Goreport

Goreport v3.0，一个 Gophish 报告工具 该脚本接受您的 Gophish 活动 ID 作为参数，然后收集活动结果以呈现统计数据，并执行用户代理解析和 IP 地址的地理位置查询。Goreport 会生成 IP 地址、操作系统、浏览器类型和版本以及位置的列表，并附带每个项目在活动中出现的次数统计。 关于统计数据的说明：Goreport 会报告事件总数以及参与每个事件的邮件收件人数。换句话说，Goreport 会显示 Gophish 记录了多少次“点击链接”事件，以及有多少收件人点击了链接。这两个数字差异很大。一个发送给 10 人的活动可能有 9 次点击链接事件，而实际只有 ...

DEBIAN-CVE-2026-48125

UAParser.js is a JavaScript library to detect browsers, operating systems, CPUs, and devices from user-agent data. From 2.0.1 until 2.0.10, a regular expression denial-of-service vulnerability exists when using the Client Hints API. By sending a crafted Sec-CH-UA-Model header to an application th...

EUVD-2022-51496

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-4131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 15.5.7, all versions starting from 15.6 before 15.6.4, all version...

CVE-2023-23621 Discourse vulnerable to ReDoS in user agent parsing

Discourse is an open-source discussion platform. Prior to version 3.0.1 on the stable branch and version 3.1.0.beta2 on the beta and tests-passed branches, a malicious user can cause a regular expression denial of service using a carefully crafted user agent. This issue is patched in version 3.0....

CVE-2023-23621 Discourse vulnerable to ReDoS in user agent parsing

Discourse is an open-source discussion platform. Prior to version 3.0.1 on the stable branch and version 3.1.0.beta2 on the beta and tests-passed branches, a malicious user can cause a regular expression denial of service using a carefully crafted user agent. This issue is patched in version 3.0....

CVE-2022-4131

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. An attacker may cause Denial of Service on a GitLab instance by exploiting a regex issue in how the...

CVE-2022-4131

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. An attacker may cause Denial of Service on a GitLab instance by exploiting a regex issue in how the...

CVE-2022-29169 ReDoS on endpoint html5client/useragent in BigBlueButton

BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulnerable to regular expression denial of service ReDoS attacks. By using specific a RegularExpression, an attacker can cause denial of service for the bbb-html5...

远古视频点播系统注入漏洞

漏洞产生于文件/webmedia/oemui/user/guest.asp，访问这个页面需要注册 相关代码： szAgent = Request.ServerVariables"HTTPUSERAGENT" aTmpInfo = SplitszAgent, " ", -1, 1 aAgentInfo = SplitaTmpInfo1, "; ", -1, 1 szBrowser = aAgentInfo1 if RightaAgentInfo2, 1 = "" or RightaAgentInfo2, 1 = ";" then szOS = LeftaAgentInfo2,...