PRISM-AP

PRISM-AP 概要: PRISM-APは、自動化された無線RogueAP MITM攻撃フレームワークです。 特徴: セットアップと使用が簡単で、完全自動化 MANA WiFi攻撃を活用してクライアント接続を誘引 bettercapによる部分的なHSTSバイパス すべてのHTTPヘッダー、Cookie、URLを傍受して表示 クライアントからのすべてのDNSリクエストを表示 分析しやすいように完全なWireshark PCAPを保存 driftnetを介して「スニッフィング」されたすべての画像を保存 すべてのHTTPリクエストにBeeFフックを注入 KALI/DEBIAN インストール:...

WordPress SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin <= 4.7.42 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read vulnerability

Authenticated Administrator+ Path Traversal to Arbitrary File Read vulnerability discovered by Wordfence PRISM in WordPress Plugin SSL Zen versions = 4.7.42...

WordPress NEX-Forms – Ultimate Forms Plugin for WordPress plugin <= 9.3.0 - Authenticated (Administrator+) SQL Injection vulnerability

Authenticated Administrator+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin NEX-Forms versions = 9.3.0...

WordPress Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter vulnerability

WordPress Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce plugin = 4.1.23 - Authenticated Subscriber+ Privilege Escalation via mapmetacap Filter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WP Event Solution versions = 4.1.23...

CVE-2026-85730 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, prism, lerna, kibana, renovate, langfuse, langfuse-fips, wazuh-dashboard-fips...

GHSA-7W5X-HRQM-74C2 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, prism, lerna, kibana, renovate, langfuse, langfuse-fips, wazuh-dashboard-fips...

CVE-2026-85730 vulnerabilities

Vulnerabilities for packages: lerna, langfuse, prism, renovate...

GHSA-7W5X-HRQM-74C2 vulnerabilities

Vulnerabilities for packages: lerna, langfuse, prism, renovate...

EUVD-2026-75871

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

Linux Distros Unpatched Vulnerability : CVE-2026-79590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that...

UBUNTU-CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

DEBIAN-CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

GHSA-2883-XCG3-V3HH vulnerabilities

Vulnerabilities for packages: authentik-fips, renovate, awx, eslint, ts-patch, arangodb, code-server, wazuh-dashboard, prism, gitlab-rails-ce-fips, opensearch-dashboards-fips, kubeflow-katib, argo-workflows, redisinsight, tensorflow-gpu-jupyter, lerna, kibana, sqlpad, vitess, opensearch-dashboard...

CVE-2026-84375 vulnerabilities

Vulnerabilities for packages: authentik-fips, renovate, awx, eslint, ts-patch, arangodb, code-server, wazuh-dashboard, prism, gitlab-rails-ce-fips, opensearch-dashboards-fips, kubeflow-katib, argo-workflows, redisinsight, tensorflow-gpu-jupyter, lerna, kibana, sqlpad, vitess, opensearch-dashboard...

CVE-2026-84375 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, kubeflow-katib, vitess, argo-workflows, pulumi, ts-patch, eslint, code-server, sqlpad, lerna, prism, renovate...

GHSA-2883-XCG3-V3HH vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, kubeflow-katib, vitess, argo-workflows, pulumi, ts-patch, eslint, code-server, sqlpad, lerna, prism, renovate...

PT-2026-89615

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...