Lucene search
+L

108 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•7 views

Malicious code in sudo-compile-visualize-rho-fast (npm)

The package sudo-compile-visualize-rho-fast was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•7 views

Malicious code in visualize-warn-finally-bash-final (npm)

The package visualize-warn-finally-bash-final was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•5 views

MAL-2025-19643 Malicious code in encrypt-compile-signal-visualize-root (npm)

The package encrypt-compile-signal-visualize-root was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•5 views

MAL-2025-37869 Malicious code in unix-visualize-stub-file-big (npm)

The package unix-visualize-stub-file-big was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-19084 Malicious code in earth-grid-bad-visualize-warn (npm)

The package earth-grid-bad-visualize-warn was found to contain malicious code...

7.2AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2025/08/11 12:00 p.m.•13 views

Visualize Security Success with the Security Summary Dashboard

...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/05/31 12:00 a.m.•29 views

PT-2024-36568

Name of the Vulnerable Software and Affected Versions Vanna library affected versions not specified Description The Vanna library is affected by a remote code execution issue due to prompt injection. This allows an attacker to alter the prompt function used for visualized results and run arbitrar...

9.2CVSS8.9AI score0.15178EPSS
SaveExploits0References20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/31 12:00 a.m.•1 views

CVE-2024-5565: Improper Control of Generation of Code

The Vanna library uses a prompt function to present the user with visualized results, it is possible to alter the prompt using prompt injection and run arbitrary Python code instead of the intended visualization code. Specifically - allowing external input to the library’s “ask” method with...

8.1CVSS8.5AI score0.15178EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/05/18 12:00 a.m.•22 views

PT-2023-11364 · Umbraco · Umbraco Cms

Name of the Vulnerable Software and Affected Versions: Umbraco CMS versions 4.11.8 through 7.15.10 Umbraco CMS version 7.12.4 Description: The issue allows Remote Code Execution by authenticated administrators via msxsl:script in an xsltSelection to "developer/Xslt/xsltVisualize.aspx"...

7.2CVSS7.5AI score0.0412EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2023/05/18 12:00 a.m.•14 views

Umbraco 安全漏洞

Umbraco is an open source Content Management System CMS written in C by the Danish company Umbraco. A security vulnerability exists in Umbraco CMS version 7.12.4, which originates from a vulnerability that allows an authenticated administrator to execute remote code via msxsl:script in...

7.2CVSS7.4AI score0.0412EPSS
SaveExploits1References5
Kitploit
Kitploit
•added 2023/04/26 12:30 p.m.•76 views

PortEx - Java Library To Analyse Portable Executable Files With A Special Focus On Malware Analysis And PE Malformation Robustness

PortEx is a Java library for static malware analysis of Portable Executable files. Its focus is on PE malformation robustness, and anomaly detection. PortEx is written in Java and Scala, and targeted at Java applications. Features Reading header information from: MSDOS Header, COFF File Header,...

7.1AI score
SaveExploits0References5
Akamai Blog
Akamai Blog
•added 2021/05/12 1:00 p.m.•16 views

Visualize and Analyze Bots With Real User Monitoring

...

2AI score
SaveExploits0
Kitploit
Kitploit
•added 2019/12/25 11:30 a.m.•105 views

PAKURI - Penetration Test Achieve Knowledge Unite Rapid Interface

What's PAKURI In Japanese, imitating is called “Pakuru”. ぱくる godan conjugation, hiragana and katakana パクる, rōmaji pakuru 1. eat with a wide open mouth 2. steal when one isn't looking, snatch, swipe 3. copy someone's idea or design 4. nab, be caught by the police Wiktionary:ぱくる Description...

7.6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2018/06/21 1:43 p.m.•26 views

LeakScraper - An Efficient Set Of Tools To Process And Visualize Huge Text Files Containing Credentials

LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. These tools are designed to help pentesters/redteamers doing OSINT, credentials gathering and credentials stuffing attacks. Installation First things first : have a workingmongodb server. The...

7.2AI score
SaveExploits0References2
Veracode
Veracode
•added 2018/01/31 5:56 a.m.•29 views

Cross-site Scripting (XSS)

Kibana is vulnerable to cross-site scripting XSS attacks. This is because the visualization title is enabled in render function of visualizeembeddablefactory.js which allows an attacker to inject and execute arbitrary webscript...

6.1CVSS5.9AI score0.00899EPSS
SaveExploits0References4Affected Software1
ThreatPost
ThreatPost
•added 2016/02/08 8:05 a.m.•169 views

Modern Defenders Share, Visualize and Succeed

TENERIFE, Spain – Network defenders who rely solely on lists of assets to protect are running a fool’s errand. Instead, it’s crucial to think in graphs to not only visualize threats, but also to understand network edges, and dependencies between assets and accounts in order to be able to capture...

9.3CVSS7.5AI score0.99945EPSS
SaveExploits33
phpMyAdmin
phpMyAdmin
•added 2012/08/16 12:00 a.m.•46 views

Multiple XSS in Table operations, Database structure, Trigger and Visualize GIS data pages.

PMASA-2012-4 Announcement-ID: PMASA-2012-4 Date: 2012-08-16 Summary Multiple XSS in Table operations, Database structure, Trigger and Visualize GIS data pages. Description Using a crafted table name, it was possible to produce a XSS : 1 On the Database Structure page, creating a new table with a...

3.5CVSS7.9AI score0.01449EPSS
SaveExploits1Affected Software1
FreeBSD
FreeBSD
•added 2012/08/12 12:00 a.m.•31 views

phpMyAdmin -- Multiple XSS in Table operations, Database structure, Trigger and Visualize GIS data pages

The phpMyAdmin development team reports: Using a crafted table name, it was possible to produce a XSS : 1 On the Database Structure page, creating a new table with a crafted name 2 On the Database Structure page, using the Empty and Drop links of the crafted table name 3 On the Table Operations...

3.5CVSS8AI score0.01449EPSS
SaveExploits1References1
ThreatPost
ThreatPost
•added 2012/06/15 3:07 p.m.•18 views

Video: One Minute Of Global Botnet Traffic

We write often about attacks linked to massive botnets like Cutwail, Sality and others. But what does botnet activity really look like, were you to visualize it? Security firm Unveillance has put together this short five minute video to help explain. In the video, Unveillance caputred one minute ...

1.7AI score
SaveExploits0References1
Packet Storm
Packet Storm
•added 2008/07/10 12:00 a.m.•28 views

joomlaclickheat-rfi.txt

Joomla Component comclickheat Multiple vulnerabilities By: e.wiZz! Site: madspot.org Info: bosnian ftw! In the wild..... Info: Clickheat is an add-on for Joomla, which primary goal is to "visualize" clicks made on the pages of your website. Upon collecting enough information, Clickheat displays a...

7.4AI score
SaveExploits0
Rows per page
Query Builder