kviklet

Kviklet Kviklet.dev | 发布说明 | Discord 在不影响开发者生产力的情况下安全访问生产环境。 Kviklet（发音为 Quick-let）将四眼原则应用于生产数据库访问，为单条 SQL 语句或限时数据库会话提供类似拉取请求的审查和批准工作流。工程师可以相互审查和批准彼此的请求，而无需将每个查询都通过 DBA 或运维团队。 Kviklet 是自托管的，作为 Docker 容器运行，并使用 PostgreSQL 数据库存储应用程序状态。其 Web 界面允许你提交、审查和执行请求。可选的企业许可证可解锁 SAML 身份验证、基于角色的审查要求、角色同步和 API...

CVE-2026-15753 zhinianboke xianyu-auto-reply review approve trusting http permission methods on the server side

A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. Affected by this vulnerability is an unknown functionality of the file /api/v1/payment/withdraw/review?action=approve. Executing a manipulation can lead to trusting http permission methods on the server side. The attack ma...

CVE-2026-15753

CVE-2026-15753 affects zhinianboke xianyu-auto-reply on Server; the vulnerability concerns the /api/v1/payment/withdraw/review?action=approve endpoint where manipulation can cause the server to trust HTTP permission methods. The patch 19fc3282a1bb78a05c34945c088525d20e081cbd is referenced as a fi...

EUVD-2025-30839

Malicious code in bioql PyPI...

Localize: XSS & HTML injection

Link: http://www.localize.io/review/3C/languages/3 while approving and reviewing a phrase, you are able to send/set a message. You can XSS that by entering an XSS string String used: ? Screenshot: http://prntscr.com/3awo2p...