Security update for c-ares (important)

openSUSE security update: security update for c-ares ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21721-1 Rating: important References: bsc1270416 bsc1276290 bsc1276291 Cross-References: CVE-2026-33630 CVE-2026-69184 CVE-2026-69186 CVSS scores:...

SSRF-CVE-2020-15002

요약 /appsuite/api/oxodocumentfilter&action=addfile 처리 시 적용되는 URL 검증 로직에는 Time of Check Time of UseToCToU SSRF 공격을 실행하는 데 사용될 수 있는 세 가지 결함이 있습니다. 이 문제는 악의적인 행위자가 내부 네트워크 서비스에 HTTP GET 요청을 실행할 수 있게 하며, 보호된 정보 유출로 이어질 수 있습니다. 결함 1: Time of Check Time of Use ToCToU 취약점 URITools.getFinalURL 메서드 여기에 구현된...

Massive-Subdomain-Enumerator

Massive-Subdomain-Enumerator 该工具结合基于字典的单词列表（暴力破解）与 DNS 解析检查来验证子域名的存在。 功能特性 字典处理： 能够高效处理大型字典。 多线程： 使用多个线程提升搜索速度。 DNS 验证： 仅显示有效且活跃的子域名。 输出到文件： 将枚举结果保存到文件以供进一步分析。 使用方法 1. 下载并安装 Python 确保你的系统已安装 Python 2.7。你可以从 Python 官方网站下载： https://www.python.org。 2. 准备字典 创建一个文本文件，其中包含你想要测试的子域名列表。wordlist.txt 的示例内容...

CVE-2026-77310

A flaw was found in jackson-databind. A remote attacker can exploit this vulnerability by providing specially crafted input during data deserialization, specifically when java.net.InetAddress objects are processed. This causes the application to perform eager DNS resolution on attacker-controlled...

CVE-2020-8277

CVE-2020-8277 교육 목적으로만 사용하세요. 빠른 실행 root@kitploit: clone this repository $ git clone https://github.com/masahiro331/CVE-2020-8277 run bind $ docker build -t bind-local ./bind Need TCP fallback $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind use " v15.2.1" version If you use fixed...

CVE-2026-34207

CVE-2026-34207 SSRF 필터는 호스트명 텍스트를 검사했지만, 실제 목적지는 나중에 DNS에 의해 결정되었습니다. 이 간격으로 인해 공격자가 제어하는 Webhook URL이 루프백, 메타데이터 및 사설 네트워크 대상에 도달할 수 있었습니다. 소개 저는 오픈소스 챗봇 빌더인 Typebot 을 검토하면서 간단한 보안 질문을 염두에 두고 이 문제를 발견했습니다. SSRF 보호가 호스트명 텍스트를 검증하지만 실제 목적지는 나중에 DNS에 의해 결정된다면 어떻게 될까? 이 경우, 그 질문은 실제 버그로 이어졌습니다...

domains-from-csp

domains-from-csp CSPヘッダーからドメイン名をパースするPythonスクリプト Content Security Policy（CSP）ヘッダーからドメイン名を抽出するスクリプト 出力は今のところstdoutに出力されます デモ スクリーンショット サードパーティ製パッケージの依存関係 requests click セットアップ このリポジトリをクローンします root@kitploit: $ git clone [email protected]:yamakira/censys-enumeration.git 依存関係をインストールします...

PT-2026-84020

Name of the Vulnerable Software and Affected Versions elFinder versions prior to 2.1.70 Description URL uploads in php/elFinder.class.php can bypass server-side request forgery SSRF protections when PHP cURL is unavailable. The validate address function validates the IP address, but get remote...

Linux Distros Unpatched Vulnerability : CVE-2026-77310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1,...

decode-spam-headers

decode-spam-headers.py Che tu stia cercando di capire perché una specifica e-mail è finita in SPAM/Junk per le tue attività amministrative quotidiane o per i tuoi scopi di simulazione di Phishing Red-Team, questo script è qui per aiutarti! L'idea è nata durante la consegna di esercizi commerciali...

Citrix-NetScaler-Memory-Leak-CVE-2025-5777

CVE-2025-5777 – Citrix NetScaler Perdita di memoria PoC aggiornato Questo repository contiene un Proof-of-Concept PoC aggiornato per sfruttare CVE-2025-5777 – una vulnerabilità di perdita di memoria che colpisce Citrix NetScaler. Il PoC originale di 0xgh057r3c0n funziona perfettamente, ma alcuni...

CVE-2026-59278 In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages

JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. When these mappers are used — which is the default configuration for all @KafkaListener consumers — an external Kafka producer can inject a java.net.InetAddress type via the...

CVE-2026-59278

Spring for Apache Kafka is vulnerable to SSRF via DNS resolution in its JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper classes. Because java.net is included in the default trusted packages list, an external Kafka producer can inject a java.net.InetAddress type through the spring_json_header_t...

praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)

Summary praisonaiagents/tools/spidertools.py contains an SSRF protection bypass. The function hostisblocked validates URLs against a list of blocked IP literals and hostname aliases, but never performs DNS resolution. Any hostname that resolves to a private or loopback IP address — including publ...

CVE-2026-55526

PraisonAI is a multi-agent teams system. In versions prior to praisonaiagents 1.6.58 , the function spider_tools._host_is_blocked() does not resolve ordinary hostnames before scrape_page fetches them. An attacker-supplied hostname such as 127.0.0.1.nip.io passes the validation check but resolves ...

CVE-2026-55526 PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spidertools.hostisblocked does not resolve ordinary hostnames before scrapepage fetches them. A hostname such as 127.0.0.1.nip.io passes validation and resolves to loopback, permitting internal HTTP access. The fix uses...

CVE-2026-55526 PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spidertools.hostisblocked does not resolve ordinary hostnames before scrapepage fetches them. A hostname such as 127.0.0.1.nip.io passes validation and resolves to loopback, permitting internal HTTP access. The fix uses...

EUVD-2026-65499

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spidertools.hostisblocked does not resolve ordinary hostnames before scrapepage fetches them. A hostname such as 127.0.0.1.nip.io passes validation and resolves to loopback, permitting internal HTTP access. The fix uses...

CVE-2026-79671

Ech0 before 4.4.3 contains a server-side request forgery vulnerability in the validateWebhookURL function webhooksettingservice.go, which only validates literal IP addresses via net.ParseIP and fails to reject hostnames that DNS-resolve to private or internal IPs e.g., 169.254.169.254.nip.io. An...

CVE-2026-79671 Ech0 before 4.4.3 SSRF via DNS Resolution Bypass

Ech0 before 4.4.3 contains a server-side request forgery vulnerability in the validateWebhookURL function webhooksettingservice.go, which only validates literal IP addresses via net.ParseIP and fails to reject hostnames that DNS-resolve to private or internal IPs e.g., 169.254.169.254.nip.io. An...