coeus-ci

Coeus CI すべてを見通す競合インテリジェンス。 Coeus （シーアス）にちなんで名付けられました。Coeus は、探究心を持つ百眼のギリシャ神話のティタン神であり、その名は文字通り「問いかけること」を意味します。CIはCompetitive Intelligence （競合インテリジェンス）の略です。 無料の公開データソースから企業プロフィールを構築する、ビジネスインテリジェンスOSINTツールです。ドメインを与えると、安定性、成長性、技術成熟度、財務健全性、セキュリティ体制、透明性を網羅したスコアリングレポートが返ってきます。 クイックスタート Clone and insta...

kernel: dm cache policy smq: fix missing locks in invalidating cache blocks

A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...

spring4shell-local-verification-lab

Spring4Shell 本地影响条件验证、修复与复测项目 项目简介 本项目用于学习和验证 Spring Framework CVE-2022-22965，也就是 Spring4Shell 漏洞的影响条件、风险表现、修复方法和修复后复测流程。 项目在个人搭建的本地授权环境中完成。项目重点不是对真实目标进行攻击，而是通过搭建修复前和修复后的 Spring MVC 测试环境，逐项确认漏洞相关影响条件，并使用安全、可控的只读方式观察 Spring 数据绑定内部属性路径在版本升级前后的差异。 本项目完成了以下流程： JDK、Maven 和 Apache Tomcat 环境准备 Spring MV...

TheMisfits-CVE-2024-8465-SQLi

CVE-2024-8465 – SQL注入概念验证 团队信息 团队名称：The Misfits 团队成员： Muhammad Tayyab Nisar Oluwasola SAMUEL Abubakar Mohamed Melek Balghouthi 概述 本仓库包含一个存在漏洞的Web应用程序，作为概念验证（PoC），用于演示模仿CVE-2024-8465的SQL注入漏洞。 该应用程序故意设计为不安全，展示不当的输入处理如何导致认证绕过和数据库数据泄露。 本项目仅用于学术和教育目的。 CVE参考 https://vulners.com/cve/CVE-2024-8465 展示的漏洞 ...

moveit-transfer-2023-breach

MOVEit Transfer 2023 大量データ流出 インシデント詳細 インシデント発生日: 2023年5月～6月 CVE: CVE-2023-34362 攻撃タイプ: SQLインジェクション 脅威アクター: Cl0pランサムウェアグループ 概要 2023年5月、MOVEit TransferのSQLインジェクションの脆弱性が悪用され、数百の組織から機密データが流出しました。 コースとの関連性 このプロジェクトは、Webセキュリティ、入力検証、SQLインジェクション、最小権限アクセスに関連しています。 著者 名前: YOUR NAME edXユーザー名: YOUREDXUSERNAM...

CVE-2025-68664

CVE-2025-68664 私がクリスマスに欲しいのはあなたの秘密だけ: LangGrinchがLangChainコアを襲う（CVE-2025-68664） 著者: ヤルデン・ポラット Cyataリサーチ: LangChainにおけるLangGrinch脆弱性 公開: https://cyata.ai/blog/langgrinch-langchain-core-cve-2025-68664/ 昨日、LangChainは、私がlangchain-coreで発見した脆弱性に関する重大なセキュリティアドバイザリを公開しました: CVE-2025-68664 /...

CVE-2025-51970

CVE-2025-51970 CVE-2025-51970 - Online Shopping System AdvancedにおけるSQLインジェクション 概要 PuneethReddyHC によるOnline Shopping System Advancedプロジェクトに、重大なSQLインジェクションの脆弱性が発見されました。この欠陥はaction.phpに存在し、keyword POSTパラメータからのユーザー入力を適切にサニタイズしていません。攻撃者は悪意のあるSQLを注入して、データを抽出したり、データベースを改ざんしたりすることができます。 技術詳細 脆弱性タイプ :...

Exploit for Deserialization of Untrusted Data in Openidentityplatform Openam

CVE-2026-33439 — clean-room OpenAM PoC This package rebuilds...

openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy

A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the scp command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to...

VMware vSphere - Server-Side Request Forgery

VMware vSphere HTML5 is susceptible to server-side request forgery due to improper validation of URLs in a vCenter Server plugin. An attacker with network access to port 443 can exploit this issue by sending a POST request to the plugin. This affects VMware vCenter Server 7.x before 7.0 U1c, 6.7...

Apache APISIX - Remote Code Execution

A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. When the admin key was changed or the port of Admin API was changed to a port different...

Palo Alto Networks Expedition - OS Command Injection

An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls...

Zabbix - SQL Injection

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...

Apache Cocoon 2.1.12 - XML Injection

Apache Cocoon 2.1.12 contains an XML injection caused by parsing user-provided XML with external system entities in StreamGenerator, letting attackers access arbitrary files on the server, exploit requires sending malicious XML. id: CVE-2020-11991 info: name: Apache Cocoon 2.1.12 - XML Injection...

Adminer <4.7.9 - Server-Side Request Forgery

Adminer before 4.7.9 is susceptible to server-side request forgery due to exposure of sensitive information in error messages. Users of Adminer versions bundling all drivers, e.g. adminer.php, are affected. An attacker can possibly obtain this information, modify data, and/or execute unauthorized...

Fortra FileCatalyst Workflow <= v5.1.6 - SQL Injection

A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data. Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL injection is not possible using this...

SonicWall GMS and Analytics - SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics:...

Apache Solr <=8.8.1 - Server-Side Request Forgery

Apache Solr versions 8.8.1 and prior contain a server-side request forgery vulnerability. The ReplicationHandler normally registered at "/replication" under a Solr core in Apache Solr has a "masterUrl" also "leaderUrl" alias parameter that is used to designate another ReplicationHandler on anothe...

Joomla! <3.7.1 - SQL Injection

Joomla! before 3.7.1 contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id: CVE-2017-8917 info: name: Joomla! 3.7.1 - SQL Injection...

CVE-2026-106471 Candlepin: candlepin: broken object-level authorization via verifyauthorizationfilter multi-@verify hasaccess latching

A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of multiple @Verify-annotated parameters is accessible, instead of requiring access to every verified entity. A low-privilege authenticated attacker who can access the first referenced object ca...