PyStegosploit

PyStegosploit - ステガノグラフィとポリグロットによるエクスプロイト配信 video1 | video2 | page by Charmve - yidazhang1 at gmaildotcom, @Charmve @therealsaumil @amichael 2021年5月 Stegosploit...

llm-prompt-injection-resources

llm-prompt-injection-resources LLMプロンプトインジェクション攻撃、防御、セキュリティについて学習・研究するための厳選されたリソース集です。 寄付 以下のQRコードをスキャンするか、PayPalでこのプロジェクトの維持をサポートしてください。...

EUVD-2026-92059

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

cve-2024-25423

cve-2024-25423 MAXON CINEMA 4D R2024.2.0 に問題があり、ローカルの攻撃者が細工された c4d ファイルを介して任意のコードを実行できる可能性があります。 追加情報 c4d ファイルの解析時に発生する Cinema 4D の領域外書き込みの脆弱性 影響を受けるコンポーネント c4dbase.xdl64 テスト済みバージョン CINEMA 4D R2024.2.0 攻撃種別 ローカル...

Metasploit-Attack-Report

이 저장소에는 README가 없습니다...

CVE-2020-16270

CVE-2020-16270 推奨説明 : OLIMPOKS 3.3.39 未満は Auth/Admin ErrorMessage XSS を許容します。 リモート攻撃者は発見された脆弱性を利用して、標的のブラウザ上で脆弱なアプリケーションのコンテキストにおいて悪意のあるJavaScriptペイロードを注入できます。実行されたコードは、管理者のCookieを盗んだり、標的アプリケーションのHTMLコンテンツに影響を与えたり、フィッシング関連攻撃を行うために使用される可能性があります。脆弱なアプリケーションは、小売から産業までさまざまなセクターの3000以上の組織で使用されています。 追加...

Nuke.sh

NUKE - 偵察 & 攻撃対象マッピングツール | \ | | | | | |/ / | | | | | | | ' /| | | |\ | || | . | | || |/||\| N U K E // recon & attack surface mapper ----------------------------------------- 公開API + 標準Linuxツール （curl、dig、openssl、nmap、python3）のみを使用した、Bashベースのパッシブ偵察 + 攻撃対象マッピング スクリプト。 すべての出力は単一の.txt...

CVE-2025-1974

cve-2025-1974-win11-attack-defense-lab Windows 11 우선의 교육용 저장소로서, 안전하고 무기화되지 않은 ATTACK + DEFENSE 연구실에서 CVE-2025-1974를 학습하기 위해 설계되었습니다. 이 프로젝트는 대학 과제, 팀 데모, 보고서용 스크린샷 제작에 적합합니다. 클린룸 구현, 로컬 전용 검증, 그리고 실제 익스플로잇이 되지 않는 레드팀 스타일의 공격 에뮬레이션을 강조합니다. 이 연구실은 CVE-2025-1974가 ingress-nginx에 영향을 미친다는 공식 기준을 인코딩하...

CVE-2026-105134: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack...

CVE-2026-105146: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

CVE-2026-105137: Download of Code Without Integrity Check

A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...

CVE-2026-105098: Exposure of Sensitive Information to an Unauthorized Actor

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. Th...

CVE-2026-105167: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

PT-2026-104607

Name of the Vulnerable Software and Affected Versions Ahsay AhsayCBS versions prior to 10.3.4 Description An issue in the API component allows remote attackers to achieve improper authentication. This occurs through the manipulation of the random argument within the checkSysPwd function located i...

PT-2026-104617

A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function get user id by email of the file cognee/modules/users/authentication/get api auth backend.py of the component JWT Signing Key Handler. The manipulation of the argument FASTAPI USERS JWT...

PT-2026-104624

Name of the Vulnerable Software and Affected Versions SciPhi-AI R2R versions prior to 3.6.7 Description An issue exists in the Retrieval Completion API Endpoint within the file py/shared/abstractions/llm.py. Remote manipulation of the generation config.api base argument allows for server-side...

Red-TTT: Test-Time Training for Automated Jailbreaking Large Language Models

Large language models remain vulnerable to jailbreaks, and automated red teaming is the standard way to find jailbreaks in large language models at scale. Current methods either draw more samples at test time through search, rewriting, and tree expansion, or train a stronger attacker offline with...

PT-2026-104602

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. Th...

PT-2026-104628

A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...

PT-2026-104657

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument order...