CVE-2023-43208

Mirth Connect RCE - CVE-2023-43208 説明 Mirth Connect のリモートコード実行（RCE）の PoC XStream の逆シリアル化を介して Mirth Connect 例 リスナーを起動 nc -lvnp 4444 エクスプロイトを実行 ./exploit https://target.com 10.10.10.10 4444 参考文献 https://nvd.nist.gov/vuln/detail/CVE-2023-43208 https://github.com/advisories/GHSA-pj5c-qr29-6746...

cve-2023-43208-poc

Mirth Connect PoC スクリプト Mirth Connect の脆弱性に関連するセキュリティ調査のためのシンプルな Python スクリプト。 重要 このプロジェクトは、自分が所有するシステム、または明示的な書面によるテスト許可を得たシステムでのみ使用してください。 無許可のテストは違法です。 ファイル exploit.py — メインスクリプト 必要条件 Python 3.9+ requests urllib3 クイックセットアップ python -m venv .venv ..venv\Scripts\activate pip install requests...

pocKeycloakCVE-2023-0264

PoC CVE-2023-0264 — front（OIDCセッションハイジャック） Keycloakに対してOIDC（authorization code）フローを実行し、PoCのsessionidハイジャックフックを公開する静的フロントエンド。チーム利用のためnginxでポート5174 に配信される。 起動方法（VPS上で） cd vps/pocCVE0264 docker compose up -d --build http://maquina:5174 で利用可能。プロバイダーのファイアウォールで5174/TCP を開放する（8443と同じように）。...

CVE-2023-43208-MIRTHCONNECT

CVE-2023-43208 NextGen Healthcare Mirth Connect バージョン4.4.1未満は、認証されていないリモートコード実行に対して脆弱です。この脆弱性は、CVE-2023-37679の不完全なパッチによって引き起こされることに注意してください。 最初に: 私はあなたがそれをどう使うかについて一切責任を負いません。 次に: apt-get install parallel curl -y chmod +x CVE-2023-43208.sh CVE-2023-43208.sh:...

jenkinsci__perfecto-plugin_CVE-2020-2261_1-17

Perfecto Jenkins プラグイン Perfecto Jenkins プラグインは、ビルド環境で Perfecto Connect の tunnel-id を自動生成 / 再利用する機能を提供します。 目次 Perfecto Jenkins プラグイン 目次 前提条件 1. プラグインを有効にする手順 スクリーンショット Mac Windows 詳細オプション 2. 使用法 Maven サンプル Gradle サンプル 3. Perfecto Connect を停止する手順 高度な使用法 Perfecto Connect パイプラインサンプル アプリを Perfecto...

CVE-2026-105118

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by supplying an unverified idtokenhint to the /oauth2/connect/endSession endpoint. Attackers can name any realm client in a forged hint to redirect victims to any registered...

CVE-2026-105119

OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose responsetype is exactly code, so codes issued through OpenID Connect hybrid flows code token, code idtoken, code token idtoken carry no bound challenge. An attacker who intercepts such a code ca...

CVE-2026-105118 OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by supplying an unverified idtokenhint to the /oauth2/connect/endSession endpoint. Attackers can name any realm client in a forged hint to redirect victims to any registered...

EUVD-2026-92022

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by supplying an unverified idtokenhint to the /oauth2/connect/endSession endpoint. Attackers can name any realm client in a forged hint to redirect victims to any registered...

CVE-2026-105118

OpenAM versions prior to 16.1.3 are susceptible to an open redirect vulnerability. The root cause is the failure to verify the id_token_hint provided to the /oauth2/connect/endSession endpoint. Unauthenticated attackers can exploit this by supplying a forged hint to redirect victims to any regist...

CVE-2026-105118 OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by supplying an unverified idtokenhint to the /oauth2/connect/endSession endpoint. Attackers can name any realm client in a forged hint to redirect victims to any registered...

CVE-2026-105118 OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by supplying an unverified idtokenhint to the /oauth2/connect/endSession endpoint. Attackers can name any realm client in a forged hint to redirect victims to any registered...

CVE-2026-100149

The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.3 via the 'x-yamidoo-signature attacker-obtained via inlinejs identify payload' parameter. This makes it possible...

CVE-2026-100149 WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons <= 4.7.3 - Unauthenticated Sensitive Information Disclosure via HMAC Signature Collision (Missing Domain Separation) in HMAC Signature Domain-Separation Flaw in `/yamidoo/v1/customer`…

The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.3 via the 'x-yamidoo-signature attacker-obtained via inlinejs identify payload' parameter. This makes it possible...

CVE-2026-100149 WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons <= 4.7.3 - Unauthenticated Sensitive Information Disclosure via HMAC Signature Collision (Missing Domain Separation) in HMAC Signature Domain-Separation Flaw in `/yamidoo/v1/customer`…

The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.3 via the 'x-yamidoo-signature attacker-obtained via inlinejs identify payload' parameter. This makes it possible...

EUVD-2026-91911

The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.3 via the 'x-yamidoo-signature attacker-obtained via inlinejs identify payload' parameter. This makes it possible...

CVE-2026-100149

The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 4.7.3 . An unauthenticated attacker can exploit an HMAC Signature Collision (due to missing domain separation) in the x...

CVE-2026-100149 WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons <= 4.7.3 - Unauthenticated Sensitive Information Disclosure via HMAC Signature Collision (Missing Domain Separation) in HMAC Signature Domain-Separation Flaw in `/yamidoo/v1/customer`…

The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.3 via the 'x-yamidoo-signature attacker-obtained via inlinejs identify payload' parameter. This makes it possible...

CVE-2026-105118: Improper Verification of Cryptographic Signature

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by supplying an unverified idtokenhint to the /oauth2/connect/endSession endpoint. Attackers can name any realm client in a forged hint to redirect victims to any registered...

PT-2026-104579

Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.3 Description An open redirect issue exists where unauthenticated attackers can redirect users by providing an unverified id token hint to the '/oauth2/connect/endSession' endpoint. By specifying any realm client ...