685 matches found
vscode-frida
VSCode के लिए Frida Workbench Repository | Issues | Install यह एक सामुदायिक योगदान वाला प्रोजेक्ट है, जो आधिकारिक Frida टीम से संबद्ध नहीं है। इसे @CodeColorist द्वारा Visual Studio Code के लिए एक ओपन-सोर्स एक्सटेंशन के रूप में विकसित और अनुरक्षित किया जाता है, ताकि Frida स्क्रिप्टिंग अनुभव को...
redai
RedAI Um terminal de trabalho para descoberta de vulnerabilidades orientada por IA e validação ao vivo. A maioria das ferramentas de "segurança com IA" para em sinalizar código que parece vulnerável. O RedAI vai além: depois que os agentes de varredura produzem achados candidatos, agentes...
nebula
Nebula AI संचालित पेंटेस्टिंग जीरो लेयर वर्कबेंच आभार सबसे पहले, मैं सर्वशक्तिमान ईश्वर का धन्यवाद करना चाहता हूँ, जो सभी ज्ञान का स्रोत हैं। उनके बिना, यह संभव नहीं होता। Nebula एक सुरक्षा अभियान के काम करने वाले भागों को एक डेस्कटॉप सतह पर लाता है: टर्मिनल, कोड, ब्राउज़र, सहायक, फ़ाइलें, नोट्स,...
Rogue-Framework
إطار روج "اجعلها تمطر. " "روج أمينديرس" أفضل وسيط معلومات في نايت سيتي إطار روج هو منصة عمل مكتبية لـ AFL++، والفحص عبر البنى باستخدام محاكي QEMU، وتطوير قوالب الاختبار harnesses، وتحليل Ghidra الرأسي الخفيف بدون واجهة رسومية، ومحوّرات مخصصة، ومقارنة التصحيحات. صُمم عمدًا ليكون منصة عمل قابلة...
jsdeob-workbench
jsdeob-workbench منصة عمل مرئية لفك تشويش JavaScript. قم ببناء سلاسل تحويل، وتنقّل عبرها، واكتب إضافاتك الخاصة. عرض يوتيوب توضيحي https://www.youtube.com/watch?v=7zuqKoJT2BM https://www.youtube.com/watch?v=bOVnPIfjoco ما هذا؟ يكشف هذا التطبيق شجرة النحو المجرد AST لبرنامج JavaScript. جاءت الفكرة...
Linux Distros Unpatched Vulnerability : CVE-2026-34399
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data fr...
CVE-2026-71022
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Workbench. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
PT-2026-78013
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Workbench. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2026-34399
FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...
CVE-2026-34398
In FreeCAD 0.19 through 1.1.1, the BIM Project Manager's Load Template flow passes attacker-controlled FCStd Meta property values (wpposition, wpu, wpv, wpaxis) directly to Python's eval(), enabling arbitrary code execution when a user opens a malicious BIM project template. Fixed in version 1.1....
CVE-2026-34398 FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbench
FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval,...
CVE-2026-34398 FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbench
FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval,...
CVE-2026-34399 FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page
FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...
CVE-2026-34399 FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page
FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...
CVE-2026-34399
FreeCAD versions 0.19 through 1.1.0 pass SVG template scale-field data through an eval() call in src/Mod/BIM/bimcommands/BimTDPage.py (line 87), allowing arbitrary Python execution when a user creates a TechDraw page from a malicious SVG template. No in-the-wild exploitation is reported. The fix ...
CVE-2026-34399
FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...
PT-2026-76780
Name of the Vulnerable Software and Affected Versions FreeCAD versions 0.19 through 1.1.0 Description The BIM Workbench contains an eval call that processes untrusted data from SVG template files. If a user creates a TechDraw page using a malicious SVG template, arbitrary Python code can be...
Malicious code in workbench-browser-server (npm)
npm/workbench-browser-server is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11992 Malicious code in workbench-browser-server (npm)
npm/workbench-browser-server is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in @workbench-stack/core (npm)
npm/@workbench-stack/core is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...