CVE-2026-75638

The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20). This flaw could allow an attacker to bypass security features and obtain unauthorized write access . Successful exploitation requires user interaction , such as a victim visiting a maliciously...

EUVD-2026-84765

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...

CVE-2026-76194 CAI Content Credentials | Improper Input Validation (CWE-20)

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...

CVE-2026-76194

The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20) that could lead to a Security feature bypass . An attacker could exploit this to gain unauthorized limited write access by tricking a victim into visiting a maliciously crafted URL or interacti...

EUVD-2026-84764

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...

CVE-2020-5839

CVE-2020-5839 CVE-2020-5839 POC Symantec EDR オンプレミス版の "4.4.0" より前のバージョンは、以下の URL を介して情報漏えいの脆弱性の影響を受けます： root@kitploit: https://@IPEDR/r3epmpi/status/ https://@IPEDR/r3epmpi/status/routes https://@IPEDR/r3epmpi/v1/event/status/ds https://@IPEDR/atpapp/features/list 参照...

CVE-2026-77265

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client resolves the hostname again for the connection. An unauthenticated caller can use a...

CVE-2026-77267

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url headers are processed by processauthenticationheaders and used to construct Atlassian fetchers without calling...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 python CVE-2022-46169.py tageturl...

EUVD-2026-84621

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url headers are processed by processauthenticationheaders and used to construct Atlassian fetchers without calling...

CVE-2026-77267 mcp-atlassian has an incomplete SSRF remediation

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url headers are processed by processauthenticationheaders and used to construct Atlassian fetchers without calling...

CVE-2026-77267

The MCP Atlassian server (a Model Context Protocol server for Confluence and Jira) is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 0.22.0 . The root cause is that the _process_authentication_headers function processes X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url he...

CVE-2026-77265

The MCP Atlassian Model Context Protocol server is vulnerable to Server-Side Request Forgery (SSRF) via DNS rebinding in versions prior to 0.22.0 . An unauthenticated caller can provide a hostname through the X-Atlassian-Jira-Url or X-Atlassian-Confluence-Url headers. Because the software validat...

EUVD-2026-84606

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client resolves the hostname again for the connection. An unauthenticated caller can use a...

CVE-2026-77265 MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client resolves the hostname again for the connection. An unauthenticated caller can use a...

CVE-2017-8809_MediaWiki_RFD

CVE-2017-8809 - MediaWiki 用 RFDリフレクテッドファイルダウンロード リモートユーザーは対象サイト向けに特別に細工したURLを作成し、対象ユーザーがそれを読み込むと、'api.php'スクリプトがシェルコマンドを含むファイルをダウンロードさせます CVE-2017-8809。そのファイルは対象サイトによって提供されます。 環境 Google Chrome 79.0 MediaWiki 1.29.1 使用方法 1. 実行 root@kitploit: $ docker-compose up 2. トラップページにアクセス...

S2-Reaper

S2-Reaper このプロジェクトは、Google検索結果からStruts2 S2-045の影響を受ける脆弱なURLを収集するために使用されます。 使用方法 root@kitploit: python reaper.py 概要 reaper.py は、crawler.conf で定義されたキーワードを使用してGoogle検索クローラーを実行し、脆弱なURLを検索します。 crawler.conf baseurl : 基本的なGoogle検索URL keyword : 例: site:gov ext:action expectnum : クロールされる検索結果の期待数 http/sock...

RE11S_1.11-formAccept-CommandInjection

RE11S1.11-formAccept-CommandInjection Qi An Xin Tiangong Lab でのインターンシップ中に、RE11S1.11 ルーターにコマンドインジェクションの脆弱性を発見しました。 bin ディレクトリ内の webs ファイルを解析したところ、関数 formAccept にコマンドインジェクションの脆弱性が含まれていることを発見しました。 このコマンドインジェクションは、submit-url キーの値によってトリガーされ、システムコマンドインジェクションにつながります。 ルーターをシミュレートする方法 firmAE...

CVE-2026-95656

The dgtlmoon changedetection.io software (up to version 50389b07 ) is vulnerable to a server-side request forgery (SSRF) vulnerability in the Preview Endpoint component. The flaw exists within the add_watch_ui_snapshot function of the file changedetectionio/blueprint/add_watch_ui/__init__.py, whe...

CVE-2022-46169

CVE-2022-46169 セットアップ root@kitploit: git clone https://github.com/miko550/CVE-2022-46169.git cd CVE-2022-46169 使用方法 root@kitploit: usage: CVE-2022-46169.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg: http://127.0.0...