identYwaf

identYwaf 是一个基于盲推断识别网页防护类型（即 WAF）的工具。盲推断通过检查由一组预定义的攻击性（非破坏性）Payload 所引发的响应来执行，这些 Payload 仅用于触发中间的网页防护系统（例如 http://?aeD0oowi=1 AND 21）。目前它支持超过 80 种不同的防护产品（例如 aeSecure、Airlock、CleanTalk、CrawlProtect、Imunify360、MalCare、ModSecurity、Palo Alto、SiteGuard、UrlScan、Wallarm、WatchGuard、Wordfence 等），知识库也在不断扩充...

PT-2026-63490

Name of the Vulnerable Software and Affected Versions BandiZip version 7.37 Description An authentication bypass issue exists that allows remote attackers to circumvent the Mark-of-the-Web protection mechanism. Mark-of-the-Web is a security feature used by operating systems to identify files that...

CVE-2026-44887 Unauthenticated RCE via Python Config File Injection in SaveConfigFile() (Path)

Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's web-based configuration editor allows arbitrary Python code to be injected into pialert.conf. Since the background scan daemon loads this file via Python's exec, injected code executes as the...

Why Malwarebytes blocks some Yahoo Mail redirects

Some Malwarebytes users have recently noticed frequent web protection alerts while reading email in Yahoo Mail’s web interface. These alerts are caused by background connections from the Yahoo Mail page to a set of third‑party domains that our products and other security tools currently classify ...

SENTINELSHIELD-ADVANCED-INTRUSION-DETECTION-WEB-PROTECTION-SYSTEM

No d...

The vulnerability of Cisco Unified Contact Center Enterprise and Cisco Packaged Contact Center Enterprise software lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of Cisco Unified Contact Center Enterprise and Cisco Packaged Contact Center Enterprise software lies in the insufficient protection of the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks XSS remotely...

CVE-2020-37056 Crystal Shard http-protection 0.2.0 - IP Spoofing Bypass

Crystal Shard http-protection 0.2.0 contains an IP spoofing vulnerability that allows attackers to bypass protection middleware by manipulating request headers. Attackers can hardcode consistent IP values across X-Forwarded-For, X-Client-IP, and X-Real-IP headers to circumvent security checks and...

EUVD-2019-6624

Malware in sbrugna...

EUVD-2009-5072

Malware in sbrugna...

EUVD-2019-6627

Malware in sbrugna...

EUVD-2017-17063

Malware in sbrugna...

EUVD-2019-15711

Malware in sbrugna...

EUVD-2019-6625

Malware in sbrugna...

EUVD-2024-37619

Malicious code in bioql PyPI...

EUVD-2023-32701

Malicious code in bioql PyPI...

EUVD-2025-31273

Malicious code in bioql PyPI...

CVE-2025-60127

Missing Authorization vulnerability in ArtistScope CopySafe Web Protection wp-copysafe-web allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CopySafe Web Protection: from n/a through = 5.1...

WordPress CopySafe Web Protection plugin <= 5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin CopySafe Web Protection versions = 5.1...

CVE-2025-60127

Missing Authorization vulnerability in ArtistScope CopySafe Web Protection wp-copysafe-web allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CopySafe Web Protection: from n/a through = 5.1...

CVE-2025-60127

CopySafe Web Protection (Copy Protect Images) is listed as vulnerable under CVE-2025-60127 due to a Missing Authorization issue. The problem arises from incorrectly configured access control security levels, enabling unauthorized actions within the affected product. The vulnerability is associate...