AAMVA-PDF417-Vulnerability-Research

Исследование уязвимости валидации PDF417 ID Обзор Этот репозиторий содержит всестороннее исследование безопасности, документирующее критические уязвимости в системах валидации штрихкодов PDF417 по стандарту AAMVA, затрагивающие государственные удостоверения, корпоративные решения и потребительски...

CVE-2026-73320

CVE-2026-73320: Unauthenticated unfurl result disclosure XenForo before 2.3.13 exposes pending rich-link previews through an unauthenticated endpoint keyed by predictable integer IDs. What happens unfurl.php accepts a POST containing global UnfurlResult IDs, loads those rows, and returns rendered...

nanoid-noninteger-size-poc

nanoid: predictable IDs for non-integer size 5.1.8 - 5.1.16...

wazuh-home-soc

Домашний SOC: Лаборатория обнаружения угроз с Wazuh + Suricata Самодельная лаборатория Security Operations Center, созданная для обнаружения реальных техник атак на умышленно уязвимую цель, с использованием Wazuh в качестве SIEM и Suricata в качестве сетевого IDS-сенсора. Построено для демонстрац...

ActiveMQ_CVE-2023-46604

ActiveMQCVE-2023-46604 Реализация на Python для быстрой конструкции пакетов данных и одновременной отправки; имеются реализации двух классов гаджетов: org.springframework.context.support.FileSystemXmlApplicationContext и org.springframework.context.support.ClassPathXmlApplicationContext...

activemq-ids-ips-lab

IDS/IPSラボ - Apache ActiveMQをRCE攻撃から保護する このプロジェクトは、管理されたラボ環境において、IDSおよびIPSメカニズムがApache ActiveMQの脆弱性CVE-2023-46604の悪用をどのように検出・防止できるかを評価します。 プロジェクト概要 ラボは、攻撃者、ゲートウェイ、被害者のシステムを分離して設計され、現実的な攻防ワークフローをシミュレートしています。プロジェクトには、脆弱性の発見、手動検証、悪用、緩和が含まれます。 私の作業 ラボ環境の構築とテスト GVMとNmapを使用したターゲットのスキャン...

CVE-2024-2887-REPORT

SSD Advisory – Удалённое выполнение кода в Google Chrome Источник: ssd-disclosure.com/ssd-advisory-google-chrome-rce Краткое описание Критическая уязвимость удалённого выполнения кода в Google Chrome версии 123 и ранее, затрагивающая обработку типов сборщика мусора WebAssembly WASM. Ошибка вызыва...

Socket.IO: Prototype Pollution via Unsafe Client Session Lookup

Impact This is a prototype pollution / improper client lookup vulnerability in @socket.io/cluster-engine. Servers using @socket.io/cluster-engine may be impacted when attacker-controlled session IDs are processed in clustered deployments. A malicious client could use special property names such a...

CVE-2026-105684 Penpot: Share-link page-scope escape — comment RPCs leak comment content, author identity, and all page-ids for pages outside the share scope

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-comment-threads, get-comment-thread, and get-comments RPC commands use check-comment-permissions! but do not apply the share link's pages restriction. A holder of a page-scoped share link can retrieve comment threa...

CVE-2026-105684 Penpot: Share-link page-scope escape — comment RPCs leak comment content, author identity, and all page-ids for pages outside the share scope

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-comment-threads, get-comment-thread, and get-comments RPC commands use check-comment-permissions! but do not apply the share link's pages restriction. A holder of a page-scoped share link can retrieve comment threa...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Squashfs: fixed the handling and sanity checking of the xattrids count A Sysbot 1 that corrupted the filesystem exposed two flaws in the handling and sanity checking of the xattrids count in the filesystem. Both of these flaws...

Astra Linux – Vulnerability in Thunderbird

Thunderbird did not check whether the user ID associated with an OpenPGP key has a valid self-signature. An attacker may create a forged version of an OpenPGP key, either by replacing the original user ID or by adding another user ID. If Thunderbird imports and accepts the forged key, the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ICE: xsk: prohibit usage of non-balanced queue ID Fix the following scenario: 1. ethtool -L $IFACE rx 8 tx 96 2. xdpsock -q 10 -t -z The above refers to a situation where a user wants to attach an XSK socket in txonly mode at a...

CVE-2026-104967: Authorization Bypass Through User-Controlled Key

Plane is an open-source project management tool. Prior to 1.4.0, BulkDeleteIssuesEndpoint and SubIssuesEndpoint in apps/api/plane/app/views/issue/ accept body- or URL-supplied issue IDs and operate on them without checking that the IDs belong to the caller's workspace and project. The permission...

Deep Defence on Wheels: A Dual Intrusion Detection System Architecture for Comprehensive In-Vehicle Network Security

Increasing connectivity to the outside world and the lack of inbuilt security mechanisms have made legacy intra-vehicular networks vulnerable to cyberattacks. Initial research focused on maximising detection accuracy for known and unknown attacks, often using large, full-precision machine learnin...

log4shell-coraza

Log4Shell Security Lab — nginx + Coraza WAF 교육/방어 목적 : 이 랩은 의도적으로 취약한 앱Log4j 2.14.1과 JNDI 익스플로잇 키트 세트를 포함하며, 격리된 환경에서 Log4Shell을 탐지하고 차단하는 방법을 학습하기 위한 용도로만 사용됩니다. 인터넷에 배포하지 말고, 소유하지 않은 시스템을 공격하는 데 사용하지 마십시오. Log4ShellCVE-2021-44228 방어 실습 랩으로, Coraza WAF동적 모듈 + OWASP CRS v4 + 사용자 정의 JNDI 규칙 세트가 통합...

CVE-2026-105205

SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink block IDs and reference counts from password-protected and publish-disabled documents by querying a published document. Attackers can send POST requests to /api/block/getDocInfo...

CVE-2026-105205 SiYuan before 3.8.5 Information Disclosure via /api/block/getDocInfo and getDocsInfo

SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink block IDs and reference counts from password-protected and publish-disabled documents by querying a published document. Attackers can send POST requests to /api/block/getDocInfo...

CVE-2026-105205

The SiYuan note-taking application (versions prior to 3.8.5 ) is vulnerable to an information disclosure vulnerability. An attacker can bypass the publish confidentiality boundary by sending POST requests to the /api/block/getDocInfo or getDocsInfo endpoints for a published document. This allows ...

CVE-2026-105205 SiYuan before 3.8.5 Information Disclosure via /api/block/getDocInfo and getDocsInfo

SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink block IDs and reference counts from password-protected and publish-disabled documents by querying a published document. Attackers can send POST requests to /api/block/getDocInfo...