Lucene search
+L

27 matches found

Kitploit
Kitploit
added 2026/09/01 1:19 a.m.2 views

teler-waf

teler-waf teler-waf 是一个面向基于 Go 的 Web 应用程序的综合性安全解决方案。它作为一个 HTTP 中间件,提供了将 teler IDS 的 IDS 功能集成到现有 Go 应用程序中的易用接口。通过使用 teler-waf,您可以有效防御多种基于 Web 的攻击,例如跨站脚本(XSS)和 SQL 注入。 该包自带标准的 net/http.Handler,便于集成到应用程序的路由中。当客户端请求访问由 teler-waf 保护的路由时,请求会首先通过 teler IDS 进行检测,以识别已知的恶意模式。如果未检测到恶意模式,请求才会被放行进行后续处理。 除了提供针...

5.8AI score
SaveExploits0References19
Kitploit
Kitploit
added 2026/08/28 4:20 a.m.3 views

teler

!IMPORTANT Liebe Nutzer, Wir möchten Ihnen einige wichtige Informationen zur Entwicklung von teler IDS mitteilen. 🛑 Die Entwicklung von teler IDS ist derzeit pausiert. Wir freuen uns jedoch, Ihnen mitteilen zu können, dass wir einen mutigen Schritt unternommen haben und mit einer vollständigen...

5.9AI score
SaveExploits0References14
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-1062

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00516EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2023-0966

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00536EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/05/23 5:38 a.m.12 views

CVE-2023-26047

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version v0.2.0 is vulnerable to a bypass attack when a specific case-sensitive hex entities payload with special characters such as CR/LF and horizontal tab is used...

6.5CVSS6.3AI score0.00516EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:39 a.m.12 views

CVE-2023-26046

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version 0.1.1 is vulnerable to bypassing common web attack rules when a specific HTML entities payload is used. This vulnerability allows an attacker to execute...

6.5CVSS6.1AI score0.00536EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/03 11:15 p.m.55 views

CVE-2023-26047

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version v0.2.0 is vulnerable to a bypass attack when a specific case-sensitive hex entities payload with special characters such as CR/LF and horizontal tab is used...

6.5CVSS6.5AI score0.00516EPSS
SaveExploits0References3
Prion
Prion
added 2023/03/03 11:15 p.m.15 views

Cross site scripting

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version v0.2.0 is vulnerable to a bypass attack when a specific case-sensitive hex entities payload with special characters such as CR/LF and horizontal tab is used...

5.8CVSS6.3AI score0.00516EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/03/03 10:44 p.m.57 views

CVE-2023-26047 teler-waf contains detection rule bypass via entities payload

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version v0.2.0 is vulnerable to a bypass attack when a specific case-sensitive hex entities payload with special characters such as CR/LF and horizontal tab is used...

6.5CVSS6.6AI score0.00516EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/03/03 10:44 p.m.6 views

CVE-2023-26047 teler-waf contains detection rule bypass via entities payload

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version v0.2.0 is vulnerable to a bypass attack when a specific case-sensitive hex entities payload with special characters such as CR/LF and horizontal tab is used...

6.5CVSS6.5AI score0.00516EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/03 10:44 p.m.32 views

CVE-2023-26047 teler-waf contains detection rule bypass via entities payload

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version v0.2.0 is vulnerable to a bypass attack when a specific case-sensitive hex entities payload with special characters such as CR/LF and horizontal tab is used...

6.5CVSS6.3AI score
SaveExploits0References5
CVE
CVE
added 2023/03/03 10:44 p.m.91 views

CVE-2023-26047

CVE-2023-26047 affects the Go HTTP middleware teler-waf (pre-0.2.0). The issue is a bypass vulnerability where a specific case-sensitive hex-entities payload containing CR/LF and horizontal tab can bypass web-attack rules, enabling an attacker to inject and execute arbitrary JavaScript in victims...

6.5CVSS6.3AI score0.00516EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/03/03 12:00 a.m.15 views

teler-waf 安全漏洞

teler-waf is a Go HTTP middleware that provides teler IDS functionality to prevent Web-based attacks and improve the security of Go-based Web applications. It is highly configurable and easy to integrate into existing Go applications. A security vulnerability exists in teler-waf versions prior to...

6.5CVSS6.9AI score0.00516EPSS
SaveExploits0References4
NVD
NVD
added 2023/03/02 1:15 a.m.37 views

CVE-2023-26046

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version 0.1.1 is vulnerable to bypassing common web attack rules when a specific HTML entities payload is used. This vulnerability allows an attacker to execute...

6.5CVSS6.4AI score0.00536EPSS
SaveExploits0References3
Prion
Prion
added 2023/03/02 1:15 a.m.14 views

Cross site scripting

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version 0.1.1 is vulnerable to bypassing common web attack rules when a specific HTML entities payload is used. This vulnerability allows an attacker to execute...

5.8CVSS6.2AI score0.00536EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/03/02 12:34 a.m.44 views

GO-2023-1597 Cross site scripting in github.com/kitabisa/teler-waf

Improper sanitization and filtering of HTML entities in user input can lead to cross-site scripting XSS attacks where arbitrary JavaScript code is executed in the browser...

6.5CVSS5.9AI score0.00536EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/03/02 12:14 a.m.36 views

CVE-2023-26046 teler-waf subject to bypass of common web attack threat rule with HTML entities payload

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version 0.1.1 is vulnerable to bypassing common web attack rules when a specific HTML entities payload is used. This vulnerability allows an attacker to execute...

6.5CVSS6.6AI score0.00536EPSS
SaveExploits0References3
CVE
CVE
added 2023/03/02 12:14 a.m.79 views

CVE-2023-26046

CVE-2023-26046 affects kitabisa/teler-waf (Go HTTP middleware). Prior to v0.1.1, it fails to properly sanitize HTML entities in user input, enabling bypass of common web attack rules and enabling cross-site scripting (XSS) in a victim’s browser. Impact described across multiple sources includes a...

6.5CVSS6.3AI score0.00536EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/02 12:14 a.m.10 views

CVE-2023-26046 teler-waf subject to bypass of common web attack threat rule with HTML entities payload

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version 0.1.1 is vulnerable to bypassing common web attack rules when a specific HTML entities payload is used. This vulnerability allows an attacker to execute...

6.5CVSS6.4AI score0.00536EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/02 12:14 a.m.33 views

CVE-2023-26046 teler-waf subject to bypass of common web attack threat rule with HTML entities payload

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version 0.1.1 is vulnerable to bypassing common web attack rules when a specific HTML entities payload is used. This vulnerability allows an attacker to execute...

6.5CVSS6.2AI score
SaveExploits0References5
Rows per page
Query Builder