76073 matches found
dotclaude-security
dotclaude-security Scan a repo's local .claude/ config — settings.json hooks, MCP server defs, env blocks, permissions.allow — for the RCE and API-key-exfiltration footguns that fire the moment you git clone and open an untrusted repository in Claude Code. It points at the exact dangerous line so...
CVE-2024-11972-PoC
CVE-2024-11972-PoC Hunk Companion 1.9.0 - Instalación de Plugin No Autenticada Descripción El plugin Hunk Companion de WordPress anterior a 1.9.0 no autoriza correctamente algunos endpoints de la API REST, permitiendo que solicitudes no autenticadas instalen y activen cualquier plugin Hunk...
CVE-2025-11953-POC-
CVE-2025-11953 - React Native CLI RCE 研究环境 📋 概述 CVE-2025-11953 是 React Native CLI 的 Metro 开发服务器中的一个严重远程代码执行（RCE）漏洞，由 JFrog 安全团队发现。本研究环境提供了实际的有漏洞实现，用于防御性安全研究、检测开发及缓解测试。 CVSS 评分: 9.8 严重 受影响版本: @react-native-community/cli-server-api v4.8.0 – v20.0.0-alpha.2 修复版本: v20.0.0+（2025年10月发布） 漏洞类型: 通过...
pypdf: Possible long runtimes with large amount of embedded files
Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing the embedded files through the dictionary-based API. Patches This has been fixed in pypdf==6.19.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4081...
EUVD-2026-90272
pypdf: Possible long runtimes with large amount of embedded files...
ketello: Katello Content View History API Cross-Organization Authorization Bypass
A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specified by the user. An authenticated user with permission to view Content Views in one organization may be able to access the lifecycle history of a Content View...
rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter
A flaw was found in rubygem-foremanremoteexecution. A command injection vulnerability exists in the Red Hat Satellite API /api/v2/jobinvocations. When a job template has the effectiveuser property marked as overridable: true, the application fails to properly sanitize the effectiveuser input...
nanoid: nanoid: Predictable ID generation due to integer overflow
A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...
CVE-2026-67106 HCL BigFix Service Management is affected by multiple security vulnerabilities.
HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attacker to launch further, more serious attacks...
EUVD-2026-90879
HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attacker to launch further, more serious attacks...
CVE-2026-67106
HCL BigFix Service Management is affected by an Information Disclosure vulnerability. The issue stems from two exposed API endpoints that return sensitive data, which could facilitate more serious attacks. The provided documents do not specify the exact versions affected, the specific data leaked...
EUVD-2026-90877
HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling the discovery of hidden administrative API endpoints for further targeted exploitation...
CVE-2026-67104 HCL BigFix Service Management is affected by multiple security vulnerabilities.
HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling the discovery of hidden administrative API endpoints for further targeted exploitation...
CVE-2026-67104
The HCL BigFix Service Management platform is affected by an Information Disclosure vulnerability. This flaw allows an unauthenticated attacker to analyze publicly accessible JavaScript files , which may facilitate the discovery of hidden administrative API endpoints for subsequent targeted explo...
CVE-2026-79898
Fortra BoKS Manager contains a command injection vulnerability in the crlserver component. An authenticated user with permission to add CRL URLs via BCC , the WSI REST or SOAP API , or the cacrl command-line interface can trigger shell command substitution. This allows the attacker to execute com...
CVE-2026-79898 Fortra BoKS Manager crlserver command injection vulnerability
Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master...
EUVD-2026-90875
Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master...
CVE-2025-9074-Docker-Desktop-Container-Escape
CVE-2025-9074：Docker Desktop 容器逃逸 PoC CVE-2025-9074 的概念验证利用程序——Docker Desktop 中的一个严重容器逃逸漏洞，允许未授权访问 Docker Engine API。 漏洞概述 属性| 值 ---|--- CVE ID| CVE-2025-9074 CVSS 评分| 9.3（严重） 受影响软件| Docker Desktop 4.44.3 受影响平台| Windows、macOS（Linux 不受影响） 修复版本| Docker Desktop 4.44.3+ 发现者| Felix Boulet、Philippe Dug...
SiYuan discloses an administrator's open documents and search terms to anonymous readers
Summary /api/system/getConf serves Conf.UILayout to publish readers after passing it through FilterConfByPublishIgnore, whose only function is to filter that layout. The layout is written exclusively by setUILayout, which is administrator-gated, so what readers receive is the administrator's own...