DeeCLIP

DeeCLIP: Un marco robusto y generalizable basado en Transformer para detectar imágenes generadas por IA ☀️ Si este trabajo te resulta útil para tu investigación, ¡por favor, dale una estrella a nuestro repositorio y cita nuestro artículo! ☀️ TODO Estamos trabajando duro en los siguientes elementos:...

fubucker

Fubucker | CVE-2022-1386 - Fusion Builder Herramienta masiva automática para comprobar la vulnerabilidad en CVE-2022-1386 - Fusion Builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh Instalar JQ Linux : comando apt-get install jq -y Windows...

CVE-2022-1386-FusionBuilder-SSRF

CVE-2022-1386 – Fusion Builder 示例： root@kitploit: python3 exploitcve20221386.py https://vulnerable.site https://abc123.oast.fun 使用Interact.sh或Burp Collaborator接收回调。 📋 示例输出 root@kitploit: 从目标获取nonce... 向https://abc123.oast.fun发送SSRF载荷... + SSRF确认：从受害服务器收到回调。 📌 注意 此PoC不会进行数据窃取。 仅限道德使用：未经授权请勿利用系统。 📚...

Oracle Fusion Middleware WebCenter Sites - Cross-Site Scripting

The Oracle WebCenter Sites component of Oracle Fusion Middleware is susceptible to multiple instances of cross-site scripting that could allow unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Sites. Impacted versions that are affected are 11.1.1.8.0, 12.2.1.2....

Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

CVE-2022-1386

CVE-2022-1386 - Fusion Builder 3.6.2 - 未认证SSRF 描述 Fusion Builder 是一个 WordPress 插件，允许用户使用拖放界面创建和编辑页面。它存在一个未认证的 SSRF 漏洞，攻击者可以利用此漏洞读取服务器上的任意文件。 概念验证 请求： root@kitploit: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: example.com User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:98.0 Gecko/20100101...

CVE-2022-1386

描述 Fusion Builder 是一个 WordPress 插件，允许用户通过拖放界面创建和编辑页面。它存在一个未认证的 SSRF 漏洞，攻击者可利用该漏洞读取服务器上的任意文件。 概念验证 请求： root@kitploit: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: redacted.com User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:98.0 Gecko/20100101 Firefox/98.0 Accept-Encoding: gzip, deflate...

Oracle WebLogic Server - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services is susceptible to a remote code execution vulnerability that is easily exploitable and could allow unauthenticated attackers with network access via HTTP to compromise the server. Supported versions...

security-research

Investigación de Seguridad Una colección de archivos relacionados con mi investigación personal de seguridad. Contenido adicional se publicará en mi blog https://blog.mirch.io. Herramientas Herramienta| Descripción ---|--- openssldircheck| Utilidad de Windows para comprobar rutas potencialmente...

signalops

Signal OPS Una plataforma de fusión de inteligencia de señales de espectro completo y de múltiples fuentes para la investigación y el entrenamiento en seguridad. Signal OPS integra docenas de fuentes de recopilación abiertas — bases de datos de WiFi/Bluetooth/torres de telefonía móvil, escáneres ...

CVE-2026-85217

A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network proxy settings without user notification or consent. A successful exploit may allow an attacker to redirect authenticated Fusion network traffic through an attacker-controlled proxy...

EUVD-2026-75449

A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network proxy settings without user notification or consent. A successful exploit may allow an attacker to redirect authenticated Fusion network traffic through an attacker-controlled proxy...

CVE-2026-85217

Autodesk Fusion Desktop is vulnerable to a Man-in-the-Middle (MITM) attack via a maliciously crafted add-in that, when installed and executed, can modify persistent network proxy settings without user notification or consent. A successful exploit allows an attacker to redirect authenticated Fusio...

CVE-2026-85217 Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop

A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network proxy settings without user notification or consent. A successful exploit may allow an attacker to redirect authenticated Fusion network traffic through an attacker-controlled proxy...

PHP-Fusion 9.03.50 - Remote Code Execution

PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user not admin to send a crafted request to the server and perform remote command execution. id: CVE-2020-24949 info: name: PHP-Fusion 9.03.50 - Remote Code Execution author: geeknik severity: high description: PHP-Fusion 9.03.50...

WordPress Fusion Builder <3.6.2 - Server-Side Request Forgery

WordPress Fusion Builder plugin before 3.6.2 is susceptible to server-side request forgery. The plugin does not validate a parameter in its forms, which can be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. An attacker can...

PT-2026-89413

A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network proxy settings without user notification or consent. A successful exploit may allow an attacker to redirect authenticated Fusion network traffic through an attacker-controlled proxy...

pwnacle-fusion

pwnacle-fusion Exploit automatizado para Oracle Reports, CVE-2012-3153 / CVE-2012-3152 Créditos a @misssudo por la divulgación Uso: ./pwnacle.rb targeturl payloadurl Este exploit utiliza ambos CVEs para subir una shell .jsp desde tu payloadurl, que luego es accesible desde /reports/images/shell.j...

Oracle Fusion - Directory Traversal/Local File Inclusion

Oracle Business Intelligence Enterprise Edition 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0 are vulnerable to local file inclusion vulnerabilities via "getPreviewImage." id: CVE-2020-14864 info: name: Oracle Fusion - Directory Traversal/Local File Inclusion author: Ivo Palazzolo @palaziv severity: high...

Session-Persistence-After-Enabling-2FA-CVE-2025-60425

启用双因素认证后会话持久化 概述 Nagios Fusion 应用程序（版本 2024R1.2 和 2024R2）存在一个高危安全漏洞：即使在启用双因素认证（2FA）后，现有会话仍然保持有效。具体而言，当为管理员账户启用 2FA 时，应用程序未能失效所有在启用 2FA 之前建立的活跃会话。这使得能够访问旧会话的攻击者或未授权用户能够绕过 2FA 机制，执行未授权操作。 观察到以下问题： 会话持久化：启用 2FA 之前创建的会话仍然有效，无需额外的身份验证因素。 未授权权限提升：攻击者可利用这些旧会话，在无需 2FA 验证的情况下修改关键账户详情或执行管理操作。 此漏洞源于在启用 2FA...