djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)

ImpactFor views that opt into state snapshots, the snapshot statejson embedded in the client page was restored on reconnect as trusted view state with no integrity check. A client could edit the unsigned statejson in their page and return it in the reconnect mount frame to inject arbitrary view...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

CVE-2026-103659 MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributes

MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attributes. In doing so, the object-level distributi...

misp-objects

misp-objects MISP 对象用于 MISP 系统，也可供其他信息共享工具使用。MISP 对象是对 MISP 属性的补充，以实现高级的属性组合。这些对象及其关联属性的创建基于真实的网络安全用例和信息共享中的现有实践。 欢迎提出您自己的 MISP 对象模板，以将其包含在 MISP 中。该系统与 misp-taxonomies 类似，任何人都可以贡献自己的对象并纳入 MISP，而无需修改软件。 MISP 对象模板的格式 以 MISP 对象模板的 'domain-ip' 为例json "attributes": "domain": "categories": "Network...

CVE-2024-30088

CVE-2024-30088 漏洞： 漏洞位于函数 AuthzBasepCopyoutInternalSecurityAttributes 中，当内核将当前令牌对象的 AUTHZBASEPSECURITYATTRIBUTESINFORMATION 复制到用户模式时，该结构如下： //0x30字节（sizeof） struct AUTHZBASEPSECURITYATTRIBUTESINFORMATION ULONG SecurityAttributeCount; //0x0 struct LISTENTRY SecurityAttributesList; //0x8 ULONG...

CVE-2017-6913

CVE-2017-6913 这是我不久前在 open-xchange OX App Suite 的 webmail（https://www.open-xchange.com/）中发现的一个漏洞。 漏洞详情 该 webmail 在打开邮件时存在存储型 XSS 漏洞，原因是 HTML time 标签的事件属性未被正确过滤。因此，如下所示的内嵌 HTML 代码可以在毫无防备的目标上运行 JavaScript： time onafterprint="console.log'onafterprint'" onbeforeprint="console.log'onbeforeprint'"...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

galer

galer /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 A fast tool to fetch URLs from HTML attributes by crawl-in. Inspired by the @omespino Tweet, which is possible to extract src, href, url and action values by evaluating JavaScript through Chrome DevTools Protocol. Resources...

galer

galer /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 一个通过爬取 HTML 属性快速获取 URL 的工具。灵感来源于 @omespino 的推文，该推文展示了通过 Chrome DevTools 协议执行 JavaScript 来提取 src、href、url 和 action 值的可能性。 资源 安装 从二进制文件安装 从源码安装 从 GitHub 安装 用法 基本用法 参数 示例 单个 URL 从列表中获取 URL 从标准输入获取 作为库使用 待办事项 帮助与 Bug 报告 许可证 版本 致谢 安装...

CVE-2023-2640-32629

Ubuntu 権限昇格: CVE-2023-2640 および CVE-2023-32629...

Magento 2 Amasty Order Attributes < 4.0.0 - Unauthenticated Arbitrary File Upload

Amasty Order Attributes for Magento 2 4.0.0 contains an unrestricted file upload vulnerability caused by lack of authentication and validation in the upload endpoint, letting unauthenticated attackers upload arbitrary files including PHP, enabling remote code execution or malware hosting. id:...

CVE-2026-97439

A flaw was found in the Linux kernel's NTFS3 file system. A local user can cause a Denial of Service DoS by manipulating extended file attributes on a mounted NTFS volume. Improper attribute handling clears internal compression flags without synchronizing file mapping operations, triggering a...

CVE-2021-3493-Exploit

CVE-2021-3493-Exploit 一个用 C 语言编写的 CVE-2021-3493 本地权限提升漏洞的概念验证利用程序。 📌 描述 本仓库包含 CVE-2021-3493 漏洞利用程序的 C 语言实现。 这是 Linux 内核中 OverlayFS 实现的一个本地权限提升（LPE）漏洞。由于在 overlay 挂载中设置文件时对扩展属性（xattrs）的验证不正确，它允许本地用户获取 root 权限。 🎯 受影响版本 Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM...

CVE-2026-64531

🔥 CVE-2026-64531 — OVSwrap Linux 内核 Open vSwitch 内存损坏 🩸 漏洞概述 CVE-2026-64531 是一个影响 Linux 内核 Open vSwitch OVS 网络子系统的安全漏洞。 该缺陷存在于 Netlink 嵌套属性 的处理过程中，超大的动作结构可以绕过大小限制，并可能触发不安全的内核内存操作。 ⚠️ 成功利用该漏洞可能导致 内核崩溃、拒绝服务或可能的权限提升 。 🧬 技术信息 🏷️ 字段| 📌 详情 ---|--- CVE| CVE-2026-64531 平台| Linux 内核 组件| Open vSwitch 文件|...

CVE-2026-93758

A flaw was found in Mongoid. An authenticated remote attacker with basic application privileges could exploit an insecure direct object reference in the nested attributes handling. This vulnerability allows the attacker to reference and manipulate record identifiers belonging to other users,...

CVE-2026-97551

A flaw was found in the Linux kernel's XFS file system. A local user can trigger a Denial of Service DoS by forcing an unexpected filesystem shutdown. When updating parent pointer attributes, the kernel fails to properly initialize the block reservation counter, causing an integer underflow durin...

CVE-2026-46456

CVE-2026-46456 — camel-aws2-sqs 入站消息属性头注入 针对同一 Apache Camel 漏洞的可运行概念验证复现程序，每种运行时一个： 运行时| 目录| 技术栈| 被劫持的端点| 演示的影响 ---|---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2| 通过 CamelExecCommand 的 exec:| 远程代码执行 Camel Quarkus| camel-quarkus/| Quarkus 3.36....

https-nj.gov---CVE-2018-14042

https-nj.gov---CVE-2018-14042 ニュージャージー公式サイトの脆弱性レポート Bootstrap 4.1.2 以前では、メインの collapse データ属性で XSS が可能です。 data-target 属性、data-parent 属性、data-container がクロスサイトスクリプティング攻撃に対して脆弱です。 Test 推奨事項 この特定の問題に対する修正としては、getTargetFromTrigger 関数を以下のように変更することが考えられます： return $target から以下へ変更： return...

CVE-2026-98133

A flaw was found in the Linux kernel's NTFS file system implementation. When an error occurs while setting an extended attribute EA, the kernel prematurely clears the flag indicating that extended attributes are present. A local user can exploit this vulnerability by triggering a failed extended...

CVE-2026-82326

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML Attributes. This issue affects Enocta Platform: through 2026-09-28...