CVE-2025-68616-Detecting-and-Patching-an-SSRF-in-WeasyPrint-with-Wazuh

从检测到修复：使用Wazuh狩猎并修补WeasyPrint中的真实SSRF漏洞（CVE-2025-68616） TL;DR 在Kali Linux机器上使用Wazuh （开源SIEM/XDR）进行的个人实践练习中，漏洞检测 模块识别出WeasyPrint 包中存在一个高（CVSS 7.5）严重性漏洞：SSRF保护绕过（CVE-2025-68616 ）。我调查了该发现，通过本地概念验证复现了问题，应用了项目的修补版本，并验证了漏洞利用不再有效。本仓库记录了完整流程：检测、分析、PoC和修复。 背景 Wazuh 是一个开源安全平台（SIEM +...

-home-lukewago-Downloads-CVE-2021-23017-Nginx-1.14

此存储库没有 README。...

IngressNightmare-PoC

此存储库没有 README。...

CVE-2026-31431-simple-test

CVE-2026-31431 — PoC Educativo Descargo de responsabilidad Este repositorio se proporciona únicamente con fines educativos, de investigación y de seguridad defensiva. El código demuestra el mecanismo técnico detrás de CVE-2026-31431 en un entorno de laboratorio controlado. Está destinado a ayudar...

Vulnerable-CVE-2014-8609

This repository does not have a README...

vulnupnp

vulnupnp 发现易受 CVE-2013-0229 / CVE-2013-0230 / CVE-2012-5958 / CVE-2012-5959 影响的 uPNP 设备...

CVE-2019-0604

CVE-2019-0604 CVE-2019-0604 来自 https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...

Exploit-CVE-2021-24160

Exploit-CVE-2021-24160 利用 CVE-2021-24160...

CVE-2023-30212

CVE-2023-30212 Docker environment and exploit the CVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0 .This vulnerability allows for Cross-Site Scripting XSS attacks...

CVE-2026-33017

此存储库没有 README。...

CVE-2022-0847

此存储库没有 README。...

CVE-2021-22555

CVE-2021-22555...

CVE-2026-0920

Escáner CVE-2026-0920 Un escáner basado en Python para detectar y validar la exposición a CVE-2026-0920 en sitios WordPress que utilizan versiones vulnerables del plugin LA-Studio Element. Resumen Esta herramienta está diseñada para automatizar la identificación de objetivos WordPress...

mac0352-ep4

mac0352-ep4 Apache HTTP Server 2.4.23 漏洞研究（CVE-2016-8740）...

CVE-2025-24799-scanner

CVE-2025-24799-scanner Escáner para la vulnerabilidad CVE-2025-24799 de GLPI...

CVE-2018-10933

This repository does not have a README...

CVE-2020-8597

此存储库没有 README。...

CVE-2018-6574-POC

Este repositorio no tiene un README...

cve-2014-4322

cve-2014-4322 CVE-2014-4322 漏洞利用...

Linux Distros Unpatched Vulnerability : CVE-2026-18090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image...