CVE-2026-60004-POC

CVE-2026-60004 — Gitea 인증 전 원격 코드 실행 CVSS 9.8 root@kitploit: ┌──────────────────────────────────────────────────────────────┐ │ CVE-2026-60004 │ Gitea Pre-Auth RCE │ CVSS 9.8 CRIT │ │ diffpatch → git hook injection │ v1.17–1.27.0 affected │...

PRISM-AP

PRISM-AP ОПИСАНИЕ: PRISM-AP — это автоматизированная платформа для проведения MITM-атак через RogueAP в беспроводных сетях. ВОЗМОЖНОСТИ: Простая настройка и использование, полная автоматизация Использует MANA Wi-Fi атаку для привлечения клиентских подключений Частичный обход HSTS с помощью...

CVE-2026-60004-poc-gitea

CVE-2026-60004 개념 증명 PoC 개요 이 저장소에는 diffpatch 후크 삽입 기법을 통해 특정 Gitea 버전에 영향을 미치는 인증 또는 사전 인증 원격 코드 실행RCE 벡터인 CVE-2026-60004에 대한 개념 증명 도구가 포함되어 있습니다. 주요 구현은 탐지 및 악용 흐름을 수행하는 단일 Go 프로그램입니다. 저장소 구성 https://github.com/gagaltotal/CVE-2026-60004-poc-gitea — 탐지, 악용 전달 및 선택적 출력 검색을 구현하는 주요 Go 소스 파일입니다...

InjectProc

InjectProc Внедрение процессов — это очень популярный метод сокрытия вредоносного поведения кода, широко используемый авторами вредоносных программ. Существует несколько распространённых техник: Внедрение DLL, замена процесса также известная как process hollowing, внедрение через хуки и внедрение...

MemITM

Что такое инструмент MemITM? Инструмент MemITM Mem In The Middle был разработан для удобного перехвата «сообщений» в памяти процессов Windows. Мы разработали множество пользовательских инструментов перехвата памяти для захвата сетевых сообщений до шифрования или IPC-сообщений, а также для их...

EUVD-2024-55751

The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via several functions in the /includes/blocks/form-wrap/function.php file. This makes it possible for unauthenticated attackers to execute actions with...

CVE-2024-11080

CVE-2024-11080 affects the Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress (versions 2.2.32 to 2.3.1 per the description, or 2.2.85–2.3.32 per the title). The vulnerability is an Unauthenticated Hook Injection via several functions in the ~/includes/blocks/form-wrap/function.php...

PT-2026-86366

Name of the Vulnerable Software and Affected Versions ComboBlocks versions 2.2.32 through 2.3.1 Description The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress contains an Unauthenticated Hook Injection flaw. This issue occurs through several functions within the...

agentic-ioc-scanner

agentic-ioc-scanner Сканер IOC для агентных инструментов ИИ-кодирования — обнаруживает Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268 и DPRK PromptMink. Набор для обнаружения компрометации агентных помощников ИИ-кодирования Claude Code, Gemini CLI, Cursor и зависимостей, которые они...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-60004

CVE-2026-60004 — Gitea Diffpatch Git Hook RCE Bare Clone 훅 주입 → post-index-change → 임의 명령 실행 개요 CVE-2026-60004 는 Gitea 및 Forgejo 자체 호스팅 Git 플랫폼의 버전 1.17부터 1.27.0까지 영향을 주는 치명적 심각도CVSS 9.8의 사전 인증pre-authentication 원격 코드 실행 취약점입니다. 이 취약점은 POST /api/v1/repos/owner/repo/diffpatch API 엔드포인트의 bare 클론 설계...

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. The vulnerability in question is CVE-2026-60004 CVSS score: 9.8, a case of remote code execution that allows an...

DEBIAN-CVE-2026-78676

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live git directives after any unrelated...

EUVD-2026-65222

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live git directives after any unrelated...

PT-2026-71451

Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.1.54 Description An incomplete denylist in unsafe git clone options omits the --template option, which allows for arbitrary command execution during clone operations. An attacker can provide a --template value...

Linux Distros Unpatched Vulnerability : CVE-2026-44244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.setvalue passes values to Python's configparser...

CVE-2026-35585

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.0.0 through 2.63.1, the hook system in File Browser — which executes administrator-defined shell commands on file events such as upload, rename, and dele...

EUVD-2024-16650

Malicious code in bioql PyPI...

EUVD-2024-16649

Malicious code in bioql PyPI...

CVE-2024-0867

The Email Log plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and including, 2.4.8 via the checknonce function. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress under certain circumstances. The action the...