CVE-2026-19954

The Net::Whois::Raw library for Perl (versions before 2.99044 ) contains a flaw in its pwhois command-line tool. The tool fails to correctly query WHOIS for unicode domain names because it skips essential IDNA mapping and normalization steps, directly using Net::IDN::Punycode . This results in in...

CVE-2017-16082

CVE-2017-16082 概述 受影响版本的 pg 存在一个远程代码执行漏洞，当远程数据库或查询指定了精心构造的列名时触发。 以下两种场景下应用程序容易受到攻击： 1. 应用程序执行不安全的、用户提供的 SQL，其中包含恶意的列名。 2. 应用程序连接到不受信任的数据库并执行查询，返回的结果包含恶意的列名。 概念验证 const Client = require'pg' const client = new Client client.connect const sql = SELECT 1 AS "\'/", 2 AS "\'/\n + console.logprocess.env...

Gitea-template-sync-Path-Traversal-Privilege-Escalation-CVE-2026-38526-

Nexus — 本地权限提升 PoC 通过伪造 Git 对象实现 Gitea 模板同步路径遍历 → root 针对 HackTheBox 机器 Nexus 的概念验证权限提升漏洞利用。 一个由 root 拥有的 systemd 服务将 Gitea 模板 仓库同步到磁盘时 未对条目名称进行清理，允许已认证的低权限用户 通过目录遍历以 root 身份写入任意文件——此处用于将 SSH 密钥 植入 /root/.ssh/authorizedkeys。 ⚠️ 免责声明 此代码仅供教育目的和授权安全测试 使用 ——即 HackTheBox 等实验环境，或您拥有或已获得...

CVE-2026-104968: Missing Authorization

Plane is an open-source project management tool. Prior to 1.4.0, GET /api/workspaces/slug/entity-search/?querytype=usermention returns workspace-member display names, UUIDs, and avatar URLs to any authenticated user who knows the workspace slug, even when the caller is not a workspace member. The...

Linux Distros Unpatched Vulnerability : CVE-2026-19954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encode...

PT-2026-104738

Name of the Vulnerable Software and Affected Versions Net::Whois::Raw versions prior to 2.99044 Description The pwhois command-line tool queries the incorrect domain when processing Unicode domain names. This occurs because the tool encodes non-ASCII labels using Net::IDN::Punycode and prepends...

atlas-tj-actions-poc

CVE-2025-54416: tj-actions/branch-names 命令注入 PoC 该仓库演示了 CVE-2025-54416 ，这是 tj-actions/branch-names 中的一个严重命令注入漏洞，影响超过 5000 个公共仓库。 漏洞 tj-actions/branch-names GitHub Action（版本 "$GITHUBOUTPUT" 攻击链 1. 攻击者创建一个包含恶意命令的分支名称 2. 受害者工作流使用 tj-actions/[email protected] 提取分支名称 3. 提取的分支名称（含攻击者载荷）被用于后续的 shel...

SharpWnfSuite

SharpWnfSuite 这是 Windows 通知设施（WNF）工具的仓库。 目前，已上传了 Alex Ionescu（@aionescu）和 Gabrielle Viala（@pwissenlit）所开发的 wnfun 中工具的 C 移植版本。 当我为 Windows 通知设施开发更多工具时，它们将被上传到这里。 目录 SharpWnfSuite 用法 SharpWnfDump SharpWnfNameDumper SharpWnfClient SharpWnfServer SharpWnfScan SharpWnfInject KernelPrimitive...

gimphash

gimphash gimphash 是一种为 Go 二进制文件计算等效 imphash 的方法。其名称代表 G o-imp ort-hash 。 Golang 二进制文件会将依赖项作为可执行文件的一部分包含在内。这些依赖项既包括标准库包，也包括第三方依赖，可以像经典的 imphash 一样用于识别 Golang 项目。 依赖项可以通过每个 Golang 二进制文件自带的 pclntab 列出（另请参阅 Mandiant 的这篇博客文章）。pclntab 包含许多对逆向工程有价值的元素；对于 gimphash，我们将使用其中包含的函数名称。 计算 1. 在 Golang 二进制文件中定位...

CVE-2026-92536

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.17.4 via the getuserprofilestructure. This makes it possible for...

EUVD-2026-91777

A flaw was found in Dogtag PKI pki-core. The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth without an end-user TLS client certificate. The SSLCLIENTCERT session attribute retains the EST subsystem's agent certificate, which causes...

Linux Distros Unpatched Vulnerability : CVE-2026-59685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache...

ALPINE-CVE-2026-59685

Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

AZL-106488 CVE-2026-59685 affecting package httpd 2.4.68-1

Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-59685

Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-59685

Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

UBUNTU-CVE-2026-59685

Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

Home Assistant: XSS in Statistics Graph Card

SummaryAn authenticated party can add a malicious name to any statistics-capable entity, allowing forCross-Site Scripting attacks against anyone who views a Statistics Graph card containing thatentity, when they hover over any data point on the chart.PayloadPayload triggeringAn alternative, and...

CVE-2026-59685 Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM

Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-59685

Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...