CVE-2026-90448

A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting which request methods are allowed. One such route accepts a request that creates or overwrites a stored record, including an attacker-chosen identifie...

CVE-2026-90454

A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list of write-capable routes by pattern, but the pattern omits routes that modify tags attached to stored session records, and the proxy configuration otherwise permits the request...

CVE-2026-90454

A read-only deployment mode for a product with a bundled packet-analysis component (per the CISA ICS-CERT advisory reference) uses a pattern-based deny list to block write-capable routes, but the pattern omits routes that modify tags on stored session records . Since the proxy otherwise permits t...

CVE-2026-90454

A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list of write-capable routes by pattern, but the pattern omits routes that modify tags attached to stored session records, and the proxy configuration otherwise permits the request...

CVE-2026-90448

A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting which request methods are allowed. One such route accepts a request that creates or overwrites a stored record, including an attacker-chosen identifie...

CVE-2026-90448

A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting which request methods are allowed. One such route accepts a request that creates or overwrites a stored record, including an attacker-chosen identifie...

CVE-2026-90448

CVE-2026-90448 affects a read-only deployment mode that proxies a set of API routes without restricting allowed request methods. One of these routes accepts a request that creates or overwrites a stored record with an attacker-chosen identifier, using the application's own elevated backend creden...

CVE-2026-49439 OpenRemote read-only asset users can write predicted datapoints

OpenRemote is an open-source internet-of-things platform. Prior to version 1.24.1, the predicted datapoint write endpoint allows users with only read:assets privileges to write predicted datapoints. Version 1.24.1 fixes the issue...

CVE-2026-49439 OpenRemote read-only asset users can write predicted datapoints

OpenRemote is an open-source internet-of-things platform. Prior to version 1.24.1, the predicted datapoint write endpoint allows users with only read:assets privileges to write predicted datapoints. Version 1.24.1 fixes the issue...

CVE-2026-49439

OpenRemote (open-source IoT platform) has a missing authorization flaw in its predicted datapoint write endpoint (PUT /api/{realm}/asset/predicted/{assetId}/{attributeName}). The implementation checks READ_ASSETS instead of requiring write:assets before calling assetPredictedDatapointService.upda...

ESCepcion

🛡️ ESCepcion Active Directory 证书服务审计器 ESCepcion 是一款开源（Open Source）工具，用于审计和评估 Active Directory Certificate Services AD CS 基础设施中的漏洞。它旨在自动化检测特权提升路径 ESC，并严格聚焦于减少企业及混合环境中的误报。 与其他工具不同，ESCepcion 不会利用、修改或写入 Active Directory 中的任何对象 。其所有操作完全基于通过 LDAP 进行的只读查询，以及通过 MS-RRP 进行的可选注册表读取（使用 --deep-scan 时）。 🆚...

EUVD-2026-76104

A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive...

wp2shell-compromise-scanner-plugin

wp2shell 入侵检测扫描器（只读） 一个独立的、只读 的 WordPress 插件，用于扫描您的数据库和插件目录，寻找 wp2shell 核心攻击链（CVE-2026-63030 + CVE-2026-60137）被利用的迹象——即使攻击发生在数周前或攻击者已经清理过。它不会对您的站点做任何更改。 在任何已安装或未打补丁的站点上运行都是安全的。 此插件不能 缓解该漏洞。要临时保护未打补丁的站点，请使用独立的 wp2shell 临时热补丁 （或直接更新核心）。真正的修复方案是更新至 6.9.5 / 7.0.2 / 6.8.6。 获取 下载： 最新版本 .zip WordPress...

sunsetscan

SunsetScan 面向人类的网络安全审计工具 — 基于 nmap 构建，人人可用。 网站：sunsetscan.com SunsetScan 是一款本地网络安全审计工具，专为家庭网络所有者与 IT 人员 设计，让你不必学习 nmap 语法就能享受其深层扫描能力。只需指向你的网络，它就能发现所有活跃设备、识别运行的软件指纹、对照已知漏洞数据库与生命周期终止记录进行核查、探测 Web 接口的常见弱点、可选地执行锁定安全型的出厂默认凭据审计，并生成一份包含通俗易懂的解释 与修复每项发现的分步编号说明的干净 HTML 报告。该工具完全只读且无破坏性 ——绝不会修改你网络上的任何内容。 平台支...

ncentral-compromise-ioc-triage

N-central Compromise IoC Triage Read-only defensive hunting toolkit for post-exploitation artifacts associated with N-able N-central authentication bypass vulnerabilities CVE-2026-18556 and CVE-2026-18577. The PowerShell endpoint scanner flags indicators published by N-able and Huntress; it never...

Mandiant-Azure-AD-Investigator

Mandiant Azure AD Investigator UNC2452 の TTP に焦点を当てる 概要 このリポジトリには、UNC2452 およびその他の脅威アクターの活動の指標となる可能性があるアーティファクトを検出するための PowerShell モジュールが含まれています。一部の指標は「高精度」の侵害指標ですが、その他のアーティファクトはいわゆる「デュアルユース」アーティファクトです。デュアルユースアーティファクトは脅威アクターの活動に関連している可能性もありますが、正当な機能に関連している可能性もあります。これらについては分析と検証が必要です。UNC2452...

PT-2026-90516

A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting which request methods are allowed. One such route accepts a request that creates or overwrites a stored record, including an attacker-chosen identifie...

PT-2026-90523

A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list of write-capable routes by pattern, but the pattern omits routes that modify tags attached to stored session records, and the proxy configuration otherwise permits the request...

PT-2026-90543

Summary Five Filament groupedBulkActions blocks across the Shopper admin Livewire pages omit the -authorize... permission gate, while their per-record sibling actions and other Shopper Index pages such as Pages/Settings/Currencies.php, Pages/Reviews/Index.php, Pages/Collection/Index.php, and...

dirtycow.cr

dirtycow CVE-2016-5195 漏洞利用 安装 前往发布页面或使用你的 Crystal 环境。 用法 root@kitploit: dirtycow --target /path/to/root/file --string "string to write" --offset...