CVE-2026-19593

OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-controlled .git/config, the attr.tree setting and a configured clean or process filter can cause G...

CVE-2026-19593

OpenAI Codex Desktop for Windows and macOS automatically inspects Git metadata when a workspace is opened. If the repository contains an attacker-controlled .git/config with the attr.tree setting and a configured clean or process filter, Git executes an attacker-controlled program outside Codex's...

EUVD-2026-69395

OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-controlled .git/config, the attr.tree setting and a configured clean or process filter can cause G...

CVE-2026-84202

A flaw was found in ModelScope. This vulnerability arises from the use of PyYAML's unsafe yaml.Loader when parsing model configuration files. A remote attacker can exploit this by crafting malicious model repositories containing poisoned configuration files. When these files are loaded by a user,...

ingressnightmare-detection-poc

Инструмент обнаружения IngressNightmare Обзор Этот инструмент предоставляет возможность неинвазивного обнаружения цепочки уязвимостей IngressNightmare CVE-2025-1974, затрагивающей Ingress NGINX Controller. Он специально использует вектор внедрения аннотации auth-url CVE-2025-24514 для проверки...

CVE-2026-84202

ModelScope (through v1.40.0 ) uses PyYAML's unsafe yaml.Loader to parse model configuration files, enabling arbitrary code execution via Python object construction tags. An attacker can craft a malicious model repository with a poisoned configuration file that executes code when a user loads the ...

CVE-2026-74994

The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collapses all directory blocks into a single shared user/group namespace . This means a user authorized for one protected directory is also acc...

CVE-2026-74994 inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth

The modauth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collapses all directory blocks into a single shared user/group namespace. A user added to one protected directory is accepted as valid for all...

CVE-2026-31309

CVE-2026-31309: Mysterium Node v1.36.0 이전 버전의 부적절한 접근 제어 Mysterium Node의 /tequilapi/config/user 엔드포인트의 부적절한 권한 부여로 인해 v1.21.1-rc0부터 v1.36.0 이전까지의 버전에서 인증되지 않은 공격자가 노드 구성을 임의로 덮어쓰고 조작된 POST 요청을 통해 전체 노드를 장악할 수 있습니다. CVSS 점수: 9.8 CRITICAL 벡터: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H PoC...

CVE-2025-8110

CVE-2025-8110 — Gogs RCE PoC Silentium / HackTheBox Предупреждение: Этот инструмент предназначен строго для образовательных целей и авторизованного тестирования на проникновение. Используйте его только против систем, на тестирование которых у вас есть явное разрешение. Это модифицированная версия...

pyLoad Flask Config - Access Control

pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRETKEY variable. This issue has been patched in version 0.5.0b3.dev77. id: CVE-2024-21644 info: name: pyLoad Flask Config ...

CVE-2025-65964

n8n Git Hooks CTF Демо ⚠️ Этот репозиторий предназначен только для образовательных целей и демонстрации CTF. Сценарий Платформа автоматизации например, n8n использует операции Git в рамках рабочего процесса. Рабочий процесс позволяет произвольную конфигурацию Git через git config. Управляемый...

CVE-2025-8110-Gogs-RCE-Exploit

Gogs CVE-2025-8110 RCE Exploit Автоматизированный Python-эксплойт для CVE-2025-8110 в Gogs. Эта уязвимость позволяет выполнять удаленный код RCE путем злоупотребления API PutContents, который не проверяет, является ли путь к файлу символической ссылкой. Перезаписывая внутренний файл .git/config...

CVE-2021-36749

CVE-2021-36749 Apache Druid произвольное чтение файлов Затронутые версии: version = 0.21.1 Можно использовать следующие два способа Командная строка root@kitploit: curl http://127.0.0.1:8888/druid/indexer/v1/sampler?for=connect -H "Content-Type:application/json" -X POST -d...

ActiveMQ-RCE-Exploit

ActiveMQ-Exploit English | 한국어 CVE-2023-46604 ActiveMQ RCE 5.18.3 Exploit 네트워크 외부 접속 불필요한 익스플로잇 JDK 1.8 실행 지원, 대상 버전 자동으로 취약점 범위인지 판단 대상이 네트워크 외부 접속이 불가능한 경우 shiro ini 설정을 이용한 리플렉션 익스플로잇 지원, 사용자 정의 바이트코드 실행 지원 리플렉션 모드 지원, 내장된 exp.xml 생성 fofa 조회 면책 조항 본 도구는 합법적인 테스트 목적으로만 사용되며, 대상에 대한 권한을 획득했는지...

CVE-2026-19796

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsddisplstyle' Parameter in all versions up to, and including, 5.8.1 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2025-2539---File-Away-WordPress-Plugin-Arbitrary-File-Read

CVE-2025-2539 - Произвольное чтение файлов в плагине File Away для WordPress 📋 Резюме CVE ID: CVE-2025-2539 Плагин: File Away версии = 3.9.9.0.1 Тип уязвимости: Аутентифицированное произвольное чтение файлов Оценка CVSS: 8.5 Высокая Доступность эксплойта: Публичный PoC доступен Влияние:...

IngressNightterror

IngressNightterror CVE-2025-1974 概要 このリポジトリは、IngressNightmare 脆弱性に関する私の調査研究です。脆弱な Ingress のデプロイファイル、エクスプロイト本体、共有オブジェクトペイロードが含まれています。 CVE CVE インデックスの一覧: CVE-2025-1974 - 根本の脆弱性 CVE-2025-24514 - auth-url アノテーションインジェクション CVE-2025-1097 - auth-tls-match-cn アノテーションインジェクション CVE-2025-1098 - イメージ UID の悪用...

CVE-2026-18743

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the poptConfigFileToString function reallocates memory for buffers...

Hikvision-CVE-2017-7921-decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor 이 파이썬 파일은 CVE-2017-7921에 취약한 hikvision 카메라에서 사용하는 configurationFile을 복호화합니다. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ 설명 Hikvision IP 카메라 인증 우회 CVE-2017-7921 기본적으로 위에 나열된 CVE에 취약한 hikvision 카메라는 URL에 인수로 제공된 간단한...