-Spring4Shell-CVE-2022-22965-

-Spring4Shell-CVE-2022-22965-...

httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass

A vulnerability has been identified in the Apache HTTP Server. If the server is configured to connect to a malicious or compromised backend server, an attacker could exploit this flaw to bypass security controls or run unauthorized code on the system...

ImCurvin

ImCurvin' ImCurvin es una herramienta de código abierto para auditoría de seguridad web y pruebas de penetración, diseñada como una Prueba de Concepto PoC para automatizar la detección de configuraciones erróneas del entorno, rastrear planos de configuración expuestos y sondear vulnerabilidades d...

tomcat-coyote: tomcat: Improper Authorization allows security bypass

In Apache Tomcat, when multiple security constraints defined an HTTP method constraint for the same extension pattern, only the first method constraint was applied. A remote attacker could exploit this to bypass intended security restrictions for information or actions within the application...

Important: Red Hat Security Advisory: tomcat9 security update

An update for tomcat9 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve

A flaw was found in Apache Tomcat. This vulnerability, located in the rewrite valve, is due to improper handling of URL encoding hex encoding. A remote attacker could exploit this to bypass security constraints in certain configurations, potentially gaining unauthorized access or performing actio...

Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix

A flaw was found in Apache Tomcat. This improper input validation vulnerability stems from an incomplete fix for a previous security issue CVE-2025-66614. This flaw may allow an attacker to bypass security controls or cause unexpected behavior within the application...

Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix

A flaw was found in Apache Tomcat. This improper input validation vulnerability stems from an incomplete fix for a previous security issue CVE-2025-66614. This flaw may allow an attacker to bypass security controls or cause unexpected behavior within the application...

tomcat-coyote: tomcat: Improper Authorization allows security bypass

In Apache Tomcat, when multiple security constraints defined an HTTP method constraint for the same extension pattern, only the first method constraint was applied. A remote attacker could exploit this to bypass intended security restrictions for information or actions within the application...

CVE-2026-90699

creationtimestamp| type| source ---|---|--- 2026-09-14 05:03:21+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117267640180714498 2026-09-14 09:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhqokpvdh2j 2026-09-14 10:21:16+00:00| seen|...

Real Estate

Open Arsenal 房地产规范 房地产生态系统围绕这样一个理念构建：将房产情报从中心化挂牌平台转移至本地托管、自我主权的数据环境 。该设计不依赖第三方平台来定义、存储或解读挂牌信息，而是将每一条房产记录视为可移植的结构化数据集，能够独立存在于服务器、设备或私有基础设施之上。这些记录在格式上保持严格一致，以便空间细节、估值输入和描述性属性能够被应用程序和 AI 系统统一处理。由此产生的模型让房地产信息不再像网站上的静态内容，而更像一个可组合的数据层，可以在多个系统中复用、验证和扩展，且不损失完整性。 与这一结构性转变并行的，是对密码学安全与区块链启发的验证机制...

CVE-2026-2256-

CVE-2026-2256- CVE-2026-2256 diagrama...

CVE-2026-90682

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAGGPSLAT/TAGGPSLONG leads to heap-based buffer overflow. An attack has to be...

CVE-2026-0745

⚠️ Investigación de Seguridad y Aviso Legal - CVE-2026-0745 📌 Propósito de este Repositorio Este repositorio se proporciona estrictamente únicamente con fines educativos, académicos y de investigación de seguridad cibernética autorizada. Su objetivo es apoyar la comprensión de: Vulnerabilidades de...

rsc-security-auditor

🛡️ RSC 安全审计工具 检测您的Next.js和React Server Components栈中的关键安全漏洞（CVE-2025-66478, CVE-2025-55184）。 🚨 紧急： 最近的披露（2025年12月）揭示了React Server Components中的严重DoS和RCE漏洞。此工具可帮助您立即审计您的package.json。 ⚡ 功能特性 🔒 隐私优先： 100%客户端运行。您的package.json数据永远不会 离开您的浏览器。 🧠 智能分析： 检测next、react和react-dom的特定受影响的版本范围。 🩹 自动修复：...

Important: Red Hat Security Advisory: grafana-pcp security update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Important: Red Hat Security Advisory: delve security update

An update for delve is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2025-55182-React2Shell-RCE

CVE-2025-55182 – React2Shell RCE 图形界面 一款现代霓虹主题的安全测试 GUI 工具 ，用于检测 React Server Components / Next.js 应用中的 React2Shell（CVE-2025-55182）。 基于 Python + CustomTkinter 构建，支持： 检查指定端点是否存在 React2Shell 漏洞 在已确认存在漏洞的目标上执行 shell 命令 （用于取证与验证） 以清晰 UI 显示实时的、带时间戳的控制台输出 ⚠️ 这是一款安全研究与蓝队工具 ，而非大规模扫描器。 请仅在您拥有或明确授权测试的系统上使用 ...

CVE-2026-23631

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Example usage: root@kitploit: Install dependencies Run the...

CVE-2026-35616

cve-id ⚡ Uso Simple Utilice este proyecto únicamente en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones de laboratorio aisladas Entornos de pruebas de penetración autorizados Configuración de ejemplo: root@kitploit: git clone cd Ejemplo de uso:...