CVE-2026-103620

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...

EUVD-2026-93904

A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to obtain sensitive information from the affected system...

CVE-2026-79818

A vulnerability exists in the API interface of ClearPass Policy Manager that allows an unauthenticated remote attacker to bypass existing authentication controls. Successful exploitation of this flaw could result in unauthorized information disclosure from the affected system. No specific patch v...

CVE-2026-79811

A SQL injection vulnerability exists in the API of ClearPass Policy Manager . A remote authenticated attacker with administrative privileges can exploit this flaw to perform SQL injection attacks against the instance. Successful exploitation enables the attacker to execute arbitrary database comm...

EUVD-2026-93897

A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to execute arbitrary...

EUVD-2026-93895

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role...

CVE-2026-79803 Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system...

EUVD-2026-93890

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system...

CVE-2026-79803

A command injection vulnerability exists within the API of ClearPass Policy Manager . An authenticated remote attacker could exploit this flaw to escalate privileges and gain administrative control over the affected system. No specific patch version or exploit details are provided in the documents.

CVE-2026-76752 Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access

Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the affect...

CVE-2026-76752

HPE Networking ClearPass Policy Manager contains authentication bypass vulnerabilities within its web-based management and API interfaces . A successful exploit allows an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the affected ...

leonidas

Leonidas 本仓库包含 Leonidas，一个用于在云中执行攻击者行为的框架。它提供了一种基于 YAML 的格式，用于定义云攻击者的战术、技术和过程（TTP）及其相关的检测属性。这些定义可以编译为： 一个将每个测试用例暴露为独立端点的 Web API 用于检测的 Sigma 规则 https://github.com/Neo23x0/sigma 文档——示例请参见 http://detectioninthe.cloud/ 该项目最初设计用于 AWS 环境，其架构如下： 2024 年，Leonidas 扩展为支持 Kubernetes 环境。其资源可以部署到目标集群中，架构如下： 部...

SilentMoonwalk

SilentMoonwalk 完全动态调用栈欺骗器的 PoC 实现 概要 SilentMoonwalk 是一个完全动态调用栈欺骗器的 PoC 实现，它实现了一种技术，用于从调用栈中移除原始调用者， 并使用 ROP 使栈展开与控制流不同步。 作者 本 PoC 是有关栈欺骗主题的联合研究成果。该研究的作者是： KlezVirus Waldo-IRC Trickster0 我想强调，如果没有 Waldo-IRC 和 Trickster0 的工作，这项工作将不可能完成，他们两人都 为 PoC 的早期阶段以及背后的研究做出了贡献。 概述 该仓库演示了一个 PoC 实现，用于在调用任意 Window...

CVE-2023-27163

CVE-2023-27163 - SSRF en Request Baskets Prueba de concepto de SSRF en Request Baskets texto alternativo Las versiones de Request Baskets anteriores a la 1.2.1 son vulnerables a ataques de Server Side Request Forgery SSRF a través del componente /api/baskets/name. uso git clone...

EUVD-2026-93875

A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileges and gain administrative access to the affected system...

CVE-2026-76748

A privilege escalation vulnerability exists in the API of AOS-S . An authenticated read-only user can successfully exploit this flaw to escalate their privileges and obtain administrative access to the affected system. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . No specific techni...

drift-node-sdk

El SDK de Tusk Drift para Node.js permite realizar pruebas de API rápidas y deterministas mediante la captura y reproducción de las llamadas de API realizadas hacia y desde tu servicio. Registra automáticamente llamadas de API reales y reprodúcelas como pruebas con la CLI de Tusk para detectar...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

CVE-2026-106513 MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change

MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the SimpleBackgroundJobs plugin—through its web UI and API to site-admin users. The background job workers trust raw Redis job payloads without additional...

EUVD-2026-93666

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...