PT-2026-107723

The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords OTPs used in multi-factor authentication MFA. This allows unused OTPs to remain valid indefinitely, presenting an opportunity for malicious actors to conduct brute force attacks by repeatedly guessing the...

PT-2026-107827

The GPTranslate WordPress plugin before 2.34.14 does not properly restrict who can store translations, and does not escape them when outputting them in translated pages, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks when server-side translations are enabled...

PT-2026-107773

A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the fabric can transmit crafted inband Fibre Channel vendor-unique CT Common Transport management requests to bypass administrative...

EulerOS 2.0 SP15 : mod_http2 (EulerOS-SA-2026-3926)

According to the versions of the modhttp2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious HTTP...

Important: mod_auth_openidc security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsi...

Important: bind9.16 security, bug fix, and enhancement update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

PT-2026-108055

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 1.107.4 and 2.28.0, the Agent.to web and clai web development chat endpoint has missing request content-type validation. A website visited by a developer can submit a...

CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1791458607)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791458607 advisory. - Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP...

CentOS Linux 8.4 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1791459292)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791459292 advisory. - Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP...

Zabbix Server 7.0.x < 7.0.29 / 7.4.x < 7.4.13 Authentication Bypass (ZBX-28196)

The version of Zabbix Server installed on the remote host is 7.0.x prior to 7.0.29, or 7.4.x prior to 7.4.13. It is, therefore, affected by an authentication bypass vulnerability: - Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate...

PT-2026-108114

FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff rtsp connect in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL. Malicious RTSP servers can redirect FFmpeg to internal hosts and ports under other schemes,...

CVE-2025-32433

CVE-2025-32433 Критическая уязвимость в SSH-сервере Erlang/OTP позволяет выполнить удаленный код без аутентификации RCE. Дефект существует в механизме обработки сообщений протокола SSH, что позволяет злоумышленникам выполнять произвольные команды без необходимости в учетных данных для...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-22slack15.0.txz: Rebuilt. This update fixes security issues: XKB SetGeometry TextDoodad Double Free...

CVE-2024-40725

HTTP Request Smuggling 감지 도구 이 저장소는 HTTP Request Smuggling 취약점을 탐지하는 Python 기반 도구를 포함하며, 특히 CVE-2024-40725를 대상으로 합니다. 이 도구는 조작된 HTTP 요청을 보내고 서버의 응답을 분석하여 Apache HTTP Server에서 이 취약점을 악용하려고 시도합니다. 주된 목표는 특정 경로에 대한 제한을 우회하는 등 상태 코드나 접근 동작의 차이를 식별하는 것입니다. 기능 HTTP Request Smuggling 취약점 탐지 단일 URL 테스트 및...

confusploit

이 스크립트는 CVE-2022-26134에 취약한 서버를 찾기 위한 것이며 SHODAN CLI 및 Bash 스크립팅 원라이너와 함께 사용할 수 있습니다. 법적 및 교육 목적으로만 사용하십시오 OGNL 주입을 통한 Confluence 사전 인증 원격 코드 실행 CVE-2022-26134 2022년 6월 2일, Atlassian은 Confluence Server 및 Data Center 애플리케이션에 대한 보안 권고를 발표했으며, 치명적인 심각도의 인증되지 않은 원격 코드 실행 취약점을 강조했습니다. OGNL 주입 취약점으로 인해...

CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-

🧪 1-ШАГ: Демо уязвимое веб-приложение LAB Мы создаем логику, аналогичную CVE-2025-55182 небезопасное выполнение на стороне сервера. 📁 vulnapp/app.py from flask import Flask, request import subprocess app = Flaskname @app.route"/render", methods="POST" def render: data = request.json.get"component...

ms09-050-CVE-2009-3103-exploit

MS09-050 SMBv2 익스플로잇 래퍼 MS09-050 CVE-2009-3103 익스플로잇을 위한 한 줄 설정. 번거로움 없이, 디버깅 없이, 그냥 작동합니다. 왜? 돌아다니는 대부분의 MS09-050 스크립트는 수동 셸코드 주입이 필요하고, 핸들러와 타이밍 문제가 있거나, 그냥 작동하지 않습니다. 이 래퍼는: 올바른 매개변수로 셸코드 생성 익스플로잇 자동 빌드 바로 사용 가능한 Metasploit 핸들러 생성 정확히 무엇을 실행해야 하는지 안내 시간이 중요한 OSCP 준비를 위해 제작되었습니다. 대상 취약점 :...

CVE-2021-41773-Apache-Path-Traversal-Lab

Apache CVE-2021-41773 Security Lab A controlled cybersecurity lab developed during my internship at ITSOLERA PVT LTD to study and demonstrate CVE-2021-41773 , a path traversal and potential remote code execution vulnerability affecting Apache HTTP Server 2.4.49. 📌 Project Overview This project...

CVE-2025-55182

CVE-2025-55182 — RCE-эксплойт для React Server Components Python CLI-эксплойт для CVE-2025-55182, критической уязвимости RCE в React Server Components через react-server-dom-webpack. Основано на: ejpir/CVE-2025-55182-poc Быстрый старт Тестирование в Docker Unpack src.zip zip -r src.zip src Build...

Mobile-Drop-Device-SOC-Detection

🛡️ Project Phantom: 모바일 '드롭 디바이스' SOC 탐지 시뮬레이션 이 프로젝트는 내부 네트워크 내에서 '드롭 디바이스'로 사용되는 루팅되지 않은 Android 기기Casper Via S가 중요한 Layer 7 공격웹 스캐닝, RCE을 시작할 때 Wazuh SIEM을 통해 탐지되는 종단간 SOC 실험실 워크숍을 시연합니다. 이 저장소는 모바일 침투 테스트레드 팀, SIEM 로그 통합블루 팀, 그리고 '섀도우 디바이스' 위협을 완화하기 위한 사용자 정의 규칙 생성탐지 엔지니어링의 융합을 보여줍니다. 🎯 프로젝트 목...