606393 matches found
CVE-2026-87859
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...
UBUNTU-CVE-2026-87859
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...
CVE-2026-87859
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...
obridge
OBridge OBridge 提供了一个简单的 Java 源代码生成器，用于调用 Oracle PL/SQL 包过程。 支持的输入、输出参数和返回值包括： BINARYINTEGER BOOLEAN CHAR CLOB BLOB DATE NCHAR NUMBER NVARCHAR2 OBJECT - Oracle 对象类型 PLSINTEGER TABLE - Oracle 对象类型的表 TIMESTAMP VARCHAR2 RAW 以下类型无法实现，因为 JDBC 驱动程序不支持它们： 在源代码中声明的类型 %ROWTYPE 参数 生成的代码可兼容 Java 1.6 编译。 用法 ...
ssh-mitm v6.0.0
SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...
DeTTECT
戦術、テクニック、脅威を検知する 最新バージョン: 2.2.0 DeTT&CT を使い始めるには、次のいずれかのリソースを確認してください: Wiki のこのページ。 NVISO の Renaud Frère が執筆したこのブログには、DeTT&CT の機能に関する包括的かつ最新の説明があります。 ブログ: mbsecure.nl/blog/2019/5/dettact-mapping-your-blue-team-to-mitre-attack または ブログ:...
CVE-2026-13158
CVE-2026-13158: Everest Toolkit クイックリンク： 完全なディープダイブ技術アドバイザリは DEV.to の記事 で読むか、研究者の公式 サイバーセキュリティポートフォリオ をご覧ください。 📌 エグゼクティブサマリーと技術メタデータ 🔍 根本原因分析 CVE-2026-13158 の根本原因は、EverestToolkit...
CVE-2026-87859 morgan vulnerable to Log Injection via unescaped double quote in quoted log fields
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...
CVE-2026-87859
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1 , the escapeLogField() function fails to escape the double quote character, which delimits quoted fields in the Apache combined log format. An unauthenticated remote attacker who controls a value written to a quote...
CVE-2026-87859 morgan vulnerable to Log Injection via unescaped double quote in quoted log fields
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...
EUVD-2026-76027
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...
CVE-2026-87859 morgan vulnerable to Log Injection via unescaped double quote in quoted log fields
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...
CVE-2026-87859
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...
windows_hardening
HardeningKitty と Windows ハードニング はじめに このプロジェクトは、Windows 10 向けのシンプルなハードニングリストとして始まりました。しばらくして、Windows のハードニングを簡素化するために HardeningKitty が作成されました。現在、HardeningKitty は Microsoft、CIS Benchmarks、DoD STIG、BSI SiSyPHuS Win10 のガイドラインをサポートしています。そしてもちろん、私自身のハードニングリストも含まれています。 これは、Windows 10...
Exploit for CVE-2026-79298
🐞 CVE-2026-79298: Incomplete Remediation of UEFI Secure Boo...
GO-2026-6302 vulnerabilities
Vulnerabilities for packages: crossplane-function-auto-ready, crossplane-function-auto-ready-fips...
linux-malware-detect
Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...
python-inquestlabs
2025年11月に廃止 inquestlabs InQuest Labs API と対話するための Pythonic なインターフェースおよびコマンドラインツールです。この API との対話に API キーは 不要 であることに注意してください。API キーがあれば、ルックバック期間を延長し、レート制限を解除し、利用可能なサンプルをダウンロードできます。ユーザーは OAuth を介してサインインして API キーを生成できます。サインインは無料です。認証は LinkedIn、Twitter、Google、Github に対応しています。 検索可能な API...
API-Security-Checklist
English | 简中版 | العربية | Azərbaycan | Български | বাংলা | Català | Čeština | Deutsch | Ελληνικά | Español | فارسی | Français | हिंदी | Indonesia | Italiano | 日本語 | 한국어 | ພາສາລາວ | Македонски | മലയാളം | Монгол | Nederlands | Polski | Português Brasil | Русский | ไทย | Türkçe | Українська | Tiếng...
CVE-2026-6642
The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bulk edit preset export/import mechanism in versions up to and including 3.35. This is due to insufficient output escaping on preset field values when they are rendered in HTML attribute contexts...