shiro-cve-2020-17523

Apache Shiro 二つの方法による認証バイパス分析（CVE-2020-17523） 0x01 脆弱性の説明 Apache Shiroは強力で使いやすいJavaセキュリティフレームワークであり、認証、認可、パスワード、セッション管理を実行します。Shiroの理解しやすいAPIを使用すると、最小のモバイルアプリケーションから最大のネットワークおよびエンタープライズアプリケーションまで、あらゆるアプリケーションを迅速かつ簡単に利用できます。...

CVE-2022-22978-demo

CVE-2022-22978-demo CVE-2022-22978漏洞示例代码 利用条件 虽然定为高危，但是利用条件还是比较苛刻的，个人感觉这个漏洞比较鸡肋。 1. 首先肯定是spring-security在漏洞影响范围内 2. 其次需要使用spring-security的正则匹配器regexMatchers或者直接使用RegexRequestMatcher，并且使用了. 匹配路径，类似这样： regexMatcher"/api/." // 允许/api下的所有子路径 regexMatcher"/files/.\.jpg" // 匹配所有.jpg结尾的文件请求...

CVE-2026-47215

SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string matching in the singularity.conf limit container paths directive allows a container in a sibling directory such as /data/safe-but-unsafe to...

EUVD-2026-78779

SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string matching in the singularity.conf limit container paths directive allows a container in a sibling directory such as /data/safe-but-unsafe to...

CVE-2026-47215 Singularity: Incorrect path matching for 'limit container paths' directive

SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string matching in the singularity.conf limit container paths directive allows a container in a sibling directory such as /data/safe-but-unsafe to...

CVE-2026-47215

SingularityCE and SingularityPRO are open-source container platforms affected by an incorrect path-string matching flaw in the limit container paths directive of singularity.conf. Under setuid mode , a container in a sibling directory (e.g., /data/safe-but-unsafe) can be executed when only /data/...

CVE-2026-49869

Kestra CVE-2026-49869 / CVE-2026-53576 扫描器 扫描 Kestra 实例中 endsWith"/configs" 认证过滤器绕过漏洞。Kestra 的 AuthenticationFilter.java 使用 request.getPath.endsWith"/configs" 进行检查，而非匹配精确路径 /api/v1/configs。由于 Kestra 通过调用者选择的路径段（命名空间、流程ID）来寻址资源，任何以 /configs 结尾的路径都会绕过 Basic-Auth 认证，从而允许未认证的流程创建和远程代码执行（RCE）。CVSS 10....

CVE-2024-38475

CVE-2024-38475 利用CVE-2024-38475（modrewrite漏洞与文件系统路径匹配） 此仓库包含一个用于测试Web服务器漏洞的Python脚本，专门针对Apache服务器。该脚本使用目录和文件的词表检查潜在问题（modrewrite漏洞与文件系统路径匹配），并通过各种载荷暴露源码。 使用方法： 使用以下命令运行脚本： root@kitploit: python3 script.py --webroots webroots.txt --url 127.0.0.1 --schema http --directorywordlist...

CVE-2026-14978

A flaw was found in go-slug. A local attacker could bypass .terraformignore exclusions, leading to sensitive files being included in Terraform slug uploads. This is caused by improper handling of Unicode normalization during path matching. Mitigation Upgrade to go-slug 0.18.3 or later. Where an...

GHSA-4MVJ-M6J5-PMF7 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

Astra Linux – Vulnerability in Apache2

Apache HTTP Server versions 2.4.39 to 2.4.46: unexpected matching behavior with "MergeSlashes OFF"...

EUVD-2026-63911

The Passster WordPress plugin before 4.3.9 does not correctly match its own public endpoint paths when deciding which REST API requests may bypass global password protection, comparing them as an unanchored substring of the request URI rather than against the resolved route, allowing an...

CVE-2026-14978

HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...

CVE-2026-14978

HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...

CVE-2026-14978

go-slug v0.4.0-v0.18.2 mishandles Unicode normalization during .terraformignore matching (CWE-176), allowing files differing only by normalization form to bypass exclusions and be uploaded to Terraform Cloud/Enterprise, exposing sensitive local files. Fixed in v0.18.3; no workaround provided. Exp...

EUVD-2026-63099

HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...

PT-2026-78711

HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...

CVE-2026-49473

@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. Versions prior to 0.3.0 have an issu...

CVE-2026-49473 @cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation

@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. Versions prior to 0.3.0 have an issu...

CVE-2026-15573

Keycloak has a vulnerability in its Authorization Services where the PathMatcher does not normalize URIs before policy comparison. The issue allows an authenticated user to bypass intended restrictions by adding characters such as a trailing slash or matrix parameters to a URL, causing the system...