GHSA-HMP2-4M7G-22CV Backstage: Scaffolder action input authorization bypass

Impact An authenticated user with access to affected Scaffolder templates could bypass configured action restrictions. Depending on integration credentials, this could grant unauthorized access to repositories and related source-control resources. Patches Patched in...

CVE-2026-106503

A flaw was found in the Backstage plugin-scaffolder-backend component. An authorization bypass allows an authenticated user with access to Scaffolder templates to circumvent configured action restrictions. By manipulating action inputs, an attacker can leverage integration credentials to gain...

ssrf-sheriff

SSRF Sheriff 이것은 Go로 작성된 SSRF 테스트 셰리프입니다. 원래 Uber H1-4420 2019 London Live Hacking Event를 위해 만들어졌지만, 현재는 다른 조직들이 구현하고 기여할 수 있도록 오픈소스로 공개되었습니다. 기능 모든 HTTP 메서드GET, POST, PUT, DELETE 등에 응답 구성 가능한 비밀 토큰 base.example.yaml 참조 콘텐츠별 응답 응답 본문에 비밀 토큰 포함 JSON XML HTML CSV TXT PNG JPEG 응답 본문에 토큰 없음 GIF MP3 M...

combobulator

Dependency Combobulator Dependency Combobulator는 오픈 소스, 모듈식 및 확장 가능한 프레임워크로, 의존성 혼동 누출과 잠재적 공격을 탐지하고 방지합니다. 이는 GitHub Packages, JFrog Artifactory와 같은 다양한 소스와 npm, maven과 같은 여러 패키지 관리 체계에 대해 평가할 수 있는 안전한 애플리케이션 릴리스를 보장하기 위한 총체적 접근 방식을 제공합니다. 대상 사용자 이 프레임워크는 보안 감사자, 침투 테스터가 사용할 수 있으며, 기업의 애플리케이션 보안...

cve-2026-71362-magento-lab

CVE-2026-71362 — Magento / Adobe Commerce 顧客セッションのID切替ラボ CVE-2026-71362 をエンドツーエンドで再現し、Adobeの修正を検証できる自己完結型のワンコマンドDockerラボです。 防御担当者、研究者、学生が、使い捨てストア上で実際のアカウント乗っ取りプリミティブを研究できます。 | ---|--- CVE| CVE-2026-71362 製品| Adobe Commerce · Adobe Commerce B2B · Magento Open Source 分類| 不適切な認可（CWE-863） —...

qemu

QEMU README QEMU는 범용 오픈 소스 머신 및 사용자 공간 에뮬레이터이자 가상화기입니다. QEMU는 하드웨어 가상화 지원 없이도 소프트웨어만으로 완전한 머신을 에뮬레이트할 수 있습니다. 동적 번역을 사용하여 매우 좋은 성능을 제공합니다. 또한 Xen 및 KVM 하이퍼바이저와 통합하여 에뮬레이트된 하드웨어를 제공하면서 하이퍼바이저가 CPU를 관리하도록 할 수 있습니다. 하이퍼바이저 지원을 통해 QEMU는 CPU에 대해 네이티브에 가까운 성능을 달성할 수 있습니다. QEMU가 CPU를 직접 에뮬레이트할 때는 한 머신예:...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

CVE-2026-107174

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107174

A security boundary bypass vulnerability exists in source-to-image due to improper sanitization of symbolic links during archive unpacking. An attacker providing a malicious builder image can embed absolute symbolic links pointing outside the extraction directory. This flaw allows the attacker to...

EUVD-2026-94367

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107174 Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107174

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

VulnHunter

VulnHunter !NOTE Capital OneのVulnHunter（Apache-2.0）のメンテナンスされたフォーク — Claude Codeだけでなく、あらゆるエージェントハーネス で動作するように構築されています。このフォークの焦点は、ハーネスのポータビリティ 、サンドボックス化された（コンテナ化された）エクスプロイト検証 、そして影響を測定したPoC です。詳細は変更の理由 · このフォークが変更する内容 · 数値をご覧ください。 パターンマッチングから証明可能性へ。...

Kyocera TASKalfa printer - Path Traversal

CCRX has a Path Traversal vulnerability. Path Traversal is an attack on web applications. By manipulating the value of the file path, an attacker can gain access to the file system, including source code and critical system settings. id: CVE-2023-34259 info: name: Kyocera TASKalfa printer - Path...

Intelbras WIN 300/WRN 342 - Credentials Disclosure

Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code. id: CVE-2021-3017 info: name: Intelbras WIN 300/WRN 342 - Credentials Disclosure author: pikpikcu severity: high description:...

LG Supersign EZ CMS - Remote Code Execution

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail. id: CVE-2018-17173 info: name: LG Supersign EZ CMS - Remote Code Execution author: pussycat0x severity: critical description: | LG SuperSign CMS allows remote attackers...

wraithwall-toolkit

WraithWall オープンソースツールキット 実際のインターネットトラフィックを処理する本番セキュリティプラットフォームから取り出し、 製品・シークレットとの結合をすべて取り除いた、4つの欺瞞エンジニアリングツール。 MIT ライセンスで公開。 これはラボのデモではない。各ツールは WraithWall の一部である — リバースプロキシの背後で稼働し、ハニーポットが24時間体制でデータを供給する、 個人開発の欺瞞プラットフォームだ。これらは単体で本当に再利用可能な部分である。ハニーポットを 運用している、カナリアを仕込んでいる、あるいは欺瞞設定をコードのようにバージョン管理したい...

Debian dla-4826 : puma - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4826 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4826-1 [email protected]...

PT-2026-107537

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass (cisco-sa-aci-epgcbp-SfDU7NLf)

According to its self-reported version, Cisco NX-OS System Software in ACI Mode is affected by a vulnerability. - A vulnerability in the endpoint group EPG contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass...