bumblebee

Kataloge zu Threat-Intelligence-Exposures Gepflegte Exposure-Kataloge für aktuelle Supply-Chain-Kampagnen, erstellt aus öffentlichen Threat-Intelligence-Berichten mit Perplexity Computer und über PRs aktualisiert, sobald neue Kampagnen gemeldet werden. Übergebe einen Katalog mit --exposure-catalo...

CVE-2026-79220

CVE-2026-79220 is an information leak in the Network component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could obtain sensitive information via a crafted HTML page. Chromium rates the severity as Medium , reflecting the elevated p...

CVE-2026-79068

Google Chrome prior to 152.0.7977.65 is affected by an improper resource exposure in the StreamsAPI component. A remote attacker can potentially bypass the web origin policy into a privileged page by delivering a crafted HTML page. Chromium rates this as Medium severity. Remediation is to update ...

CVE-2026-79031

CVE-2026-79031 is an improper resource exposure vulnerability in the Preload component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to bypass site isolation , potentially exposing resources across isolated origins. Chr...

ROOT-OS-DEBIAN-12-CVE-2023-29934 CVE-2023-29934 in llvm-toolchain-14 - Patched by Root

Root has patched CVE-2023-29934 in the llvm-toolchain-14 package for Root:Debian:12. Multiple fixed versions available...

openclaw-technical-analysis

Analisi Tecnica di OpenClaw Questo repository contiene le mie recensioni tecniche approfondite e audit del codice della piattaforma OpenClaw AI concentrandosi specificamente sulle build del 15 e 25 febbraio 2026. Queste recensioni si basano sull'analisi dell'architettura grezza, sulla cronologia...

Octopii

Octopii root@kitploit: ⠀⠀⠀⠀⠀⠀⠀⣤⣤⣄⣀⡀⠀⠀⠀⢀⣠⣤⣤⣄⡀⠀⠀⠀⢀⣀⣠⣤⣤⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠸⣿⣿⡿⠿⢿⣷⡄⢠⣿⣿⣿⣿⣿⣿⡄⢀⣾⡿⠿⢿⣿⣿⠇⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠈⠉⠀⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⠀⠉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⣠⣤⡀⠀⠀⠀⠀⠀⠀⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⠀⠀⠀⠀⠀⠀⢀⣤⣄⠀⠀⠀ ⠸⣿⣿⣿⣿⣿⣿⣿⣿⣦⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⣴⣿⣿⣿⣿⣿⣿⣿⣿⠇⠀⠀ ⠀⠉⠉⠁⠀⠀⠀⠀⣿⣿⠀⢸⣿⡇⠀⠉⣿⣿⣿⣿⠉⠀⢸⣿⡇⠀⣿⣿⠀⠀⠀⠀⠈⠉⠉⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⣀⣈⣻⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣟⣁⣀⣿⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀...

sharingIsCaring

sharingIsCaring TwonkyMedia Server Pwnd CVE-2018-7171 Hintergrundinformationen Dies ist ein GitHub-Repository, das alle relevanten Informationen zu CVE-2018-7171 enthält. und mehr CVE-2018-7171 stellt eine Directory-/Datei-Traversal-Schwachstelle im TwonkyMedia Server Version 7.0.11-8.5 neueste...

CVE-2018-9995-ModifiedByGwolfs

वक्तव्य यह टूल gwolfs द्वारा लिखे गए CVE-2018-9995 का बेहतर संस्करण है, और केवल सीखने के उपयोग के लिए है। अवैध उद्देश्यों के लिए उपयोग न करें, इससे उत्पन्न होने वाले सभी परिणाम आपके अपने हैं। मूल संस्करण ezelf द्वारा लिखा गया है और https://github.com/ezelf/CVE-2018-9995dvrcredentials पर है। ezelf...

GHSA-72F3-6W86-7RV3 @arikusi/deepseek-mcp-server: Missing Authentication on Self-Hosted HTTP MCP Endpoint

Summary The self-hosted HTTP transport of @arikusi/deepseek-mcp-server exposes POST /mcp without any authentication: createMcpExpressApp is called without an authProvider and no middleware guards the route, so any network-reachable client can issue an unauthenticated initialize request and obtain...

GHSA-FH3R-G96V-F578 @arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key

Cross-Session Data Exposure via Caller-Controlled sessionid Project / Repository: arikusi/deepseek-mcp-server Affected version / commit tested: 1.6.0 / 04f28be2c6e99d3d4e443a6ae37cc35f0a71554a Vulnerability type: Authorization bypass / cross-session data exposure Authentication required: No Summa...

cve-2022-22947-spring-cloud-gateway

Einführung in die Schwachstelle Spring Cloud Gateway ist ein neues Projekt von Spring Cloud, das auf Technologien wie Spring 5.0, Spring Boot 2.0 und Project Reactor basiert. Es zielt darauf ab, eine einfache und effektive einheitliche API-Routing-Verwaltung für Microservices-Architekturen...

Bluetooth-Attacks-CVE-2025-27840

Este artigo discute como um atacante pode introduzir uma lista oculta de vulnerabilidades por meio de atualizações de módulos, o que pode levar ao comprometimento de dispositivos ESP32 e à obtenção de acesso não autorizado a chaves privadas, afetando bilhões de dispositivos que usam este...

CVE-2026-55637

genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default MCPLISTENADDR value 127.0.0.1:8080 when MCPAUTHTOKEN is unset and the httpSrv.Startaddr branch does not validate th...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

stretcher

Stretcher Stretcher ist ein Tool zum Durchsuchen offener Elasticsearch-Server. root@kitploit: Usage: python stretcher.py --shodan key --action analyze --threads 0..100 --dork python stretcher.py --help / // / / // / \ / / / / / / / / / / / // / / / // // / / / / / //// //// //// Tool, das...

CVE-2022-0482_exploit

Ausnutzung der Schwachstelle CVE-2022-0482 Einleitung Dieses Dokument beschreibt die detaillierte Analyse von CVE-2022-0482, einer kritischen Sicherheitsschwachstelle in der Terminplanungssoftware Easy!Appointments. Dieser Fehler, der unter CWE-863 als fehlerhafte Autorisierung eingestuft wird,...

CVE-2017-1000117

Repository di test per verificare la vulnerabilità di Git CVE-2017-1000117 Come funziona? Clona questo repository in modo ricorsivo. La frase 「うんこもりもり」che significa tipo "Molta merda." verrà mostrata sul tuo terminale. root@kitploit: $ git clone --recursive...

poc_CVE-2018-1002105

CVE-2018-1002105 PoC प्रमाणित PoC डेमो उपयोग अप्रमाणित PoC डेमो उपयोग प्रमाणित PoC CVE-2018-1002105 के लिए प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट। वर्तमान एक्सप्लॉइट को pods और pods/exec पर create और get विशेषाधिकारों की आवश्यकता होती है। portforward और attach के लिए समर्थन जोड़ा गया है, जिन्हें समान...

CVE-2018-16987

CVE-2018-16987 यह एक स्पष्टपाठ संवेदनशील जानकारी भंडारण और संवेदनशील जानकारी उजागर करने की कमजोरी है जो मैंने पैठ परीक्षण के दौरान Squash TM में पाई। SquashTM Squash TM परीक्षण मामलों को प्रबंधित करने के लिए उपयोग किया जाने वाला एक वेब इंटरफ़ेस है। प्रोजेक्ट के लिए लिंक विवरण Squash TM कम से कम...