CVE-2025-12137

1 使用当前 nonce 调用插件 REST API 的辅助函数 async function iwpFetchpath, method='GET', body const nonce = window?.wpApiSettings?.nonce || jQuery?.ajaxSettings?.headers?.'X-WP-Nonce'; const res = await fetch$location.origin/wordpress/wp-json/iwp/v1$path, method, headers: 'Content-Type':'application/json',...

LinkedIntel

LinkedIntel ╔══════════════════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██▓ ██▓ ███▄ █ ██ ▄█▀▓█████ ▓█████▄ ██▓ ███▄ █ ▄▄▄█████▓▓█████ ██▓ ║ ║ ▓██▒ ▓██▒ ██ ▀█ █ ██▄█▒ ▓█ ▀ ▒██▀ ██▌▓██▒ ██ ▀█ █ ▓ ██▒ ▓▒▓█ ▀ ▓██▒ ║ ║ ▒██▒ ▒██▒▓██ ▀█ ██▒▓███▄░ ▒███ ░██ █▌▒██▒▓██ ▀█...

CVE-2021-40539

CVE-2021-40539 CVE-2021-40539：ADSelfService Plus RCE漏洞 一：漏洞描述 ZOHO ManageEngine ADSelfService Plus是卓豪（ZOHO）公司的针对 Active Directory 和云应用程序的集成式自助密码管理和单点登录解决方案。 CVE-2021-40539 Zoho ManageEngine ADSelfService Plus 6113 及更早版本存在 REST API 身份验证绕过漏洞，远程攻击者可以利用此漏洞来控制受影响的系统。该漏洞CVSS评分：9.33，危害等级：严重 二：漏洞利用...

Hardcoded Admin Credentials For Cisco Smart Licensing Utility API

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to log in to an affected system by using a static administrative credential.This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit...

CVE-2026-94609

CVE-2026-94609 — authentik 通过委派组/用户管理实现权限提升 -important 关于 goauthentik/authentik 中一个权限提升漏洞的分析文章与概念验证， 该漏洞已在 2026.2.7 / 2026.5.7 / 2026.8.2 中修复，并被分配为 CVE-2026-94609 GHSA-h6c5-mpvq-j4jc。 我是该公告中受致谢的报告者之一 @anthonyk2923 — 致谢已接受。 本仓库记录了我独立发现并报告的特定代码路径，以及一个 PoC。已发布的公告涵盖了 更广泛、更完整的整体问题（组层级 +...

rep-openai-artifactory

Forensis Lab — AI Agent 权限提升的取证复现（JFrog Artifactory） 对 "Incidente Cero" （OpenAI，2026 年 5 月）的安全、隔离、取证式复现：一个沙箱化的 AI agent 发现了 JFrog Artifactory 软件包代理，从自身配置中提取凭据，在服务器上临时搭建了一个留言板，并从 读取者 提升为管理员 。 研究目标 ：确定有多少 基线配置 促成了该事件。实验在创建管理员用户（即"flag"）时结束。它不涵盖完整事件。 要求 Docker + Docker Compose （已在 Windows/WSL 和 Linu...

CVE-2026-85706-PoC-Toolkit

CVE‑2026‑85706 – GitLab 未认证文件读取工具包 ⚠️ 仅限道德用途 – 授权安全测试 本仓库仅为授权安全专业人员、蓝队和渗透测试人员 提供工具。 未经授权访问计算机系统在美国 CFAA、英国《计算机滥用法》、土耳其 TCK 243/244 以及全球类似法律 下均属违法。 📖 漏洞概述 CVE‑2026‑85706 是自管理 GitLab CE/EE （版本 18.7 至 19.3.1 ）中的一个严重未认证任意本地文件读取 漏洞，允许未认证攻击者通过向 commits API 发送单个 HTTP 请求读取服务器上的任意文件。 工作原理 1. Workhorse 与...

CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content API SQL 注入 PoC ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c 概述 CVE-2026-26980 是 TryGhost Ghost CMS Content API 中的一个未认证 SQL 注入漏洞。当处理 slug:... 排序时，可通过公开的 Content API 过滤器处理逻辑访问到该漏洞路径。 本 PoC 构建了一个受控的 Ghost...

CVE-2026-103097

An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...

CVE-2026-103096

API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...

HTB-TwoMillion-Writeup

HTB-TwoMillion-Writeup HackTheBox TwoMillion マシンの攻略記事 — API 悪用、コマンドインジェクション & CVE-2023-0386 HackTheBox — TwoMillion 攻略記事 HackTheBox — TwoMillion 攻略記事 マシン情報 項目| 詳細 ---|--- 名前| TwoMillion 難易度| 簡単 OS| Linux IP| 10.10.11.221 CVE| CVE-2023-0386 概要 TwoMillion は、旧 HackTheBox プラットフォームをテーマにした Easy な Linux...

qemu-t8030

QEMU README QEMU は汎用的でオープンソースのマシン＆ユーザースペースエミュレータであり、 仮想化ソフトウェアです。 QEMU はハードウェア仮想化支援機能を必要とせず、ソフトウェアのみでマシン全体を エミュレートすることができます。動的変換を用いることで、非常に優れた性能を 実現します。また、QEMU は Xen や KVM ハイパーバイザと統合し、ハイパーバイザが CPU を管理する一方でエミュレートされたハードウェアを提供することも可能です。 ハイパーバイザのサポートがある場合、QEMU は CPU に関してネイティブに近い性能を 達成できます。QEMU が CPU...

EUVD-2026-91114

infiniflow ragflow 0.25.3 contains improper access control in resume api/apps/connectorapp.py. Depending on the exposed entry, an attacker can perform unauthorized cross-session or privilege-crossing operations...

EUVD-2026-91115

Ragflow 0.24.0 and prior contains improper access control in updatemetadatasetting api/apps/kbapp.py. Depending on the exposed entry, an attacker can perform unauthorized cross-session or privilege-crossing operations...

EUVD-2026-91065

PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret deletecode and uploader metadata by calling the API::info endpoint which returns the complete raw metadata object without a field whitelist. Attackers can use the...

GHSA-QQW9-2VJ9-HX7R Duplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w584-2h2r-2hvf. This link is maintained to preserve external references. Original Description langflow-ai langflow v1.9.3 is affected by: Code Injection. The impact is: execute arbitrary code remote. The compone...

Duplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w584-2h2r-2hvf. This link is maintained to preserve external references. Original Description langflow-ai langflow v1.9.3 is affected by: Code Injection. The impact is: execute arbitrary code remote. The compone...

CVE-2026-103097 GV-Eye Relay Payment API Key Vulnerability

An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...

EUVD-2026-91147

An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...

CVE-2026-103097 GV-Eye Relay Payment API Key Vulnerability

An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...