EUVD-2026-85867

An authorization bypass was found in the Ansible Automation Platform AAP gateway. The gateway API allows an authenticated administrator to create a new service key for the Controller service cluster. Because service-key creation is not restricted to the installer-provisioned provisioning path, an...

CVE-2026-94416

An authorization bypass exists in the Ansible Automation Platform (AAP) gateway due to a lack of restrictions on service key creation . An authenticated administrator can create a new service key for the Controller service cluster that is cryptographically indistinguishable from legitimate keys. ...

CVE-2026-94416 Aap-gateway: aap-gateway: authorization bypass via workload identity token forgery

An authorization bypass was found in the Ansible Automation Platform AAP gateway. The gateway API allows an authenticated administrator to create a new service key for the Controller service cluster. Because service-key creation is not restricted to the installer-provisioned provisioning path, an...

CVE-2026-94416

An authorization bypass was found in the Ansible Automation Platform AAP gateway. The gateway API allows an authenticated administrator to create a new service key for the Controller service cluster. Because service-key creation is not restricted to the installer-provisioned provisioning path, an...

CVE-2023-35078

CVE-2023-35078 This script ethically checks for the presence of cve-2023-35078 via requesting the /ping endpoint from the Ivanti EPMM API. /ping simply responds with the VSP version, rather than attemping to pull device or admin data. Usage: ./CVE-2023-35078 This script assumes https connections...

HTB-Pterodactyl-RCE-CVE-2025-49132

Pterodactyl Panel Locale RCE CVE-2025-49132 — Educational PoC -6f42c1 For authorized testing and defensive learning only. This repository is intended for controlled lab environments e.g., CTF/HTB-style setups where you own the target or haveexplicit written permission to test it. Context This...

firewall

🛡️ Spring4Shell Firewall Defense – Cybersecurity Incident Simulation This project is part of a Cybersecurity Job Simulation I completed through Forage in August 2025. It simulates a real-world incident involving the Spring4Shell CVE-2022-22965 vulnerability and demonstrates how a custom firewall...

CVE-2026-9082

Drupal CVE-2026-9082 Scanner Semi-passive scanner that detects Drupal installations potentially vulnerable to CVE-2026-9082 PostgreSQL SQL injection. No SQL payloads sent. No state-changing requests. Vulnerable Versions Branch| Affected| Fixed ---|---|--- 10.4.x| 8.9.0 — 10.4.9| 10.4.10 10.5.x|...

CVE-2024-39722

Ollama CVE-2024-39722 Exploit Tool This tool is designed to exploit CVE-2024-39722, a model existence disclosure vulnerability in Ollama versions up to and including 0.1.45. It allows users to check if an Ollama server is vulnerable and attempt to discover existing models on the server...

BADministration

BADministration What is BADministration? BADministration is a tool which interfaces with management or administration applications from an offensive standpoint. It attempts to provide offsec personnel a tool with the ability to identify and leverage these non-technical vulnerabilities. As always:...

CVE-2024-40725

HTTP Request Smuggling Detection Tool This repository contains a Python-based tool to detect HTTP Request Smuggling vulnerabilities, specifically targeting CVE-2024-40725. The tool attempts to exploit this vulnerability in Apache HTTP Server by sending crafted HTTP requests and analyzing the...

CVE-2025-46204

Description Unifiedtransform v2.0 is vulnerable to Incorrect Access Control. Any user students and teachers can access and modify course details via the /course/edit/id endpoints. This functionality intended exclusively for administrative use. Exploiting this flaw allows unauthorized manipulation...

CVE-2025-46203

Description Unifiedtransform v2.0 is vulnerable to Incorrect Access Control. Any user students and teachers can access and modify student records via the /students/edit/id endpoints. This functionality intended exclusively for administrative use. Exploiting this vulnerability can lead to...

strelka

发布版 | 文档 | 拉取请求 | 问题...

CVE-2025-55462

CVE-2025-55462 Vulnerability Summary A Cross-Origin Resource Sharing CORS misconfiguration was identified in Eramba Community and Enterprise Editions v3.26.0. The application reflects attacker-controlled Origin headers in the Access-Control-Allow-Origin response header on the /system-api/login...

Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls

The logistics sector has become the target of a new malicious cyber campaign that distributes an Android spyware codenamed Corp MDM. According to Have I Been Squatted, the campaign uses fake Google Play pages branded as CEVA and TKW Logistics to distribute an Android Package Kit APK file that's...

CVE-2021-43798

CVE-2021-43798 Grafana-Arbitrary-File-Read 8.0.0 8.3.0 A vulnerability in Grafana CVE-2021-43798 versions 8.0.0 8.3.0 that allows an unauthenticated attacker to read arbitrary files from the server by leveraging a path traversal aimed towards the /public/plugins/ path to access sensitive files on...

CVE-2025-61148

CVE-2025-61148 The vulnerability exists in the Student Payment API. The application fails to properly validate whether the user requesting a receipt is authorized to view it. By modifying the recno parameter in the API request, an attacker can access the receipts of other users. CVE-2025-61148:...

CVE-2025-52488

DNN Unicode Path Normalization NTLM Hash Disclosure Exploit CVE-2025-52488 Overview This exploit targets a vulnerability in DNN formerly DotNetNuke versions 6.0.0 to before 10.0.1 that allows attackers to disclose NTLM hashes through Unicode path normalization attacks. Vulnerability Details CVE I...

cve-2020-27358-27359

CVE-2020-27358 / CVE-2020-27359 Exploitation steps for CVE-2020-27358 and CVE-2020-27359 CVE-2020-27358 An issue was discovered in REDCap 8.11.6 through 9.x before 10. The messenger's CSV feature that allows users to export their conversation threads as CSV allows non-privileged users to export o...