CVE-2025-62168

CVE-2025-62168 — Squid Proxy トークン漏えい PoC 作者は、このツールの誤用または損害について一切の責任を負いません。 この研究は、教育および防御目的に限定して提供されます。 説明 このリポジトリには、Squid Proxy に影響する情報漏えいの欠陥である CVE-2025-62168 の Proof-of-Concept PoC が含まれています。 特定の構成では、Squid は自動生成される エラーページ 内、特に mailto: 診断ブロック内に HTTP リクエストヘッダー を反映させる可能性があります。...

CVE-2022-24853

CVE-2022-24853 Metabase NTLM リフレクション / リレー攻撃 CVE-2022-24853 発見に関するブログ記事: https://secure77.de/metabase-ntlm-relay-attack/ Github セキュリティアドバイザリ: https://github.com/metabase/metabase/security/advisories/GHSA-5cfq-582c-c38m POC http://metabase-target-server.com/api/geojson?url=jar:file:\test.txt!/...

CVE-2025-34291_cors_security_scanner

CVE-2025-34291corssecurityscanner 軽量なPythonベースのセキュリティ評価ツール。危険なクロスオリジンリソース共有（CORS）の誤構成を検出します。CVE-2025-34291に対応。 CORS セキュリティスキャナ 危険なクロスオリジンリソース共有（CORS）の誤構成を検出するための軽量なPythonベースのセキュリティ評価ツールです。 このツールは以下を特定するのに役立ちます: - ワイルドカードCORSポリシー（） - 任意のオリジンのリフレクション - 認証情報付きCORSの誤構成 - 危険なプリフライト（OPTIONS）動作 - SameSi...

CVE-2024-27348-HugeGraph-RCE

CVE-2024-27348: Apache HugeGraph RCE（高度なサンドボックス回避） CVE-2024-27348 （Apache HugeGraph Server におけるリモートコード実行）のための高度で信頼性の高い Proof of Concept（PoC）エクスプロイトです。 公開されている多くの PoC はコマンドを盲目的に実行したり、Java の Runtime.exec の制限により複雑なペイロードで失敗したりしますが、本スクリプトは実際のペネトレーションテストシナリオにおける信頼性 を考慮して設計されています。 ⚠️ 免責事項...

CLEANSTART-2026-WS21723 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite

CVE-2026-46718 affects multiple packages. Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Calcite. See references for individual vulnerability details...

DEBIAN-CVE-2026-92415

— Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client. A malicious WebDAV/DavEx server, or an attacker able to intercept the connection, can cause the client to instantiate arbitrary classes from its classpath, which can lead to...

CVE-2026-92415

— Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client. A malicious WebDAV/DavEx server, or an attacker able to intercept the connection, can cause the client to instantiate arbitrary classes from its classpath, which can lead to...

CVE-2026-92415

The Apache Jackrabbit WebDAV/DavEx client is vulnerable to unsafe reflection when interacting with a malicious WebDAV/DavEx server or an intercepted connection. The root cause is that the client runs Class.forName and a (String)-constructor on server-controlled error bodies, allowing an attacker ...

CVE-2026-92415 Apache Jackrabbit: DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies

— Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client. A malicious WebDAV/DavEx server, or an attacker able to intercept the connection, can cause the client to instantiate arbitrary classes from its classpath, which can lead to...

EUVD-2026-94407

— Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client. A malicious WebDAV/DavEx server, or an attacker able to intercept the connection, can cause the client to instantiate arbitrary classes from its classpath, which can lead to...

CVE-2026-92415 Apache Jackrabbit: DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies

— Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client. A malicious WebDAV/DavEx server, or an attacker able to intercept the connection, can cause the client to instantiate arbitrary classes from its classpath, which can lead to...

CVE-2026-92415

— Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client. A malicious WebDAV/DavEx server, or an attacker able to intercept the connection, can cause the client to instantiate arbitrary classes from its classpath, which can lead to...

PT-2026-107580

Name of the Vulnerable Software and Affected Versions Apache Jackrabbit versions 2.23.0 through 2.23.5 Apache Jackrabbit versions 2.22.0 through 2.22.4 Apache Jackrabbit versions 2.20.0 through 2.20.17 Description The WebDAV/DavEx client contains a flaw where it uses externally-controlled input t...

CVE-2025-33073

CVE-2025-33073 — Windows SMB 客户端 NTLM 反射权限提升 由 Sentinel AI Defense 撰写的研究报告。仅限防御性分析——此处不发布任何可用的利用代码或 PoC。 Windows SMB 客户端中存在一个不当的访问控制缺陷，它使原本被认为已缓解的 NTLM 反射技术重新复活——攻击者可借此诱使主机将高权限身份验证上下文反射回自身，并提升至 NT AUTHORITY\SYSTEM 权限。 📄 完整报告：https://sentinelaidefense.com/posts/cve-2025-33073-smb-reflection.html 概...

ntpdos

ntpdos 分散型NTPリフレクションDoS CVE-2013-5211 のPoC。 使用方法 $ ./ntpdos -H --== ntpdos by sepehrdad ==-- usage: ntpdos -t -s options | misc options: -t - target ip address -T - list of target ip addresses -s - ntp server ip address -S - list of ntp server ip addresses -p - number of parallel processes defaul...

HPE-Aruba-AOS8-Vulnerabilities

⚠️ 披露状态： 本仓库中的所有发现已于 2026 年 5 月至 6 月期间 提交至 HPE Networking 漏洞赏金计划（Bugcrowd）。六份提交中有五份 在分类（triage）阶段被标记为“不适用（Not Applicable）”关闭， 且未对提交的证据进行技术性核对。 截至 2026 年 6 月，未发布任何修复。 完整报告来源 https://netacoding.com/posts/ghost-leak/ https://netacoding.com/posts/smurf-reflection/ https://netacoding.com/posts/xxe-ssrf...

CVE-2026-105064

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Parameter Injection.This issue affects Unlimited Elements For Elementor Fre...

CVE-2026-105064 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Parameter Injection.This issue affects Unlimited Elements For Elementor Fre...

CVE-2026-105064 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Parameter Injection.This issue affects Unlimited Elements For Elementor Fre...

CVE-2026-105064

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin is vulnerable to Parameter Injection due to a Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability (CWE-470). This flaw impacts versions up to and including 2.0.22 ....