See-SURF

See-SURF Security scanner now powered with AI 🤖 to find potential Server Side Request Forgery SSRF parameters in your web application. See-SURF not only helps you detect potential SSRF parameters but also helps you validate it, protecting your application with system and user data compromise. 🎓...

CVE-2023-33246-mitigation

CVE-2023-33246-mitigation 이 프로젝트는 Apache RocketMQ의 취약점인 CVE-2023-33246을 완화하는 Maven 기반 데모입니다. 프로젝트 구조 org/example/Main.java: 메인 프로그램 파일입니다. org/apache/rocketmq/common/BrokerConfig.java: 공식 RocketMQ 4.9.5 소스 코드의 수정된 버전입니다. 주요 기능 1. 공격 테스트 : Main.java의 updateConfig 메서드는 공격 테스트 목적으로 사용됩니다. 2. 향상된 검증 ...

roundcube-cve-2025-49113-lab

"DISCLAIMER: Educational Use Only" Roundcube Webmail RCE – CVE-2025-49113 Lab This repository documents my step-by-step exploitation of Roundcube Webmail CVE-2025-49113 in a controlled lab to obtain the secret stored in /secret.txt. ⚠️ Disclaimer All work was performed against a lab / training...

CVE-2026-3855

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with project-level permissions to access restricted file contents on the server or cau...

CVE-2026-3855

GitLab CE/EE versions 18.2.7 before 19.1.8 , 19.2 before 19.2.6 , and 19.3 before 19.3.2 are vulnerable to an issue in the Terraform state upload functionality . Due to improper validation of parameters, an authenticated user with project-level permissions could, under certain conditions, access ...

CVE-2026-3855 Improper Control of Resource Identifiers ('Resource Injection') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with project-level permissions to access restricted file contents on the server or cau...

EUVD-2026-80121

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with project-level permissions to access restricted file contents on the server or cau...

PT-2026-93325

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.2.7 through 19.1.7 GitLab CE/EE versions 19.2 through 19.2.5 GitLab CE/EE versions 19.3 through 19.3.1 Description An issue exists where an authenticated user with project-level permissions can access restricted file...

CVE-2026-91751 Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST API

Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and newid parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests to escape the project entries director...

CVE-2026-91751 Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST API

Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and newid parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests to escape the project entries director...

EUVD-2026-78233

Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and newid parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests to escape the project entries director...

CVE-2026-91751 Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST API

Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and newid parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests to escape the project entries director...

PT-2026-91772

Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and new id parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests to escape the project entries directo...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobusgetPhy The caller may pass any value as addr, which could lead to an out-of-bounds access to the mdiomap array. One existing case is in stmmacinitPhy, where -1 may be passed as addr...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/damon/lrusort: A divide-by-zero error was avoided in damonlrusortapplyparameters. The patch series “mm/damon: Avoid divide-by-zero in DAMON module’s parameter application”. The RECLAIM and LRUSORT modules of DAMON do not perfo...

Astra Linux – Vulnerability in Zabbix

There is a vulnerability related to arbitrary file reading in the Zabbix Web Service Report Generation module, which listens on port 10053. The service does not perform proper validation on URL parameters before reading the files...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdgpu: The parameters of bo mapping operations need to be clarified. The parameters of amdgpuvmbomap/replacemap/clearingmappings should be verified in a single common place...

Starlette-Admin's unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS

SummaryAffected versions of Starlette-Admin prior to 0.16.1 do not properly validate user-supplied sort and search parameters against the configured field allowlists. While the administrative UI restricts available fields based on field configuration, the backend accepts arbitrary field names...

PT-2026-87165

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description A security issue in the aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks. This occurs when Atlas Search feature...

CVE-2026-18221

IBM i versions 7.3 through 7.6 are vulnerable to improper authentication (CWE-287) in Distributed Data Management (DDM) / Distributed Relational Database Architecture (DRDA) . A remote attacker with no privileges or user interaction can gain unauthorized access by supplying crafted authentication...