8755 matches found
nushell
Nushell Новый тип оболочки. Содержание Статус Изучение Nu Установка Конфигурация Философия Конвейеры Открытие файлов Плагины Цели Официально поддерживается Участие в разработке Лицензия Статус Этот проект достиг уровня качества минимально жизнеспособного продукта. Многие используют его как основн...
TABPE
TABPE Что такое TABPE? TABPE сочетание TABriz + PE — Тебриз — мой родной город, и я назвал этот проект в честь моей любви к городу — это открытый структурированный набор данных, содержащий информацию о всех PE-файлах исполняемых файлах Windows, включая .exe, .dll, .sys и т.д., на чистых, полность...
CVE-2026-97291
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
CVE-2026-97291 WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
CVE-2026-97291 WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
EUVD-2026-90218
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
CVE-2026-97291
The Schema & Structured Data for WP & AMP plugin for WordPress, versions
CVE-2026-82127
The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving several of its fields, nor escape them when outputting them back, allowing users with the editor role and above to inject arbitrary web scripts that execute when a higher...
CVE-2026-82127 Schema & Structured Data for WP & AMP < 1.67 - Editor+ Stored XSS via Taxonomy Term Fields
The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving several of its fields, nor escape them when outputting them back, allowing users with the editor role and above to inject arbitrary web scripts that execute when a higher...
CVE-2026-82127
The Schema & Structured Data for WP & AMP WordPress plugin (versions before 1.67 ) is vulnerable to a stored cross-site scripting (XSS) flaw. The vulnerability exists because the plugin fails to perform proper capability checks when saving specific fields and lacks sufficient output escaping . Th...
CVE-2026-82127 Schema & Structured Data for WP & AMP < 1.67 - Editor+ Stored XSS via Taxonomy Term Fields
The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving several of its fields, nor escape them when outputting them back, allowing users with the editor role and above to inject arbitrary web scripts that execute when a higher...
EUVD-2026-89635
The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving several of its fields, nor escape them when outputting them back, allowing users with the editor role and above to inject arbitrary web scripts that execute when a higher...
NocoBase - SQL Injection
NocoBase versions prior to 2.0.39 contain a SQL injection vulnerability in the @nocobase/database package. The queryParentSQL function in eager-loading-tree.ts constructs a recursive CTE query by directly concatenating user-controlled primary key values into the SQL WHERE IN clause without...
JS Help Desk <= 2.8.2 - SQL Injection
JS Help Desk WordPress plugin 2.8.2 contains a SQL injection caused by insufficient escaping and preparation of user-supplied values in 'js-support-ticket-token-tkstatus' cookie, letting unauthenticated attackers extract sensitive database information, exploit requires no authentication. id:...
Relapse-Exploit
PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...
Relapse-Exploit
PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...
uaf-2023-28205
CVE-2023-28205: Apple WebKit Use-After-Free 취약점 이 취약점은 Apple WebKit에 영향을 미치며, 악의적으로 조작된 웹 콘텐츠를 통해 WebKit 프로세스 컨텍스트에서 임의 코드 실행이 가능해질 수 있습니다. 이 리포지토리에서 분석된 영향받는 WebKit 빌드는 WebKit-613.1.17.1 PlayStation / Safari 15.4 계열을 기반으로 합니다. 설명 PoCProof of Concept는 구조화된 복제 작업 중 Map 및 Date와 같은 JavaScript 객체의 등록...
umberto
Umberto Umbertoは、一般的な構造化データ(JSON、XML、X.509など)を変異させるために設計されたライブラリであり、この機能をラップするコマンドラインアプリケーションです。さまざまな変異を適用したり、まったく新しい値を合成したり、既存の変異器(例: Radamsa)を構造コンポーネントに適用したりできます。文法ベースのファジングを行おうとしているなら、非常に役立つでしょう。おそらく、例を見るのが最も理解しやすいです: echo -n ""a": 1, "b": 2, "c": "test"" | umberto-mutate json knuth all...
CVE-2026-74251
Phoca Cart의 속성 필터를 통한 비인증 SQL 인젝션 Phoca Cart ≤ 6.1.6 — 비인증 공격자가 시간 기반 블라인드 인젝션으로 전체 데이터베이스 추출 요약 Phoca Cart의 공개 상점 아이템 페이지에서 a속성 및 s사양 GET 배열 매개변수가 파라미터화나 이스케이프 없이 SQL WHERE 절에 원시 형태로 연결됩니다. 비인증 공격자는 이러한 매개변수를 통해 임의의 SQL을 주입할 수 있으며, 시간 기반 블라인드 기법으로 전체 데이터베이스를 추출할 수 있습니다. 취약점은...
CVE-2026-63621
CVE-2026-63621 — camel-knative 構造化 CloudEvent ヘッダーインジェクション 同じ Apache Camel 脆弱性の実行可能な概念実証(PoC)再現プログラムです。ランタイムごとに1つ用意されています: ランタイム| ディレクトリ| スタック| スタイル ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-knative 4.18.2| 直接デコード(注記参照) Camel Quarkus| camel-quarkus/| Quarku...