CVE-2026-85058

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client-controlled Last Will message through publish2Subscribers without invoking the authorizator.canWrite check used by normal PUBLISH paths. When anonymous access is enabled and topic ACLs restrict...

CVE-2026-61550

Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2...

CVE-2026-1030

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data...

CVE-2026-11381

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution list structures...

CVE-2026-10747

IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow in protocol message processing before authentication...

CVE-2026-11381

IBM MQ is vulnerable to a heap-based buffer overflow (CWE-122) in the queue manager's message descriptor conversion when processing message distribution list structures . An authenticated network attacker can trigger a denial of service or potentially execute arbitrary code. IBM rates the severit...

CVE-2026-11381 IBM MQ for HPE NonStop is vulnerable to a denial of service issue

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution list structures...

EUVD-2026-83038

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution list structures...

EUVD-2026-83032

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths...

CVE-2026-10747

IBM MQ Appliance is vulnerable to a heap buffer overflow (CWE-122) in the queue manager's protocol message processing, exploitable before authentication over the network. An unauthenticated remote attacker with access to the listener port can trigger a denial of service or potentially achieve arb...

EUVD-2026-83138

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data...

CVE-2026-1030

CVE-2026-1030 affects IBM Common Licensing (Agent 9.0, 9.0.0.1, 9.0.0.2; ART 9.0, 9.0.0.1, 9.0.0.2), which generates error messages containing sensitive information about its environment, users, or associated data (CWE-209). The vulnerability requires low privileges and no user interaction, with ...

CVE-2021-30146

CVE-2021-30146 Seafile 7.0.5 存储型XSS Suggested description: 应用程序（服务器版本：7.0.5 Seafile）存在通过共享库功能导致的存储型XSS漏洞。 Additional Information: Seafile 是一个开源、自托管的文件同步与共享解决方案，具有高性能和高可靠性。 已向供应商发送了关于该漏洞的信函。 Discovered: Alexander Semenenko Proof of Concept:...

EUVD-2025-210933

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2026-8239

CVE-2026-8239 CVE-2026-8239 是一个不安全的直接对象引用（IDOR）漏洞，影响 Concrete CMS 9.5.0 及更早版本。该漏洞存在于 /ccm/frontend/conversations/getrating 端点中，攻击者通过提供任意消息 ID，即可判断会话消息是否存在并获取其评分。该端点在返回所请求的信息之前未能执行适当的授权检查。 受影响软件 产品：Concrete CMS 受影响版本：9.5.0 及更早版本 修复版本：9.5.1 端点：/ccm/frontend/conversations/getrating 漏洞类型...

kcatcher

捕捉潜藏在你的 Kafka 集群中的一切。 简介 Kcatcher 是一款用于枚举和评估 Kafka 集群配置的命令行工具。它可以连接 Apache Kafka 集群，检索有关 broker、主题、ACL 甚至消息样本的详细信息。非常适合安全审计、基础设施评估，或只是想了解 Kafka 环境中运行了什么。 演示 安装 Go 如果你有一个可用的 Go 环境，可以通过以下命令安装： root@kitploit: go install github.com/RoseSecurity/kcatcher@latest Apt 要安装软件包，你可以自动快速设置仓库： root@kitploit:...

CVE-2023-3897

CVE-2023-3897 通过绕过CAPTCHA，在Windows部署的本地SureMDM解决方案中可以实现用户名枚举，攻击者可以通过错误消息枚举本地用户信息。 该问题影响SureMDM本地版：6.31及以下版本 https://nvd.nist.gov/vuln/detail/CVE-2023-3897 https://www.42gears.com/trust-center/information-security/security-advisories/42g-2023-003/ https://www.exploit-db.com/exploits/51804...

CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC 针对通过 CheckPoint SNX VPN Linux 客户端进行特权文件读取的概念验证（PoC）。 受影响版本 CheckPointVPNSNXLinux800007075.sh MD5 校验和：4372e9936e2dfb1d1ebcef3ed4dd7787 漏洞利用 要利用此漏洞，只需使用 -f 参数将任意文件作为 SNX 配置加载。如果该文件不是有效的 SNX 配置，程序将抛出错误并显示语法错误，从而泄露文件内容，直到找到字符串终止符（例如 etc/shadow）： root@kitploit: $...

POC-CVE-2018-4327-and-CVE-2018-4330

brokentooth CVE-2018-4327 の POC（少なくともそうだと思います。CVE-2018-4327 と CVE-2018-4330 は両方とも @SparkZheng によって記述されましたが、どちらがどのバグに関連するかは書かれていません。彼が最初にこれを説明したので、推測しています）。 iPhone 6S 11.3.1 でテスト済み 11.4 までは動作するはず SpringBoard およびいくつかのサービス上で、PC（ARM における IP レジスタ相当）を好きな値に設定できます。 コードを実行し、設定の BT...

brokentooth

brokentooth 针对 CVE-2018-4327 的概念验证（至少我认为是，因为 CVE-2018-4327 和 CVE-2018-4330 都由 @SparkZheng 讨论过，但他没有明确说明哪个漏洞对应哪个 bug，鉴于他先描述了前者，我暂且这样猜测）。 已在 iPhone 6S 11.3.1 上测试 理论上适用于 11.4 及之前的版本 允许你在 SpringBoard 及部分服务中将 PC（ARM 上对应 IP 寄存器的版本）设置为你选择的值。你需要先运行代码，然后进入蓝牙设置并连接到一个设备。如果无效，请关闭蓝牙再重新打开。...