29573 matches found
CVE-2026-87996 Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.1, SafePlaywrightURLLoader in backend/openwebui/retrieval/web/utils.py validated a user-controlled hostname in Python and then let the Playwright browser resolve it again in the sync and...
CVE-2026-87996
Open WebUI (self-hosted AI platform), versions 0.9.6 through 0.11.1 , is affected by an SSRF via DNS rebinding in the SafePlaywrightURLLoader component (backend/open_webui/retrieval/web/utils.py). The root cause is a trust mismatch: a user-controlled hostname is validated in Python, but the Playw...
threat-finder
OffSeq Threat Finder threat-finder は、マニフェストが主張する内容ではなく、ホスト上で 実際に実行されている 脆弱なソフトウェアを見つけ出し、どの検出結果がネットワーク到達可能 かを教えてくれます。実行中の各サービス（および --scope all の場合はインストール済みのすべての OS パッケージ）を正確な Package-URL に解決し、エコシステムネイティブなバージョン規則を用いて OffSeq Radar カタログと照合するため、バックポート/修正済みビルドが誤検出されることはありません。 root@kitploit: Vulnerabili...
Hijack-service-binaries
Hijack-service-binaries A PowerShell security auditing tool that identifies Windows service binaries that can be modified by the current user—a potential privilege escalation vector. Overview This script scans all Windows services except system32 and svchost and checks if the current user has...
Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA
Cybercriminals are hijacking artificial intelligence AI user accounts via information stealer logs to create "stolen keys" that grant illicit access to tools from model providers like Google, Anthropic, and others. Information stealers like Lumma Stealer or Vidar are equipped to harvest a wide...
Drupal_REST-RCE_Unauthenticated
CVE-2019-6340 — Drupal RESTful Web Services RCE Python implementation of the remote code execution exploit for CVE-2019-6340, based on analysis of the Metasploit module and the prior work by leonjza. Key difference from EDB-46459: uses POST instead of GET, bypassing Drupal's page cache — can be...
CVE-2020-3452-Cisco-Scanner
CVE-2020-3452 - Cisco ASA Scanner Scanning for CVE-2020-3452 - unauth Path Traversal affecting Cisco ASA firewalls running anyconnect https://vulners.com/cve/CVE-2020-3452 Supporting Documents: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ro-path-KJuQhB86...
suds
OVERVIEW The "Suds" web services client is a lightweight soap-based client for python the is licensed under LGPL. For details, visit: Project site: https://fedorahosted.org/suds/ Documentation: https://fedorahosted.org/suds/wiki/Documentation Epydocs: http://jortel.fedorapeople.org/suds/doc/...
CVE-2026-54121
🛡️ CVE-2026-54121 — Certighost CTI Investigation Active Directory Certificate Services Privilege Escalation / Domain Compromise Risk Created by Pratik Chhetri Report Date: 2026-07-28 📌 Executive Snapshot...
CVE-2026-87821 Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetch
Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated user to fetch arbitrary URLs and read the response body. Attackers can read internal HTTP services and cloud metadata including IA...
CVE-2019-0708
CVE-2019-0708 クラッシュ部分 BSOD は意図的に削除されました！ リモートデスクトップサービス – 以前はターミナルサービスとして知られていました – に、認証されていない攻撃者が RDPを使用してターゲットシステムに接続し、特別に細工されたリクエストを送信します。 この脆弱性は認証前であり、ユーザーの操作は必要ありません。 操作。 この脆弱性を悪用することに成功した攻撃者は、ターゲットシステム上で任意のコードを実行する可能性があります。 攻撃者は...
CVE-2022-26923
CVE-2022-26923 説明 この脆弱性により、デフォルトのActive Directory環境でActive Directory Certificate Services（AD CS）サーバーの役割がインストールされている場合、低権限ユーザーが権限をドメイン管理者に昇格させることができました。 これは主にActive Directory Certificate Services（AD CS）の役割に関連しています。AD CSの役割はWindows Serverの役割であり、組織向けに公開鍵基盤（PKI）を構築し、公開鍵暗号、デジタル証明書、デジタル署名機能を提供できます。AD...
CVE-2026-19729 Keycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parameters
A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs because a previous fix for path probing was incomplete, allowing a realm administrator to still submit arbitrary filesystem paths as keysto...
CVE-2026-19729
CVE-2026-19729 is an incomplete fix for CVE-2026-9083 in the key provider component of the keycloak-services library (core engine of the Red Hat Build of Keycloak). A relative path traversal remains, allowing a realm administrator to submit arbitrary filesystem paths as keystore parameters and de...
skylift
SkyLift V0.4 6月15日に公開予定 python3 click より使いやすいCLIパーサーワークフロー タイムスタンプの修正 SkyLift V0.3 SkyLiftは低コストの地理位置情報スプーフィングデバイスです。現在はESP8266を使用してWiFiビーコンフレームをブロードキャストし、WiFi地理位置情報サービスにおける長年にわたる2008年の脆弱性を悪用します。 この3番目のプロトタイプ版であるSkyLiftは、Akademie Schloss...
poc_proxylogon
pocproxylogon Microsoft Exchange ProxyLogon PoC CVE-2021-26855 This is script was originaly made by celesian to exploit this CVE. Then i updated it to exploit an exchange server vulnerable to SSRF but it got a Shell exploiting the EWS feature, because a client company patched it's exchange server...
CVE-2019-0708
원격 데스크톱 서비스이전 명칭: 터미널 서비스에 인증되지 않은 공격자가 RDP를 사용하여 대상 시스템에 연결하고 특수하게 조작된 요청을 전송할 때 원격 코드 실행 취약점이 존재합니다. 이 취약점은 사전 인증pre-authentication 상태에서 발생하며 사용자 상호 작용이 필요하지 않습니다. 이 취약점을 성공적으로 악용한 공격자는 대상 시스템에서 임의의 코드를 실행할 수 있습니다. 그런 다음 공격자는 프로그램을 설치하거나 데이터를 열람, 변경, 삭제하거나 모든 사용자 권한으로 새 계정을 만들 수 있습니다. 이 취약점을...
POC-2020-8558
Overview CVE-2020-8558 is a Kubernetes venerability which was published because kube-proxy unexpectedly makes localhost-bound host services available to others on the network. I place the emphasis on unexpectedly because this vulnerability is due to a design flaw oversight, not an implementation...
Security Advisory 0168
Security Advisory 0168 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-2380 CVSSv3.1 Base Score: 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L CVSSv4.0 Base Score: 5.1...