langflow-cors-scanner

CVE-2025-34291 — Langflow: проверка источника / CORS Обзор Чрезмерно разрешающая конфигурация CORS в сочетании с конфигурацией cookie для refresh-токена позволяет похищать учётные данные...

unhook-bof

This is a Beacon Object File to refresh DLLs and remove their hooks. The code is from Cylance's Universal Unhooking research: https://blogs.blackberry.com/en/2017/02/universal-unhooking-blinding-security-software To use: Load unhook.cna into Cobalt Strike via Cobalt Strike - Script Manager Run...

unhook-bof

Este é um Beacon Object File para atualizar as DLLs e remover seus hooks. O código é da pesquisa Universal Unhooking da Cylance: https://blogs.blackberry.com/en/2017/02/universal-unhooking-blinding-security-software Para usar: Carregue o unhook.cna no Cobalt Strike via Cobalt Strike - Script...

CVE-2026-39376

CVE-2026-39376 CVE-2026-39376 DoS da loop di reindirizzamento infinito tramite catena meta-refresh Riepilogo Quando parse recupera un URL che restituisce una pagina HTML contenente un tag , richiama ricorsivamente se stessa con l'URL di reindirizzamento — senza limite di profondità, senza...

jquery-cve-2022-31160

jQuery UI CVE-2022-31160 भेद्यता प्रदर्शन यह प्रोजेक्ट jQuery UI Checkboxradio विजेट भेद्यता CVE-2022-31160 का प्रदर्शन करता है, जो विजेट रिफ्रेश ऑपरेशन के दौरान HTML एंटिटी डिकोडिंग की अनुमति देता है, जो पोटेंशियली क्रॉस-साइट स्क्रिप्टिंग XSS हमलों का कारण बन सकता है। 🚨 सुरक्षा चेतावनी ⚠️ इस...

365-Stealer

365-Stealer Indice A proposito di 365-Stealer Informazioni sull'Attacco di Concessione del Consenso Illecito Caratteristiche principali di 365-Stealer Configurazione dell'ambiente di attacco Registrazione automatica dell'app Azure Registrazione manuale dell'app Azure Configurazione...

TokenTacticsV2

root@kitploit: / / / / / / / / | \ / / / / /// / \ / / / / / / / / | | / / / / / / / // / , / / / / / / // // / // // / / | |/ / / / // //||// // /,////// |/ TokenTactics v2 Questa è una versione aggiornata di TokenTactics originariamente scritta da Stephan Borosh @rvrsh3ll e Bobby Cooke...

CVE-2022-1388_refresh

CVE-2022-1388 - refresh PoC zur Ausnutzung von CVE-2022-1388 auf BigIP F5 Verwendung des Exploits root@kitploit: python3 refresh.py -h usage: refresh.py -h -u URL -f F -c CMD -s SH optional arguments: -h, --help show this help message and exit -u URL, --url URL target url -f F, --file F url file ...

TokenMan

Suite per token di accesso e refresh. Token Man è uno strumento per supportare attività di post-exploitation utilizzando token di accesso e/o refresh AAD. Indice Utilizzo Comandi Fetch Search Swap Mappa degli ID client applicazione FOCI AZ OAuth Usage root@kitploit: usage: tokenman.py -h...

CVE-2026-77384

libp2p is a JavaScript implementation of the libp2p networking stack. Prior to version 4.2.9, the reservation refresh path in reservation-store.ts reuses the same retimeableSignal but unconditionally registers another abort listener on every refresh. As a result, a remote peer can repeatedly send...

CVE-2026-75554

Insufficient Session Expiration vulnerability in the OAuth token refresh grant in hexpm hexpm allows a user removed from an organization to keep reading its private packages. expandrepositoriesscope/3 in lib/hexpm/permissions.ex only rewrites the literal repositories scope, so an explicitly grant...

CVE-2026-77384 libp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustion

libp2p is a JavaScript implementation of the libp2p networking stack. Prior to version 4.2.9, the reservation refresh path in reservation-store.ts reuses the same retimeableSignal but unconditionally registers another abort listener on every refresh. As a result, a remote peer can repeatedly send...

CVE-2026-75554

CVE-2026-75554 is an Insufficient Session Expiration vulnerability in the OAuth token refresh grant of hex.pm (the Hackage Package Manager). The root cause lies in expand_repositories_scope/3 in lib/hexpm/permissions.ex, which only rewrites the literal repositories scope. Explicitly granted repos...

CVE-2026-75554 Explicit organization scopes survive token refresh after membership ends

Insufficient Session Expiration vulnerability in the OAuth token refresh grant in hexpm hexpm allows a user removed from an organization to keep reading its private packages. expandrepositoriesscope/3 in lib/hexpm/permissions.ex only rewrites the literal repositories scope, so an explicitly grant...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: cifs: A use-after-free bug has been fixed in refreshcacheworker. The UAF bug occurred because we were putting DFS root sessions into cifsumount while the DFS cache refresher was executing. We have ensured that DFS root session...

cloudscraper

cloudscraper - Edizione Potenziata Potenziato daZied Boughdir Ultima versione: v3.0.0 🚀 - Aggiornamento principale 🆕 Nuove funzionalità principali in v3.0.0 🛡️ Recupero automatico dagli errori 403 - Aggiornamento intelligente della sessione quando si verificano errori 403 dopo un uso prolungato 📊...

PT-2026-81026

Name of the Vulnerable Software and Affected Versions hex.pm versions 2025-10-10 through 2026-08-23 Description An insufficient session expiration issue exists in the OAuth token refresh grant. The expand repositories scope/3 function in lib/hexpm/permissions.ex only rewrites the literal...

EUVD-2026-64545

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifstryaddingchannels cifstryaddingchannels takes a temporary reference to an interface before dropping ifacelock. If cifssesaddchannel fails, it drops that reference and then increments...

CVE-2026-74608

A use-after-free vulnerability exists in the Linux kernel SMB client within the cifs_try_adding_channels() function. The root cause is a race condition: when cifs_ses_add_channel() fails, the failure path drops a temporary reference to an interface and then increments iface->weight_fulfilled. ...

CVE-2026-74608 smb: client: Fix use-after-free in cifs_try_adding_channels()

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifstryaddingchannels cifstryaddingchannels takes a temporary reference to an interface before dropping ifacelock. If cifssesaddchannel fails, it drops that reference and then increments...