fang

Este repositorio no tiene un README...

CVE-2021-22986-Poc

CVE-2021-22986-Poc 这是一个针对BIGIP iControl未经授权的远程代码执行（RCE）的PoC POC : curl -ksu admin:redacted https://192.168.123.134/mgmt/tm/access/bundle-install-tasks -d '"filePath":"id"' | jq . curl -ksu : https://192.168.123.134/mgmt/shared/authn/login -d...

CVE-2026-96759

orval before 8.29.0 fails to escape the operationId parameter when emitting it into generated TanStack Query mutator options metadata objects. Attackers can inject arbitrary JavaScript code through a crafted operationId in an OpenAPI specification that executes when generated hooks are called...

CVE-2026-96758

orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape multipart property names in generated template literals. Attackers can inject $... expressions into OpenAPI schema property names that execute as live interpolation when the...

CVE-2026-96804

MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOWALLOWPICKLEDESERIALIZATION=False security control entirely in loadmodel, which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact...

CVE-2026-96775

MLflow's dspy flavor, versions = 2.0, applies the MLFLOWALLOWPICKLEDESERIALIZATION=False security control only when the modelpath ends in .pkl, which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact...

CVE-2026-96755

orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator that converts OpenAPI schema defaults into template literals. Attackers can inject arbitrary JavaScript expressions via schema defaults containing $... syntax, which are executed at module...

CVE-2026-96757

orval before 8.29.0 fails to escape OpenAPI media-type keys when emitting them into single-quoted Content-Type string literals in generated code. Attackers can inject JavaScript through crafted media-type keys in OpenAPI specifications that executes when generated fetch operations or mock resolve...

CVE-2026-96756

orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to escape date default values in new Date calls. Attackers can inject arbitrary expressions through apostrophes in OpenAPI schema defaults to execute code with the privileges of the...

CVE-2026-96754

orval versions before 8.29.0 contain a code injection vulnerability in the @orval/hono generator that fails to escape OpenAPI path values in single-quoted route literals. Attackers can craft an OpenAPI document with an apostrophe in a static path segment to inject arbitrary JavaScript code that...

ios_Restriction_PassCode_Crack---Python-version

iOS 限制密码破解 - Python 版本 概述 iOS 限制密码破解器 ，此版本应用程序使用 Python 编程语言编写，用于破解 iPhone/iPad 的访问限制密码。 iphone/ipad 访问限制密码破解 方法（与 C 版本相同） 暴力破解 1. 从电脑中的备份文件获取 Base64 密钥和盐值。 2. 解码 Base64 密钥和盐值。 3. 使用 passlib 库通过 pbkdf2-hmac-sha1 哈希从 1 尝试到 9999 passlib 模块需提前安装：easyinstall passlib 使用方法 1. 确保使用 iTunes 将 iOS 设备备份到电脑 ...

CVE-2026-96513

A security flaw has been discovered in Neethuharii CafeManagement. This issue affects some unknown processing of the file AddProductCode.php. The manipulation of the argument image results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public...

CVE-2026-96514

A weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the file CafePortalLogin.php of the component Login Handler. This manipulation of the argument uname causes sql injection. It is possible to initiate the attack remotely. The exploit has been made...

CVE-2026-95848

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or authorizator class cannot be loaded, Server.initializeAuthenticator and Server.initializeAuthorizatorPolicy treat the failure as though no custom class was configured and fall back to...

llvm-jutsu

llvm-jutsu：反LLM混淆 这是一个32位整数 问题 现在是2025年。你花了数周精心打造了完美的许可证检查。你用了书里所有的把戏：不透明谓词、控制流扁平化、MBA表达式。你部署了。几小时内，某个家伙把你的二进制文件粘贴到Claude里，问“许可证密钥是什么？”，然后模型就直接告诉他了。 机器赢了。或者不是吗？ 古老的九字印之术 几个世纪以来，忍者一直使用手印来引导查克拉并施展忍术。那些卷轴没有告诉你的是，这些手印具有保护秘密免受机器侵扰的力量。 llvm-jutsu...

CVE-2026-6668

Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all...

dockerscan

DockerScan v2.0 The Most Comprehensive Docker Security Scanner | |...

dockerscan

DockerScan v2.0 最全面的 Docker 安全扫描器 作者：Daniel Garcia cr0hn | GitHub | 网站 功能 • 安装 • 快速开始 • 文档 • 使用场景 • 新特性 • 贡献 📑 目录 概述 功能 v2.0 新特性 安装 快速开始 用法 私有仓库认证 安全扫描器 输出格式 使用场景 对比 架构 贡献 参考 许可证 作者 🎯 概述 DockerScan v2.0 是一款面向 Docker 容器和镜像的下一代安全扫描器，完全用 Go 语言重写。它基于最新 2024-2025 年的研究成果、行业标准（CIS Benchmark、NIST SP...

CVE-2025-63564

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests...

CVE-2026-19888

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...