EUVD-2026-69419

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher even though incoming metadata keys are lowercase. A DENY policy using a mixed-case name such as...

CVE-2026-84303 gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher even though incoming metadata keys are lowercase. A DENY policy using a mixed-case name such as...

CVE-2026-84303 gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher even though incoming metadata keys are lowercase. A DENY policy using a mixed-case name such as...

CVE-2026-17532

Seraphinite Accelerator . Une seule URL, aucune authentification : root@kitploit: http://TARGET/?seraphaccelprep=alertdocument.domain" Utilisation Python nécessite pip install requests :...

CVE-2020-6287

CVE-2020-6287 SAP NetWeaver AS JAVA LM Configuration Wizard: обход аутентификации создание обычного и административного Java-пользователя SAP NetWeaver — это интегрированная технологическая платформа SAP и техническая основа всех приложений SAP, начиная с SAP Business Suite. SAP NetWeaver — это...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.31 packages and security update

Red Hat OpenShift Container Platform release 4.21.31 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass

A vulnerability has been identified in the Apache HTTP Server. If the server is configured to connect to a malicious or compromised backend server, an attacker could exploit this flaw to bypass security controls or run unauthorized code on the system...

Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure

Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-82329 CVSS score: 9.8, a case of authentication bypass that could lead to administrative access in...

CVE-2026-21018-OPC-UA-Authentication-Bypass-via-None-Security-Policy

CVE-2026-21018 – Contournement de l'authentification OPC UA via la politique de sécurité None Code du programme simulation Python opcua-asyncio root@kitploit: opcuaserversim.py - OPC UA server accepting None security policy from asyncua import Server import asyncio async def main: server = Server...

CVE-2025-55234

CVE-2025-55234 Cette vulnérabilité permet aux attaquants d'effectuer des attaques par relais contre le protocole SMB Server Message Block. En cas de succès, elle peut conduire à une élévation de privilèges EoP, permettant essentiellement à des utilisateurs non autorisés d'obtenir un accès de nive...

CVE-2026-22002-VNC-Authentication-Bypass-via-Protocol-Version-Confusion

CVE-2026-22002 – Contournement de l'authentification VNC via confusion de version de protocole Code du programme Python root@kitploit: vncserversim.py - VNC server with version negotiation flaw import socket, struct def handleconn: Send server version "RFB 003.008\n" conn.sendb"RFB 003.008\n"...

CVE-2018-3639

CVE-2018-3639 Preuve de concept de Speculative Store Bypass CVE-2018-3639 pour Linux Téléchargement root@kitploit: git clone [email protected]:mmxsrup/CVE-2018-3639.git Compilation root@kitploit: cd CVE-2018-3639 make Exécution root@kitploit: ./specter Sortie root@kitploit: $ ./spectre idx: ...

CVE-2020-26061

CVE-2020-26061 ClickStudios Passwordstate 비밀번호 재설정 포털 인증 우회 정보 공급업체: ClickStudios 제품: Passwordstate 영향을 받는 버전: 8.5 빌드 8501 이전 연구자: Jason Juntunen aka @missing0x00 https://github.com/missing0x00 설명 8.5 빌드 8501 이전의 ClickStudios Passwordstate 비밀번호 재설정 포털은 인증 우회 취약점에 영향을 받습니다. ResetPassword 함수는 사용자가 ...

ActiveMQ_CVE-2023-46604

ActiveMQCVE-2023-46604 Implementation en Python pour construire rapidement des paquets de flux de données concurrents ; les deux classes gadgets sont implémentées, org.springframework.context.support.FileSystemXmlApplicationContext et...

EUVD-2026-69396

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor setting. If a user opens or uses an attacker-prepared repository whose preserved .git/config sets...

CVE-2018-0296

CVE-2018-0296 Тестирование CVE-2018-0296 и извлечение имен пользователей из Cisco ASA. За дополнительными техническими подробностями обращайтесь по адресу https://sekurak.pl/opis-bledu-cve-2018-0296-ominiecie-uwierzytelnienia-w-webinterfejsie-cisco-asa/ Help Menu root@kitploit: $ ./CVE-2018-0296 ...

CVE-2013-6117

CVE-2013-6117 root@kitploit: $ ./CVE-2013-6117 -h Options: -h, --help affiche les informations d'aide -f, --filename Fichier contenant la liste des adresses IP -t, --target IP cible -n, --threads Nombre de threads simultanés défaut : 100 root@kitploit: $ ./CVE-2013-6117 -f hostfile.txt...

CVE-2023-32315

CVE-2023-32315 Vulnérabilité de contournement d'authentification dans la console Openfire avec un plugin RCE Configuration root@kitploit: git clone https://github.com/miko550/CVE-2023-32315.git cd CVE-2023-32315 pip3 install -r requirements.txt Utilisation root@kitploit: python3 CVE-2023-32315.py...

CVE-2024-39929

Exim CVE-2024-39929 Exploit PoC Ce dépôt contient un script Proof-of-Concept PoC pour exploiter la vulnérabilité Exim CVE-2024-39929. Cette vulnérabilité affecte les versions d'Exim antérieures à 4.98, permettant aux attaquants de contourner les mécanismes de blocage d'extensions de fichiers et...