83 matches found
cicd-goat
Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents Description Download & Run Linux & Mac Windows Powershell Usage Instructions Take the challenge Troubleshooting Solutions Contributing...
CTFd
Что такое CTFd? CTFd — это фреймворк для Capture The Flag, ориентированный на простоту использования и настраиваемость. В нём есть всё необходимое для проведения CTF, и его легко настраивать с помощью плагинов и тем. Возможности Создавайте собственные задания, категории, подсказки и флаги через...
CVE-2026-30345
CVE-2026-30345 Proof of Concept Уязвимость произвольной записи файлов в функции импорта резервных копий CTFd 3.8.2. Быстрый старт Перед запуском cve202630345bashrcpoc.py Убедитесь, что вы обновили значения в соответствии с вашим эксплойтом. Такие значения, как RHOST, IP-адрес или PORT атакующего,...
CVE-2025-29419
CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack...
EUVD-2025-210783
CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack...
CVE-2025-29419
CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack...
PT-2026-82229
Name of the Vulnerable Software and Affected Versions CTFd version 3.7.6 Description CTFd is susceptible to a man-in-the-middle attack, which occurs when an attacker intercepts and potentially alters communication between two parties who believe they are communicating directly with each other...
CVE-2025-29419: Channel Accessible by Non-Endpoint
CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack...
CVE-2025-29419
CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack...
CVE-2025-29419
The software CTFd v3.7.6 is vulnerable to a man-in-the-middle attack . While the specific root cause and technical components involved are not detailed in the provided documents, the vulnerability was assigned a High base severity score of 7.1 . No remediation steps, exploit details, or specific ...
EUVD-2026-64670
A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function issafeurl of the file CTFd/utils/validators/init.py. Such manipulation of the argument Next leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be...
CVE-2026-78145
A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function issafeurl of the file CTFd/utils/validators/init.py. Such manipulation of the argument Next leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be...
CVE-2026-78145 CTFd __init__.py _is_safe_url redirect
A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function issafeurl of the file CTFd/utils/validators/init.py. Such manipulation of the argument Next leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be...
CVE-2026-78145
CTFd versions up to 3.8.4 are affected by an open redirect vulnerability in the _is_safe_url function within CTFd/utils/validators/__init__.py. A remote attacker with no privileges can manipulate the Next argument to redirect users to an arbitrary URL, requiring only user interaction. The CVSS 3....
CVE-2026-78145 CTFd __init__.py _is_safe_url redirect
A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function issafeurl of the file CTFd/utils/validators/init.py. Such manipulation of the argument Next leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be...
CVE-2026-78145 CTFd __init__.py _is_safe_url redirect
A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function issafeurl of the file CTFd/utils/validators/init.py. Such manipulation of the argument Next leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be...
PT-2026-79787
Name of the Vulnerable Software and Affected Versions CTFd versions prior to 3.8.5 Description An open redirect issue exists where remote attackers can manipulate the Next argument. This occurs within the is safe url function located in the CTFd/utils/validators/ init .py file. Recommendations...
CVE-2026-78145: URL Redirection to Untrusted Site
A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function issafeurl of the file CTFd/utils/validators/init.py. Such manipulation of the argument Next leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be...
CTFusion: A CTF-Based Benchmark for LLM Agent Evaluation
Recent advances in Large Language Models LLMs have enabled agentic systems for complex, multi-step tasks; cybersecurity is emerging as a prominent application. To evaluate such agents, researchers widely adopt Capture The Flag CTF benchmarks. However, current CTF benchmarks reuse existing...