CVE-2026-87028

Concrete CMS 9 through 9.5.3 did not confirm that a board InstanceItem submitted to the custom-slot preview endpoint belonged to the board instance the requesting user was authorized to edit, and did not enforce page-view permission before generating page-backed summary content. As a result, an...

Important: Red Hat Security Advisory: Red Hat build of Cryostat security update

An update is now available for the Red Hat build of Cryostat 4 on RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

EUVD-2026-80894

Concrete CMS before 9.5.3 exposed a legacy Express entry search endpoint that returned entry result JSON without invoking the canViewExpressEntries permission check applied by the normal dashboard and CSV Export flow. An unauthenticated visitor who knew or discovered an Express entity identifier...

CVE-2026-18120 Missing Authorization in legacy Express entries search endpoint allows disclosure of Express entry data

Concrete CMS before 9.5.3 exposed a legacy Express entry search endpoint that returned entry result JSON without invoking the canViewExpressEntries permission check applied by the normal dashboard and CSV Export flow. An unauthenticated visitor who knew or discovered an Express entity identifier...

CVE-2026-3288-lab

CVE-2026-3288 漏洞实验环境（Docker） NGINX Ingress Controller 配置注入 ⚠️ 警告 ：本实验环境包含故意配置的漏洞，仅供授权安全培训使用 漏洞概述 CVE-2026-3288 （CVSS 8.8 高危）— NGINX Ingress Controller 中的配置注入漏洞 受影响版本 ： v1.13.8、v1.14.4、v1.15.0 攻击向量 ：路径配置中的双引号（"）注入 影响 ：远程代码执行、机密信息泄露、凭据窃取 相关漏洞 ：CVE-2026-24512（类似的路径注入） 根本原因 buildProxyPass 函数在将路径输入插入...

CVE-2026-64753

A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to a permissions issue. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...

CVE-2026-87028

CVE-2026-87028 is a cross-board Insecure Direct Object Reference (IDOR) in the Board Custom Slot Preview endpoint of Concrete CMS 9.0.0 through 9.5.3 . The endpoint failed to verify that a submitted InstanceItem belonged to the board instance the requesting user was authorized to edit, and did no...

EUVD-2026-80881

Concrete CMS 9 through 9.5.3 did not confirm that a board InstanceItem submitted to the custom-slot preview endpoint belonged to the board instance the requesting user was authorized to edit, and did not enforce page-view permission before generating page-backed summary content. As a result, an...

PoC-CVE-2026-21858

PoC-CVE-2026-21858 n8n 是一个开源工作流自动化平台。从 1.65.0 到 1.121.0 之前的版本，攻击者可以通过执行某些基于表单的工作流来访问底层服务器上的文件。易受攻击的工作流可能授予未经身份验证的远程攻击者访问权限，导致系统上存储的敏感信息泄露，并可能根据部署配置和工作流使用情况实现进一步入侵。此问题已在 1.121.0 版本中修复。 https://nvd.nist.gov/vuln/detail/CVE-2026-21858 使用方法 root@kitploit: ❯ python CVE-2026-21858.py -h usage:...

CVE-2026-40776

CVE-2026-40776 Eventin wp-event-solution 访问控制失效 在 Eventin WordPress 插件（拥有 10,000+ 活跃安装）中存在未经身份验证的 PII 泄露 和 订单伪造 。一个公开的 REST 端点向任何访问者分发 wprest nonce，三个下游权限回调将该 nonce 视为身份验证的替代品——导致所有客户订单端点的授权机制失效。 完整技术分析： https://lorenzofradeani.com/en/blog/cve-2026-40776 Patchstack 公告：...

CVE-2026-53959

CVE-2026-53959 - 4gaBoards 3.3.9 - 用户信息泄露 本仓库包含针对 CVE-2026-53959 的概念验证（PoC）漏洞利用代码 免责声明 本项目仅供教育目的和授权安全测试使用。请勿将其用于你不拥有或无权限测试的系统。 概述 4gaBoards 是一个用于实时项目管理的看板系统。在 3.3.9 版本之前，4gaBoards 允许任何已认证用户通过 GET /api/users 枚举所有用户的账户信息，并通过 GET /api/users/:id 检索任意账户。users/index 和 users/show 操作仅依赖...

dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

Important: Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

An update for .NET 9.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2026-61595

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust.tenants isolation was enforced only on the HTTP path. The current tenant was stored in threading.local and set exclusively by the HTTP-only TenantMiddleware...

ktor-xxe

ktor-xxe Ejecuta el proyecto con : | ./gradlew run | Ejecuta el servidor | Si el servidor se inicia correctamente, verás la siguiente salida: root@kitploit: 2024-12-04 14:32:45.584 main INFO Application - Application started in 0.303 seconds. 2024-12-04 14:32:45.682 main INFO Application -...

CVE-2026-92600

Guns (a Java-based application framework) through version 8.3.5 contains an information disclosure vulnerability in SysUserController . The /sysUser/detail and /sysUser/page endpoints omit the requiredPermission configuration, causing the permission interceptor to skip RBAC validation for authent...

Blackash-CVE-2025-24071

Blackash-CVE-2025-24071 CVE-2025-24071：通过 .library-ms 文件泄露 NTLM 哈希的 Metasploit 模块 🚨 描述 Windows 文件资源管理器将敏感信息暴露给未经授权的攻击者，使得未经授权的攻击者可以通过网络进行欺骗。 指标 CNA：Microsoft 公司 基础得分：6.5 中等 🟠 向量：CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 概述 当用户解压包含特制 .library-ms 文件的 ZIP 压缩包时，漏洞便会触发。Windows 资源管理器会自动向文件中指定的远程服务器发...

io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration

A flaw was found in Netty io.netty:netty-handler. When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping Java 25+, TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a...

keycloak-services: keycloak-services: Information disclosure via role-users endpoint bypasses per-user view filter

A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs because the system fails to check if an administrator has permission to view individual users when listing members of...

keycloak-services: keycloak-services: Realm default-group reads disclose hidden groups under FGAP v2

A flaw was found in the default-groups REST endpoint and realm representation of Keycloak. This component is responsible for managing groups that are automatically assigned to new users within a realm. The issue allows a delegated administrator with realm-viewing permissions to see the names and...