log in to the management console. As a result, the attacker may perform any operations available from...

8.8CVSS7.7AI score0.00398EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/10 12:00 a.m.•6 views

CVE-2026-64940: Permissive Regular Expression

Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the affected product to log in to the management console. As a result, the attacker may perform any operations available from...

8.8CVSS7.7AI score0.00398EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/10 12:00 a.m.•5 views

PT-2026-69390

Name of the Vulnerable Software and Affected Versions Tegalog -Fumy Otegaru Memo Logger- affected versions not specified Description The software contains a flaw caused by a permissive regular expression. This allows an attacker with access to the product to bypass authentication and log in to th...

8.8CVSS5.8AI score0.00398EPSS
SaveExploits0References5
NVD
NVD
•added 2026/08/07 7:18 p.m.•31 views

CVE-2026-71850

Hono is a Web application framework that provides support for any JavaScript runtime. From 3.8.0 to 4.12.33, memo from hono/jsx retains the result of a server side render and reuses it for later renders with comparator equal props, and request scoped values read inside the component take no part ...

4.8CVSS0.00267EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/08/07 6:42 p.m.•15 views

NPM: Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure

NPM: Hono: memo retains SSR output across requests, leading to cross-user data disclosure vulnerability discovered by ? in WordPress Npm hono versions = 3.8.0, 4.12.34...

4.8CVSS6.7AI score0.00267EPSS
SaveExploits0References4Affected Software1
Snyk
Snyk
•added 2026/08/07 6:42 p.m.•22 views

Exposure of Data Element to Wrong Session

Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session in the memo function. An attacker can access sensitive information belonging to other users by sending requests that trigger the reuse of...

5.9CVSS6.6AI score0.00267EPSS
SaveExploits0References2
Rows per page
Query Builder