CVE-2026-97208 Gitea push mirror API bypass of DISABLE_NEW_PUSH policy

The Gitea API endpoint for creating push mirrors POST /api/v1/repos/owner/repo/pushmirrors checked only whether mirroring was enabled and not the mirror DISABLENEWPUSH setting that the web interface enforces. A repository administrator could therefore create new push mirrors on instances where th...

CVE-2026-97208

The Gitea application contains a vulnerability in the push mirror creation API endpoint (POST /api/v1/repos/{owner}/{repo}/push_mirrors). The root cause is an incorrect authorization check where the API verifies if mirroring is enabled but fails to enforce the [mirror] DISABLE_NEW_PUSH setting re...

CVE-2026-97208 Gitea push mirror API bypass of DISABLE_NEW_PUSH policy

The Gitea API endpoint for creating push mirrors POST /api/v1/repos/owner/repo/pushmirrors checked only whether mirroring was enabled and not the mirror DISABLENEWPUSH setting that the web interface enforces. A repository administrator could therefore create new push mirrors on instances where th...

CVE-2026-86684 Gitea push mirror local path check uses the repository owner

The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with security IMPORTLOCALPATHS = true, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the...

CVE-2026-86684 Gitea push mirror local path check uses the repository owner

The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with security IMPORTLOCALPATHS = true, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the...

CVE-2026-86684

An improper authorization check in the Gitea push mirror API allows an authenticated repository administrator to bypass local file system access restrictions. When the [security] IMPORT_LOCAL_PATHS = true setting is enabled, an administrator who lacks permission to import local paths can configur...

Tiredful-API

Qu'est-ce que Tiredful API ? Tiredful API est une application volontairement conçue pour être défaillante. L'objectif de cette application web est d'enseigner aux développeurs, aux testeurs QA ou aux professionnels de la sécurité les failles présentes dans les services web API REST dues à des...

CVE-2020-13937

CVE-2020-13937 1. Описание уязвимости: Apache Kylin имеет restful API, который предоставляет информацию о конфигурации без какой-либо аутентификации. 2. Воспроизведение Сравнение с уязвимостью Сравнение без уязвимости Написание PoC Проверка правильного URL: pocsuite -r CVE-2022-26134.py -u url...

REST-Attacker

REST-Attacker REST-Attacker est un framework de tests d'intrusion automatisés pour les API suivant l'architecture REST. L'outil se concentre sur la simplification de l'analyse des implémentations d'API REST génériques en automatisant complètement le processus de test — y compris la génération de...

CVE-2021-37580

Apache ShenYu Admin обнаружена уязвимость обхода аутентификации, позволяющая злоумышленнику обойти безопасную аутентификацию JSON Web Token JWT и напрямую войти в систему. Apache ShenYu — это масштабируемое, высокопроизводительное, реактивное решение API-шлюза, применяемое во всех микросервисных...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

Introspy-iOS

Introspy-iOS Blackbox tool to help understand what an iOS application is doing at runtime and assist in the identification of potential security issues. See http://isecpartners.github.io/Introspy-iOS/ for a quick introduction. Описание Это репозиторий трассера Introspy-iOS. Трассер можно установи...

CureIAM

CureIAM Nettoyage des comptes IAM avec des permissions excessives sur l'infrastructure GCP de manière automatisée CureIAM est un moteur facile à utiliser, fiable et performant pour l'application du principe du moindre privilège sur l'infrastructure cloud GCP. Il permet aux équipes DevOps et...

reportly

Reportly est un outil de rapport d'activité utilisateur EntraID. À propos de l'outil Cet outil aidera les équipes bleues lors d'un incident cloud. Lors de l'exécution de l'outil, le chercheur saisira en entrée un utilisateur suspect et une période de temps, et recevra un rapport détaillant les...

reportly

Reportly is an EntraID user activity report tool. About the tool This is a tool that will help blue teams during a cloud incident. When running the tool, the researcher will enter as input a suspicious user and a time frame and will receive a report detailing the following: 1. Information about t...

drltrace

Drltrace Windows test build Linux test build Drltrace is a dynamic API calls tracer for Windows and Linux applications. Drltrace is built on top of DynamoRIO dynamic binary instrumentation framework. Drltrace was initialy implemented by Derek Bruening and distributed with DynamoRIO and DrMemory...

drltrace

Drltrace Build de test Windows Build de test Linux Drltrace est un traceur dynamique d'appels API pour les applications Windows et Linux. Drltrace est construit au-dessus du DynamoRIO, un framework d'instrumentation binaire dynamique. Drltrace a été initialement implémenté par Derek Bruening et...

HunterScrape

Ceci est un script Python utilisant l'API hunter.io pour récupérer des données sur un domaine cible, puis générer une liste d'emails cibles. Il est principalement destiné au password spraying à l'aide d'outils comme Go365 ou TREVORspray. Usage: HunterScrape-Dev.py -h -d DOMAIN -k KEY -l LIMIT -f ...

CVE-2018-7690

CVE-2018-7690 SSC REST API содержит уязвимости небезопасных прямых ссылок на объекты Insecure Direct Object Reference, IDOR, которые позволяют аутентифицированным пользователям получать доступ к произвольным данным локальных пользователей и пользователей LDAP через метод POST, а также к...

fileintel

fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...