caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

CVE-2025-32463_PoC

CVE-2025-32463 NVD CVE-2025-32463 В большинстве случаев GCC не установлен по умолчанию на целевых серверах. Данное доказательство концепции предоставляет предварительно скомпилированную версию, чтобы её можно было немедленно выполнить на уязвимых системах. Использование 1. Скомпилируйте файл...

frida

Frida Boîte à outils d'instrumentation dynamique pour développeurs, rétro-ingénieurs et chercheurs en sécurité. En savoir plus sur frida.re. Deux façons d'installer 1. Installer à partir de binaires pré-construits C'est la méthode recommandée pour commencer. Tout ce que vous avez à faire est : pi...

CVE-2026-106444

A flaw was found in Handlebars. This vulnerability allows a remote attacker to execute arbitrary script code through Cross-Site Scripting XSS. When an application precompiles untrusted template text and embeds the generated output directly into an inline web script block, static content is not...

evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

CVE-2026-106444

The Handlebars templating engine (versions 4.0.0 through 4.7.10 ) is vulnerable to JavaScript Injection due to improper escaping in the Handlebars.precompile() function. Specifically, lib/handlebars/compiler/code-gen.js uses quotedString() to emit static template text without escaping sequences t...

CVE-2022-27502

Эксплойт DLL Hijacking для RealVNC Server до версии 6.9.0 CVE-2022-27502 Вы можете использовать предварительно скомпилированную 64-разрядную версию из ЗДЕСЬ Скопируйте её в %TEMP% и инициируйте восстановление RealVNC Server из меню «Программы и компоненты». После этого результат выполнения команд...

CVE-2021-4034

CVE-2021-4034 Предкомпилированные сборки для CVE-2021-4034. Конечно, вам не стоит доверять предкомпилированным сборкам : Этот релиз работает немного иначе: сначала создаётся минимальный разделяемый объект. Этот объект упаковывается в основной бинарный файл и сбрасывается при выполнении. Для...

precompiled-CVE-2018-10933

precompiled-CVE-2018-10933...

UBUNTU-CVE-2026-79310

webpy web.py 0.76 is vulnerable to server-side template injection SSTI. The template engine can be tricked into executing attacker-controlled template code that built-in security checks are designed to reject. When an application precompiles templates from a directory the attacker can write to an...

CVE-2026-79310

webpy web.py 0.76 is vulnerable to server-side template injection SSTI. The template engine can be tricked into executing attacker-controlled template code that built-in security checks are designed to reject. When an application precompiles templates from a directory the attacker can write to an...

EUVD-2026-85403

webpy web.py 0.76 is vulnerable to server-side template injection SSTI. The template engine can be tricked into executing attacker-controlled template code that built-in security checks are designed to reject. When an application precompiles templates from a directory the attacker can write to an...

CVE-2026-79310: Improper Control of Generation of Code

webpy web.py 0.76 is vulnerable to server-side template injection SSTI. The template engine can be tricked into executing attacker-controlled template code that built-in security checks are designed to reject. When an application precompiles templates from a directory the attacker can write to an...

CVE-2026-79310

webpy web.py 0.76 is vulnerable to server-side template injection SSTI. The template engine can be tricked into executing attacker-controlled template code that built-in security checks are designed to reject. When an application precompiles templates from a directory the attacker can write to an...

PT-2026-97357

Name of the Vulnerable Software and Affected Versions web.py version 0.76 Description Server-side template injection SSTI occurs when the template engine is tricked into executing attacker-controlled template code, bypassing built-in security checks. This happens when an application precompiles...

CVE-2026-79310

webpy web.py 0.76 is vulnerable to server-side template injection (SSTI) . The vulnerability exists because the template engine can be manipulated into executing attacker-controlled code that bypasses built-in security checks. Specifically, if an application precompiles templates from a directory...

CVE-2026-50124

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase can be exploited by uploading payload.zip through the Excel upload API /datasource/upload, creating an H2 datasource that uses the zip: protocol, and executing an SQL dataset path where...

CVE-2026-50124 DataEase: Remote Code Execution (RCE) via Zip Protocol & File Dropper

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase can be exploited by uploading payload.zip through the Excel upload API /datasource/upload, creating an H2 datasource that uses the zip: protocol, and executing an SQL dataset path where...

Malicious code in ai3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83540d952123c5d1199bbec1a72d0c4c49c428f309b9d68df45e307b852000a7 package.json declares "preinstall": "./.github/scripts/precheck", which points at a 976,568-byte precompiled Linux ELF x86-64 binary shipped inside t...

solspace/craft-freeform Exposed to Known Axios Vulnerabilities via Precompiled Assets

Summary The latest versions of both 4.x and 5.x are using Axios versions 1.7.5 and as such are subject to known vulnerabilities as per: https://security.snyk.io/package/npm/axios Details We've had this flagged up in a pen test, which indicates the issue stems from this script: /freeform/plugin.js...