IOCs

//////////////// ////////////////////// // //////////////////////// // /// /////// ///// /////// /////// /////// /////// //////// //////// //////// //////// //////// //////// //////// //////// //////// //////// /////// /////// /////// /////// ///// // ////// // // /////////////////////////...

uBlockOrigin-HUGE-AI-Blocklist

uBlockOrigin & uBlacklist Huge AI Blocklist A huge blocklist of manually curated sites 1000+ that contain AI generated content, for the purposes of cleaning image search engines Google Search, DuckDuckGo, and Bing with uBlock Origin or uBlacklist. Also works on mobile iOS, iPadOS, Android via...

Stevos-AI-Blocklist

Stevo's AI Blocklist A filter list for uBlock Origin and AdGuard that hides specific website features which use Generative AI and content labeled as AI-generated. Available for PC/Linux Firefox, Chrome, Edge, Brave, macOS Firefox, Chrome, Edge, Safari, Android Firefox, and iOS/iPadOS Safari, Brav...

The Quantum Ad-List

The Quantum Ad-List Next-Generation AI-Powered Ad & Tracker Blocking 📜 Table of Contents 1. Legal & Ethical Notice 2. Project Overview Maintainers Technical Architecture Motivation Security & Privacy 3. Installation Hosts File Integration Ad-Blocker Compatibility Pi-hole Integration 4. Issue...

simplewall

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

hosts

!IMPORTANT Cloning this repository can take a long time! You probably just want to start with the latest version, not its whole history since 2018. Therefore you probably want to use git clone --depth 1 ... to save significant time. !NOTE With the exception of issues and PRs regarding changes to...

Monsta FTP <= 2.14.4 - Unauthenticated SSRF via IPv6 Blocklist Bypass

Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteFile action caused by an incomplete IP blocklist check in the isBlockedIP function, which fails to detect embedded IPv4 addresses within IPv4-mapped IPv6 addresses. id: CVE-2026-60105 info: name: Monst...

CVE-2026-112777

Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create function because its class-name checks are case-sensitive while PHP class resolution is not. Attackers with template-execution rights, such as Control Panel administrators, can instantiate SplFileObje...

fastjson-1.2.60-rce

Fastjson = 1.2.60 Deserialization Vulnerability By Pass autoType Block List with 2 Gadgets JNDIConfiguration, OracleManagedConnectionFactory Gadgets 经过测试，命中的4个文件都是可以利用的。 不过其中HikariConfig类就是前文提到的类，在最新版本被加入黑名单，JNDIConnectionPool类在42版本前就被加入黑名单了。 另外的两个类JNDIConfiguration和...

EUVD-2026-104583

Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create function because its class-name checks are case-sensitive while PHP class resolution is not. Attackers with template-execution rights, such as Control Panel administrators, can instantiate SplFileObje...

CVE-2026-112777

Craft CMS versions 4.x before 4.18.8 and 5.x before 5.11.0 are vulnerable to a blocklist bypass in the Twig create() function. The root cause is that class-name checks are case-sensitive, whereas PHP class resolution is not. Attackers with template-execution rights, such as Control Panel administ...

Mercury: Unauthenticated Remote Code Execution via /api/kernels

Mercury runs a JupyterLab server with anonymous access by default mercuryapp/main.py sets --IdentityProvider.token='' when no --token/MERCURYTOKEN is given; when tokenless it also sets --ServerApp.disablecheckxsrf=True. It relies on a blocklist mercuryapp/blockhandler.py BLOCKEDPATTERNS: /lab,...

chyrp-lite-rce-poc

chyrp-lite-rce-poc CVE-2026-53767 + CVE-2026-53768 - Authenticated RCE in Chyrp Lite ≤ 2026.01 "Iriomote" Chained attack: uploadspath blocklist bypass CVE-2026-53768 + missing file extension validation in adminupdateupload CVE-2026-53767 → Remote Code Execution as www-data Overview Chyrp Lite ≤...

AIP

Attacker IP Prioritization AIP Tool The Attacker IP Prioritization AIP is a tool to generate efficient and economic IP blocklists based on network traffic captured from honeypot networks. With the advent of 5G, IoT devices are directly connected often without firewall protection. Therefore we nee...

CVE-2023-22524

Atlassian Companion RCE Vulnerability Proof of Concept CVE-2023-22524 Overview This repository contains a proof of concept PoC for the recently discovered remote code execution vulnerability in Atlassian Companion for macOS, identified as CVE-2023-22524. This critical issue allows attackers to...

debianopenssl

debianopenssl Private keys vulnerable to Debian OpenSSL bug CVE-2008-0166 In 2008 a bug in Debian's and Ubuntu's OpenSSL package led to predictable private keys. While the number of keys is limited, it takes a few considerations to create a proper list of all plausibly affected keys. This...

CVE-2026-61424

CVE-2026-61424 — DJ-Classifieds = 3.11.1 imageupload Task → No Auth → 3-String Filter Bypass Overview Unauthenticated arbitrary file upload in DJ-Classifieds for Joomla. The imageupload task endpoint processes file uploads without authentication and relies on a 3-string blocklist ?php, eval, base...

trackers

Web tracking is the practice by which websites identify and collect information about users. This is generally in the form of some subset of web browsing history. With more of us now using streaming services, mobile devices, laptops, wearables and indeed Internet of Things IoT at home and at work...

CVE-2026-103999

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File Upload in all versions up to, and including, 3.5.54 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...

CVE-2026-103999

The Ultra Addons for Contact Form 7 WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.5.54 . The root cause is insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts. Attackers...