EUVD-2026-92818

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...

CVE-2026-105675

Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invites were able to discover the secret token of pending invites, including invites for roles with higher privileges than their own. This could allow a staff user to escalate their...

CVE-2026-105675 Ghost: Invite Token Disclosure in Ghost Admin API

Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invites were able to discover the secret token of pending invites, including invites for roles with higher privileges than their own. This could allow a staff user to escalate their...

dracon-utilities

이 저장소에는 README가 없습니다...

enseal

enseal 開発者向けの安全で一時的な秘密情報共有ツール。 Slackに秘密情報を貼り付けるのはやめましょう。enseal は安全な方法を不安全な方法よりも高速にします — 暗号化された使い捨てチャネルを通じて、.env ファイルや秘密情報をワンコマンド、セットアップ不要で共有できます。bash sender $ enseal share .env Share code: 7-guitarist-revenge Secrets: 14 variables staging Expires: on first receive recipient $ enseal receive...

CVE-2026-78122-POC

CVE-2026-78122 — 概念実証（PoC） Tecnativadocker-socket-proxy ≤ 0.5.0 — 不十分なアクセス制御の細粒度（CWE-1220） CVSS 4.0: 8.3（高） — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N 攻撃ベクトルは隣接 （AV:A）です。攻撃者はプロキシに対してローカル/隣接ネットワークから到達できる必要があります。これこそが、ルーティング可能なインターフェースに公開しないことが緩和策の一部である理由です。 docker-socket-pro...

gitlab-cve-2020-10977

GitLab CVE2020-10977 简介 该脚本可针对 GitLab 社区版（CE）和企业版（EE）实现远程代码执行。该 CVE 是一个任意文件读取漏洞，通过下载 GitLab 的 secrets.yaml 文件，可以提取 Rails 的 secretkeybase。进而，你可以通过签名 GitLab 内部用于 A/B 测试的 experimentationsubjectid cookie 来获得代码执行能力。cookie 中嵌入的 payload 包含一个反序列化漏洞，允许在 GitLab 实例上运行代码。 任意文件读取漏洞存在于 GitLab EE/CE 8.5...

CVE-2026-104960 Plane: Authorization bypass in workspace-scoped asset download endpoint exposes secret project file assets to non-project workspace users

Plane is an open-source project management tool. Prior to 1.4.0, Plane exposes the workspace-scoped GET /api/assets/v2/workspaces/workspaceslug/download/assetid/ endpoint for project-bound FileAsset objects without enforcing access to the asset's owning project. An authenticated user who belongs ...

CVE-2026-104960

The project management tool Plane contains an authorization bypass in the workspace-scoped GET /api/assets/v2/workspaces/{workspace_slug}/download/{asset_id}/ endpoint. Prior to version 1.4.0 , the application fails to enforce project-level access controls for project-bound FileAsset objects. Con...

CVE-2026-104960 Plane: Authorization bypass in workspace-scoped asset download endpoint exposes secret project file assets to non-project workspace users

Plane is an open-source project management tool. Prior to 1.4.0, Plane exposes the workspace-scoped GET /api/assets/v2/workspaces/workspaceslug/download/assetid/ endpoint for project-bound FileAsset objects without enforcing access to the asset's owning project. An authenticated user who belongs ...

Malicious code in css-yhpodl-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5936fc65b4eba7b461c0eef7b66dfeecdc2da412f54fd667873e3e6950b0a857 css-yhpodl-polyfill ships thunderboltRegistry.js which, as an IIFE executed on require, runs shell reconnaissance id, whoami, env, ifconfig/ip addr,...

recipe-blog-encoding

recipe-blog-encoding !WARNING 이 프로젝트는 전적으로 vibe-coding 으로 작성되었으며 아마도 이 저장소에서 부분적으로 표절되었습니다, 작성자는 아이디어가 재미있다고 생각한 바보입니다. SEO 게임 레시피 서문을 사용하여 비밀 메시지를 인코딩하는 도구입니다 사실 프롬프트는 무엇이든 될 수 있으며, 공유 프롬프트는 인코더와 디코더가 동의하는 키일 뿐입니다. 신경 언어 스테가노그래피를 사용하여 자연스러운 텍스트에 비밀 메시지를 숨깁니다. 작동 방식 1. 인코더는 비밀 메시지와 공유 프롬프트를 받습니다...

grafanaExp

grafanaExp Grafana CVE-2021-43798 임의 파일 읽기 취약점을 이용하여, 취약점 존재 여부, 존재하는 plugin, 키 추출, 서버 측 db 파일 복호화를 자동으로 탐지하고 datasourrce 정보를 출력합니다. 사용 방법 exp 및 decode 기능을 제공합니다. ➜ ./grafanaExp -h NAME: grafanaExp - Exploit Grafana with CVE-2021-43798 Arbitrary File Read. USAGE: grafanaExp global options command...

CVE-2025-10897

CVE-2025-10897 WooCommerce 是一个面向 WordPress 的开源电子商务插件，可将网站转变为在线商店。WooCommerce Designer Pro 是由 JMA Plugins 开发的 WordPress 插件，使客户能够直接在 WooCommerce 商店中设计和定制产品。 重要提示 ：WooCommerce 与 WooCommerce Designer Pro 是完全不同的产品。 WooCommerce Designer Pro 支持创建名片、明信片、传单、海报、T恤、贴纸及其他可打印材料，具备 CMYK 色彩支持、PDF...

Cisco-Smart-Exploit

Cisco-Smart-Exploit Cisco SmartInstall 익스플로잇 CVE-2018-0171 C. Papathanasiou PoC에서 영감을 받음 이 Python 3 스크립트는 SmartInstall을 실행 중인 Cisco 장치의 포트 4786을 사용하여 CVE-2018-0171 을 익스플로잇합니다. 이 익스플로잇을 사용하면 공격자가 페이로드를 제작하여 Cisco 장치로 전송한 후 running-config 파일의 내용을 추출할 수 있습니다. Cisco Smart Exploit 스크립트는 다음을 수행할 수 있습니다...

CVE-2021-22911-RocketChat

CVE-2021-22911 — Rocket.Chat 3.12.1 RCE（即興） 概要 Rocket.Chat 3.12.1 の認証前のNoSQLインジェクションの脆弱性を悪用して、管理者のTOTPシークレットとパスワードリセットトークンを漏洩させ、管理者アカウントを乗っ取り、悪意のあるWebhook統合を介してRCEを達成します。 影響を受けるバージョン Rocket.Chat & /dev/tcp/YOURIP/4444 0&1' 引数 フラグ| 説明 ---|--- -t| ターゲットのRocket.Chat URL -u| 登録済みの低権限ユーザー名 -p|...

Astra Linux – Vulnerability in nss

During RSA key generation, bignum implementations used a variant of the Binary Extended Euclidean Algorithm, which involved significant input-dependent processes. This allowed attackers to perform electromagnetic-based side-channel attacks to capture traces that could lead to the recovery of secr...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fixed a use-after-free race condition in the fault handler. When a page fault occurs in a secret memory file created with memfdsecret2, the kernel will allocate a new folio for it, mark the underlying page as not...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: secretmem: Disable memfdsecret if arch cannot set the direct map. The memfdsecret syscall returns -ENOSYS if !cansetdirectmap is true. This occurs, for example, in some arm64 configurations, where marking 4k PTEs in the direct ma...

POC_CVE-2026-42880

CVE-2026-42880 — ServerSideDiffによるArgoCDのSecret露出 CVE-2026-42880 を再現・検出するためのラボ環境です。これは Argo CD の重大な脆弱性で、ServerSideDiff gRPC ハンドラが Kubernetes の Secret データを読み取り専用ユーザーに露出させてしまうものです。 脆弱性の概要 項目| 詳細 ---|--- CVE ID| CVE-2026-42880 GHSA| GHSA-3v3m-wc6v-x4x3 CVSS| 9.6（重大）—...