143 matches found
CocoaPods-RCE_CVE-2024-38366
CocoaPods-RCE 本仓库更深入地剖析了在研究与破解 CocoaPods 包管理器过程中所发现的 RCE 漏洞背后的研究过程与思路。 研究发布博文可在此阅读： https://www.evasec.io/blog/eva-discovered-supply-chain-vulnerabities-in-cocoapods 研究背景 CocoaPods Trunk Server 充当 CocoaPods 的集中式存储库和分发平台，CocoaPods 是 Apple 生态系统中（尤其是 iOS 和 macOS 开发中）使用的重要库和框架。其主要目的是促进这些开源资源的无缝共享与管理。...
trunk-recorder
赞助商 你觉得 Trunk Recorder 和 OpenMHz 有用吗？ 成为赞助商，帮助支持持续的开发和运营！ 感谢所有做出贡献的人！ 🎉 V5.2 现已发布……这是我们迄今最好的版本！！ 感谢所有贡献代码、参与测试并帮助收集核心转储文件的人！ 概述 需要帮助？有能用的方案？分享出来吧！ Discord 服务器 文档 ……别忘了还有维基 Trunk Recorder 能够录制集群和常规无线电系统上的通话。它使用一个或多个软件定义无线电（SDR）来完成这项工作。SDR 捕获大范围的射频（RF）信号，然后通过软件处理接收到的内容。GNU Radio...
vlan-hopping---frogger
Frogger - VLAN 跳跃 简单的 VLAN 枚举和跳跃脚本。 由 NCC Group Plc 以开源形式发布 - http://www.nccgroup.com/ 由 Daniel Compton 开发，daniel dot compton at nccgroup dot com https://github.com/nccgroup/vlan-hopping 在 AGPL 下发布，更多信息请参阅 LICENSE 安装 git clone https://github.com/nccgroup/vlan-hopping.git 使用方法 ./frogger.sh 以 root...
CVE-2023-5502
On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing enabled on the access VLAN of the ports, a malicious supplicant may be able to bypass the requirement to perform 802.1x authentication...
CVE-2023-5502 On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication.
On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing enabled on the access VLAN of the ports, a malicious supplicant may be able to bypass the requirement to perform 802.1x authentication...
CVE-2023-5502 On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication.
On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing enabled on the access VLAN of the ports, a malicious supplicant may be able to bypass the requirement to perform 802.1x authentication...
CVE-2023-5502: Improper Authentication
On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing enabled on the access VLAN of the ports, a malicious supplicant may be able to bypass the requirement to perform 802.1x authentication...
CVE-2026-22322
A stored cross‑site scripting XSS vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry containing malicious HTML/JavaScript code. When the affected page is viewed, the injected script executes in the context of the victim’...
CVE-2026-4734: Improper Restriction of Operations within the Bounds of a Memory Buffer
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in yoyofr modizer libs/libopenmpt/openmpt-trunk/include/premake/contrib/curl/lib modules. This vulnerability is associated with program files imap.C. This issue affects modizer: before v4.3...
EUVD-2026-12791
A stored cross‑site scripting XSS vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry containing malicious HTML/JavaScript code. When the affected page is viewed, the injected script executes in the context of the victim’...
CVE-2026-22322
A stored cross‑site scripting XSS vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry containing malicious HTML/JavaScript code. When the affected page is viewed, the injected script executes in the context of the victim’...
CVE-2026-22322 Stored Cross‑Site Scripting in Link Aggregation Name Handling
A stored cross‑site scripting XSS vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry containing malicious HTML/JavaScript code. When the affected page is viewed, the injected script executes in the context of the victim’...
CVE-2026-22322
CVE-2026-22322 describes a stored XSS in the Link Aggregation configuration interface. An unauthenticated attacker can create a trunk entry containing malicious HTML/JavaScript; when the affected page is viewed, the script executes in the victim’s browser, enabling unauthorized interface manipula...
PT-2026-26038
A stored cross‑site scripting XSS vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry containing malicious HTML/JavaScript code. When the affected page is viewed, the injected script executes in the context of the victim’...
CVE-2025-62710
Sakai is a Collaboration and Learning Environment. Prior to versions 23.5 and 25.0, EncryptionUtilityServiceImpl initialized an AES256TextEncryptor password serverSecretKey using RandomStringUtils with the default java.util.Random. java.util.Random is a non‑cryptographic PRNG and can be predicted...
EUVD-2025-35634
Sakai is a Collaboration and Learning Environment. Prior to versions 23.5 and 25.0, EncryptionUtilityServiceImpl initialized an AES256TextEncryptor password serverSecretKey using RandomStringUtils with the default java.util.Random. java.util.Random is a non‑cryptographic PRNG and can be predicted...
Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl
Impact EncryptionUtilityServiceImpl initialized an AES256TextEncryptor password serverSecretKey using RandomStringUtils with the default java.util.Random. java.util.Random is a non‑cryptographic PRNG and can be predicted from limited state/seed information e.g., start time window, substantially...
GHSA-GR7H-XW4F-WH86 Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl
Impact EncryptionUtilityServiceImpl initialized an AES256TextEncryptor password serverSecretKey using RandomStringUtils with the default java.util.Random. java.util.Random is a non‑cryptographic PRNG and can be predicted from limited state/seed information e.g., start time window, substantially...