cve-2026-49975-http2bomb_reproduction

CVE-2026-49975 HTTP/2 Bomb Complete Reproduction Guide Based on QiAnXin CERT Advisory + Calif Original Research ================================================================ I. Vulnerability Overview CVE-2026-49975 is a critical denial-of-service DoS vulnerability in HTTP/2 server and proxy...

CVE-2025-57529

CPAS-bug CPAS監査管理情報システムにSQLインジェクションの脆弱性があります。 Beijing YouDataSum Technology Co., Ltd. domain: http://youdatasum.com 情報 CVE-ID: CVE-2025-57529 影響を受けるバージョン: findArchiveReportByDah@RequestParamvalue = "pageNum", defaultValue = "0" int pageNum, @RequestParamvalue = "pageSize", defaultValue = "10" int...

CVE-2024-2997

CVE-2024-2997 스캐너 개요 CVE-2024-2997 스캐너는 웹 애플리케이션에서 명령 주입 취약점을 탐지하도록 설계된 고급 취약점 스캐너입니다. 이 도구는 보안 전문가가 애플리케이션의 잠재적인 보안 위험을 식별하는 데 도움을 줍니다. 면책 조항 이 도구는 교육 목적으로만 사용됩니다. 귀하가 소유하거나 테스트 권한이 있는 애플리케이션에만 사용하십시오. 저자는 이 도구로 인한 오용이나 손해에 대해 책임을 지지 않습니다. 기능 고성능 스캐닝 : 빠른 스캐닝을 위해 멀티스레딩최대 20개 스레드 활용 포괄적인 URL 생성 :...

wordpress-auto-upload-shell

██╗ ██╗██████╗ ███████╗██╗██╗ ███████╗███╗ ██...

security-writeups

Security Writeups Lab write-ups from self-directed work, mostly TryHackMe, plus a PortSwigger SQLi practical. The reasoning lives on the site — the full methodology, the payloads, the parts where I went wrong first — and this repo is the index and the scripts. Nine rooms, and they are not nine...

CVE-2026-64849-poc-lab

セキュリティラボ — MLflow Webhooks における SSRF の悪用 CVE-2026-64849 · MLflow 使用制限: ラボ用教材であり、許可されたネットワークおよび環境のみを 対象とします。法的通知 を参照してください。 1. エグゼクティブサマリー 属性| 値 ---|--- 脆弱性| CVE-2026-64849 — Webhook リダイレクトバイパスによる SSRF 影響を受けるコンポーネント| MLflow Tracking Server 3.15.0 ラボのバージョン| MLflow 3.13.0（未変更、pip install 経由） 根本原因|...

CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit

🔐 ReactRCE-Scanner CVE-2025-55182 — 高度なReact Server Components RCEエクスプロイト＆評価フレームワーク 📑 目次 法的免責事項および倫理的通知 概要 主な機能 クイックスタートガイド アーキテクチャと機能の詳細 設定リファレンス 自動テストスイート 修復と緩和策 コントリビューションとコミュニティ 参考文献 ライセンスと作者 ⚠️ 法的免責事項および倫理的通知 本ツールは、教育および許可されたセキュリティテストの目的にのみ使用されるよう設計されています。...

CVE-2026-105148

A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component Retrieval Completion API Endpoint. Such manipulation of the argument generationconfig.apibase leads to server-side request forgery. The...

UnifiedThreatHunting

統合脅威ハンティングプロセス...

CVE-2021-35042

CVE-2021-35042 Django SQL 주입 버그 질문: 얼마나 취약한지 탐구해보자? 답변: 무섭다 설치 poetry install poetry run ./manage.py migrate poetry run ./manage.py loaddata dummydata.json 대화형 데모 poetry run ./manage.py runserver 무작위 필드로 정렬하기 http://localhost:8000/?orderby=%22corethingstags%22.%22thingsid%22 로 이동 ?orderby 파라미터가 열...

CVE-2026-105215

ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'external account not found' registration endpoint trusts client-supplied external identity fields without a completed IdP callback. Unauthenticated attackers can submit forged...

CVE-2026-105215 ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback

ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'external account not found' registration endpoint trusts client-supplied external identity fields without a completed IdP callback. Unauthenticated attackers can submit forged...

CVE-2026-105215 ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback

ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'external account not found' registration endpoint trusts client-supplied external identity fields without a completed IdP callback. Unauthenticated attackers can submit forged...

CVE-2026-105215 ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback

ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'external account not found' registration endpoint trusts client-supplied external identity fields without a completed IdP callback. Unauthenticated attackers can submit forged...

EUVD-2026-92108

ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'external account not found' registration endpoint trusts client-supplied external identity fields without a completed IdP callback. Unauthenticated attackers can submit forged...

CVE-2026-105215

ZITADEL versions before 3.4.14 and 4.x before 4.16.2 are vulnerable to an authentication bypass within the hosted Login V1 UI . The root cause is that the 'external account not found' registration endpoint trusts client-supplied external identity fields without requiring a completed IdP callback ...

CVE-2026-105207 ZITADEL before 4.17.3 Account Takeover via External IdP Linking

ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers without verifying a primary factor or the caller's permission, including on identify-only Login V2 sessions and via the User Service V2 AddIDPLink endpoint. An unauthenticated...

CVE-2026-105207

ZITADEL versions 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 are vulnerable to an account takeover due to improper verification when linking external identity providers. The User Service V2 AddIDPLink endpoint and identify-only Login V2 sessions fail to verify a primary factor or the caller's pe...

CVE-2026-105207 ZITADEL before 4.17.3 Account Takeover via External IdP Linking

ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers without verifying a primary factor or the caller's permission, including on identify-only Login V2 sessions and via the User Service V2 AddIDPLink endpoint. An unauthenticated...

CVE-2026-105207

ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers without verifying a primary factor or the caller's permission, including on identify-only Login V2 sessions and via the User Service V2 AddIDPLink endpoint. An unauthenticated...