EUVD-2026-87254

X-SpringBoot through 6.0 lacks object-level authorization in user management endpoints, allowing sub-administrators to modify or delete users without ownership verification. Attackers with user-management permissions can reset passwords for any account including the super administrator, rebind...

CVE-2026-100192

X-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manager/select endpoint without authentication or field filtering. Unauthenticated attackers can retrieve these credentials and use them to send arbitrary SMS messages through any tenant's SMS provider,...

EUVD-2026-87253

X-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manager/select endpoint without authentication or field filtering. Unauthenticated attackers can retrieve these credentials and use them to send arbitrary SMS messages through any tenant's SMS provider,...

tpwn

tpwn cve-2015-???? PoC os x 10.10.5 カーネルローカル特権昇格 この脆弱性は 10.11 で潰された 完全な writeup は etason hax してくれた unthreadedjb に shout out tpwn やその他の NULL Pointer Deference バグから身を守るには NULLGuard をインストール...

vercel-botid

Vercel BotID Solver / "X-Is-Human" 헤더 기본 모드 개요 이 프로젝트는 Vercel BotID 챌린지를 위한 Golang 기반 솔버를 제공합니다. go-fAST를 사용하여 난독화를 해제하고 필요한 모든 값을 추출합니다. 번개처럼 빠름 ⭐ 지지하기 유용하게 사용하셨다면 저장소에 별표를 눌러주세요! 여러분의 지지는 프로젝트 개선에 도움이 됩니다. ❤️ 설치 root@kitploit: go get github.com/xkiian/vercel-botid && go mod tidy 사용법...

CVE-2026-94445

A malicious txtar could escape the intended execution context and force arbitrary writes to the playground host's trusted filesystem. Disjointly, one of the three possible paths to invoke go vet on the playground host did not correctly restrict the execution environment. This permitted a Go proce...

SpookySSL-Scanner

SpookySSL-Scanner SpookySSL CVE-2022-3602 SSLv3 スキャナー（Windows、Linux、macOS対応） （トルコ語）脆弱性はどのように発生するのか？ まず、問題はバイトサイズを決定する際に発生します。バイトサイズを決定するとき、お気づきかもしれませんが、NULL、つまり空/ゼロの値が定義されておらず、バイト長がゼロとして設定される可能性があります。下のコマンドで、xn--...

CVE-2026-94445

A malicious txtar could escape the intended execution context and force arbitrary writes to the playground host's trusted filesystem. Disjointly, one of the three possible paths to invoke go vet on the playground host did not correctly restrict the execution environment. This permitted a Go proce...

EUVD-2026-87201

A malicious txtar could escape the intended execution context and force arbitrary writes to the playground host's trusted filesystem. Disjointly, one of the three possible paths to invoke go vet on the playground host did not correctly restrict the execution environment. This permitted a Go proce...

CVE-2026-67413 RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmqjmstopicexchange plugin's x-jms-topic exchange accepted a client-controlled rjmserlangselector binding expression whose LIKE evaluator expanded percent and underscore wildcards in...

CVE-2019-16759

CVE-2019-16759 vBulletin 5.x 未認証RCEバッチ検出スクリプト この脆弱性はかなり役立たずで、適当に200以上探したところ、5つだけこの穴が存在した あとは自分で解決してください。PHPがあるなら、リバースシェルを取得できないわけがないでしょう？...

CVE-2025-29927

CVE-2025-29927: Next.js ミドルウェアバイパス脆弱性 このリポジトリは、Next.js の脆弱性 CVE-2025-29927 を実証します。内部ヘッダ x-middleware-subrequest を使用して、認証などのミドルウェアチェックをバイパスできます。 脆弱性の詳細 Next.js は内部ヘッダ x-middleware-subrequest...

ROOT-APP-GOBINARY-CVE-2026-56854 CVE-2026-56854 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-56854 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-78662 CVE-2026-78662 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-78662 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-56855 CVE-2026-56855 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-56855 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

X-Recon

웹 페이지 입력을 식별하고 XSS 스캔을 수행하는 유틸리티입니다. 기능: 서브도메인 검색: 대상 웹사이트의 관련 서브도메인을 검색하여 화이트리스트로 통합합니다. 이 서브도메인은 스크래핑 과정에서 활용할 수 있습니다. 사이트 전체 링크 검색: 제공된 화이트리스트와 지정된 maxdepth를 기반으로 웹사이트 전체의 모든 링크를 수집합니다. 폼 및 입력 추출: 추출된 링크에서 발견된 모든 폼과 입력을 식별하여 JSON 출력을 생성합니다. 이 JSON 출력은 도구의 XSS 스캔 기능을 활용하기 위한 기초 역할을 합니다. XSS 스캔:...

ROOT-APP-GOBINARY-CVE-2026-56864 CVE-2026-56864 in golang.org/x/mod - Patched by Root

Root has patched CVE-2026-56864 in the golang.org/x/mod package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-56865 CVE-2026-56865 in golang.org/x/mod - Patched by Root

Root has patched CVE-2026-56865 in the golang.org/x/mod package for Root:Go. Multiple fixed versions available...

lblfixer_cve2020_5250

LabelGrup Networks、PrestaShop 公式パートナー PS 1.7.X 向けに CVE-2020-5250 脆弱性を修正するモジュール（WIP） 確認: https://vulners.com/cve/CVE-2020-5250 https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-mhfc-6rhg-fxp3 当社ウェブサイト: https://www.labelgrup.com...

CVE-2021-44228

Log4jの脆弱性 2021年12月19日更新：Log4jにおける新たな脆弱性とそれらの悪用手法が次々と発見されています。リポジトリに3つのフローチャート（マインドマップ）を追加しました。それぞれ、脆弱なLog4jのバージョン、脆弱性の有無を確認する方法、および各脆弱性の軽減策について説明しています。 推奨事項 Log4j v2.x: Log4j バージョン 2.x を使用しているソフトウェアを特定する Log4j の脆弱性を軽減する Log4j 2.17.0 を使用しているバージョンにソフトウェアを更新する 上記が不可能な場合 CVE-2021-44228 および...