UnBattletech

UnBattletech — Reverse Engineering BattleTech: The Crescent Hawk's Inception 1988 Reverse engineering analysis and Godot 4 + C rebuild of BattleTech: The Crescent Hawk's Inception , the 1988 MS-DOS game by Infocom. Repository Structure ├── docs/ RE documentation & findings │ ├── INDEX.md...

CVE-2026-101041

The account recovery password reset functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use TOCTOU race condition in the consumption of single-use recovery tokens. The original implementation verified the token nonce against the stored digest and then...

CVE-2026-101041

The vulnerability-lookup web application contains a TOCTOU race condition in its account recovery functionality (/user/confirm_account/). Specifically, the logic in the User model (website/models/user.py) and view layer (website/web/views/user.py) verifies and consumes single-use recovery tokens ...

EUVD-2026-87956

The account recovery password reset functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use TOCTOU race condition in the consumption of single-use recovery tokens. The original implementation verified the token nonce against the stored digest and then...

CVE-2026-101041 Vulnerability-Lookup - Race Condition in Account Recovery Token Consumption Allows Password Takeover

The account recovery password reset functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use TOCTOU race condition in the consumption of single-use recovery tokens. The original implementation verified the token nonce against the stored digest and then...

CVE-2026-101041 Vulnerability-Lookup - Race Condition in Account Recovery Token Consumption Allows Password Takeover

The account recovery password reset functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use TOCTOU race condition in the consumption of single-use recovery tokens. The original implementation verified the token nonce against the stored digest and then...

CVE-2026-101041 Vulnerability-Lookup - Race Condition in Account Recovery Token Consumption Allows Password Takeover

The account recovery password reset functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use TOCTOU race condition in the consumption of single-use recovery tokens. The original implementation verified the token nonce against the stored digest and then...

Exploit for Path Traversal in Jenkins

\ CVE-2024-23897 — Jenkins CLI Arbitrary File Read Lab \ 1...

K2-CLI

Khao2 ██╗ ██╗ ██████╗ ██║ ██╔╝ ╚════██╗ █████╔╝ █████╔╝ ██╔═██╗ ██╔═══╝ ██║ ██╗ ███████╗ ╚═╝ ╚═╝ ╚══════╝ 비트 하나까지. 사용하기 쉽고, 유익하며 포괄적인 스테가날리시스 스위트입니다. 이것은 스테가날리시스를 위한 제 SaaS 사이드 허슬khao2.com의 CLI 도구입니다. 자주 묻는 질문FAQ 그런데 Khao2/K2는 정확히 무엇인가요? K2는 이미지 스테가날리시스를 위해 설계된 다목적 스테가노그래피 탐지 플랫폼입니다. Stegoveritas...

CVE-2024-50404

CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "Обнаружена уязвимость, связанная с переходом по символическим ссылкам, затрагивающая Qsync Central. При эксплуатации...

cve-2026-49975-http2bomb_reproduction

CVE-2026-49975 HTTP/2 Bomb Complete Reproduction Guide Based on QiAnXin CERT Advisory + Calif Original Research ================================================================ I. Vulnerability Overview CVE-2026-49975 is a critical denial-of-service DoS vulnerability in HTTP/2 server and proxy...

CVE-2025-57529

CPAS-bug CPAS 감사 관리 정보 시스템에 SQL 인젝션 취약점이 존재합니다. Beijing YouDataSum Technology Co., Ltd. domain: http://youdatasum.com 정보 CVE-ID: CVE-2025-57529 affected version: findArchiveReportByDah@RequestParamvalue = "pageNum", defaultValue = "0" int pageNum, @RequestParamvalue = "pageSize", defaultValue =...

CVE-2024-2997

Сканер CVE-2024-2997 Обзор Сканер CVE-2024-2997 — это продвинутый сканер уязвимостей, предназначенный для обнаружения уязвимости внедрения команд в веб-приложениях. Этот инструмент помогает специалистам по безопасности выявлять потенциальные риски безопасности в их приложениях. Отказ от...

security-writeups

Security Writeups Lab write-ups from self-directed work, mostly TryHackMe, plus a PortSwigger SQLi practical. The reasoning lives on the site — the full methodology, the payloads, the parts where I went wrong first — and this repo is the index and the scripts. Nine rooms, and they are not nine...

CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit

🔐 ReactRCE-Scanner CVE-2025-55182 — 고급 React Server Components RCE 익스플로잇 및 평가 프레임워크 📑 목차 법적 면책 조항 및 윤리적 고지 개요 주요 기능 빠른 시작 가이드 아키텍처 및 기능 심층 분석 구성 참조 자동화된 테스트 스위트 교정 및 완화 기여 및 커뮤니티 참고 자료 라이선스 및 작성자 ⚠️ 법적 면책 조항 및 윤리적 고지 이 도구는 오직 교육 및 승인된 보안 테스트 목적으로만 제작되었습니다.사전 서면 동의 없이 대상에 대해 이 소프트웨어를 무단으로 사용하는 것은...

Exploit for Interpretation Conflict in Wordpress

WP2Shell — Unauthenticated SQL Injection Proof of Concept C...

CVE-2026-100869

Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed orders. Attackers with order tokens can submit arbitrary payment actions like refunds that payment gateways execute while Sylius maintains...

CVE-2021-35042

CVE-2021-35042 Django SQL 주입 버그 질문: 얼마나 취약한지 탐구해보자? 답변: 무섭다 설치 poetry install poetry run ./manage.py migrate poetry run ./manage.py loaddata dummydata.json 대화형 데모 poetry run ./manage.py runserver 무작위 필드로 정렬하기 http://localhost:8000/?orderby=%22corethingstags%22.%22thingsid%22 로 이동 ?orderby 파라미터가 열...

CVE-2026-100869 Sylius 2.x before 2.1.16 and 2.2.9 Arbitrary Payment Action via Shop API

Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed orders. Attackers with order tokens can submit arbitrary payment actions like refunds that payment gateways execute while Sylius maintains...

CVE-2026-100869

Sylius versions before 2.1.16 and 2.2.9 are vulnerable to an arbitrary payment action flaw in the Shop API endpoint . The root cause is a failure to restrict payment request actions, which allows customers possessing order tokens to trigger unauthorized actions, such as refunds , on completed ord...