EUVD-2026-96566

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleController that lets any authenticated user query role data rules. Low-privileged attackers can request GET /sys/role/datarule/permissionId/roleId to read rule names, columns, conditions,...

CVE-2026-108647

JeecgBoot versions through 3.9.5 are susceptible to a missing authorization vulnerability within the SysCheckRuleController importExcel handler. This flaw allows low-privileged authenticated users to bypass the system:checkRule:add permission by uploading a crafted Excel workbook . Successful exp...

CVE-2026-108647 JeecgBoot through 3.9.5 Missing Authorization via /sys/checkRule/importExcel

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create validation rules through the SysCheckRuleController importExcel handler. Attackers can upload a crafted Excel workbook to bypass the system:checkRule:add permission and...

CVE-2026-108629

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization flaw in the saveDatarule handler within the SysDepartPermissionController. This vulnerability allows any authenticated user to perform unauthorized actions on department data rules. By sending departId, permissionId, and d...

CVE-2026-108629 JeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission datarule Endpoint

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartPermissionController that allows any authenticated user to modify department data rules. Low-privileged attackers can send departId, permissionId and dataRuleIds to POST...

CVE-2026-108627

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization vulnerability within the loadDatarule handler of the SysRoleController component. This flaw allows any authenticated user to perform unauthorized queries via the GET /sys/role/datarule/{permissionId}/{roleId} endpoint. A l...

CVE-2026-108627 JeecgBoot through 3.9.5 Missing Authorization via /sys/role/datarule Endpoint

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleController that lets any authenticated user query role data rules. Low-privileged attackers can request GET /sys/role/datarule/permissionId/roleId to read rule names, columns, conditions,...

detection-rules

Detection Rules Detection Rules è il luogo in cui risiedono le regole utilizzate da Elastic Security. Questo repository viene utilizzato per lo sviluppo, la manutenzione, i test, la validazione e il rilascio delle regole per il Detection Engine di Elastic Security. Questo repository è stato...

CVE-2024-50849

CVE-2024-50849: Stored XSS in the WorldServer v11.8.2 A Stored Cross-Site Scripting XSS vulnerability in the "Rules" functionality of WorldServer v11.8.2 allows a remote authenticated attacker to execute arbitrary JavaScript code. An authenticated high-privileged user must go to the "Rules" page...

mud-visualizer

Visualizzatore di Manufacturer Usage Description MUD Attenzione: mud-visualizer è attualmente in beta. Usalo a tuo rischio. Questo strumento può essere utilizzato per visualizzare i file MUD in formato JSON. Indice Motivazione Installazione Astrazioni MUD supportate Contributi Supporto Citazione...

fwhunt-scan

FwHunt Scanner per la community Strumenti per analizzare il firmware UEFI e verificare i moduli UEFI con le regole FwHunt. Dipendenze rizin v0.6.2 Installazione Installa con pip testato su python3.6 e versioni successive: $ python -m pip install fwhunt-scan Installa manualmente: $ git clone...

CVE-2024-4577-rayng

CVE-2024-4577 - PHP CGI Argument Injection Detection Lab A complete detection engineering lab for CVE-2024-4577 PHP CGI Argument Injection. Includes pre-built Vagrant boxes, Wazuh SIEM rules, and exploit tools for Blue Team training. What's Included Windows Server 2022 VM - Vulnerable XAMPP +...

duo-agentflow-auditor

Duo AgentFlow Auditor AI Code Security — catching what SAST misses in AI-generated code Built on the GitLab Duo Agent Platform 40-62% of AI-generated code contains security vulnerabilities. Traditional SAST catches CVEs. We catch what SAST misses — prompt injection, LLM output execution, unsafe M...

masc

masc Uno scanner di malware web sviluppato durante l'Hackathon CyperCamp 2017 Informazioni homepage PyPI Funzionalità Al momento, sono disponibili alcune funzionalità per qualsiasi tipo di sito web personalizzato o CMS e alcune sono disponibili solo per piattaforme specifiche: Scansiona qualsiasi...

threat-research-and-intelligence

Full Intelligence Blogs | Blog Outcomes | Report Outcomes | Public Talks ℹ️ :: Overview This repository is for the dissemination of IOCs, YARA rules and source code from threat intelligence reports published by the BlackBerry Threat Research & Intelligence team. For fully detailed reports includin...

CVE-2026-87780 LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated Stored XSS via Shipping Rules

The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an administrative page, leading to Stored XSS which will execute in the session of any administrator viewing it...

CVE-2026-87780

The LTL Freight Quotes – Old Dominion Edition WordPress plugin versions before 4.2.19 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to sanitise and escape values submitted via an unauthenticated endpoint before they are stored and subsequently rendered on an a...

YARA_Rules

Yara Rules BY MALGAMY This project contains a collection of Yara rules that can be used to identify and classify various types of files. Table of Contents Overview Installation Usage Contributing Overview Yara is a tool that allows users to create their own rules for identifying and classifying...

2022

100 Days of YARA Part 2 - Electric Detectaloo Apologies in advance for the terrible naming, but welcome to 100 Days of YARA! This repository will act as the store for all YARA ideas created during this time. Any fun scripts, tools, or rules you write can be committed to this GitHub repository! Fo...

DynamicDotNet

DynamicDotNet A collection of various and sundry code snippets that leverage .NET dynamic tradecraft Purpose To showcase offensive and defensive tooling and POCs that leverage .NET dynamic loading, staging, bootstrapping, types, objects, functions, etc. Contribute Source Code & Text Documents All...