BreakEscape

BreakEscape Rails 引擎 一个可挂载的 Rails 引擎，用于网络安全培训的密室逃脱游戏。 功能 24+ 个网络安全密室逃脱场景 服务端进度追踪，采用 2 表架构 通过 ERB 为每个游戏实例生成随机密码 NPC 对话的即时 Ink 脚本编译 多态玩家支持（User/DemoUser） Pundit 授权 用于游戏状态管理的 RESTful API 基于会话的状态持久化 安装 在你的 Gemfile 中： root@kitploit: gem 'breakescape', path: 'path/to/breakescape' 然后： root@kitploit:...

burp_global_match_replace

Global Match & Replace GMR Extensión de Burp Suite Global Match & Replace GMR amplía Burp Suite con reglas de coincidencia/reemplazo que se aplican globalmente o en múltiples herramientas de tu elección Repeater, Intruder, Proxy, etc.. Proporciona diferencias diffs por solicitud y respuesta para...

CVE-2025-24813

Exploitation Conditions DefaultServlet Write Function Enabled: Must configure readonly=false in web.xml Partial PUT Request Support: Tomcat supports chunked upload by default File Session Persistence Enabled: Must configure PersistentManager and FileStore in context.xml Deserialization Exploit...

CVE-2026-82311

Apache Airflow FAB provider: resetting a user's password does not delete that user's existing database-backed sessions, despite documented behaviour that it does. The cleanup compares the string identifier Flask-Login stores in the session against the user's integer database identifier, so the...

EUVD-2026-80318

Apache Airflow FAB provider: resetting a user's password does not delete that user's existing database-backed sessions, despite documented behaviour that it does. The cleanup compares the string identifier Flask-Login stores in the session against the user's integer database identifier, so the...

CVE-2025-24813

Descripción Este repositorio es un entorno de reproducción para la última RCE de Tomcat CVE-2025-24813. ¡Solo para fines de aprendizaje e investigación! Condiciones de explotación La aplicación tiene habilitada la función de escritura de DefaultServlet, que está desactivada por defecto La...

Session-Persistence-After-Enabling-2FA-CVE-2025-60425

Persistencia de sesión después de habilitar 2FA Resumen La aplicación Nagios Fusion versiones 2024R1.2 y 2024R2 contiene una falla de seguridad alta donde las sesiones existentes siguen siendo válidas incluso después de habilitar la Autenticación de Dos Factores 2FA. Específicamente, cuando se...

CVE-2025-24813-Apache-Tomcat-Partial-PUT-Deserialization-RCE-

CVE-2025-24813 - Apache Tomcat PUT Parcial + Deserialización RCE 📋 Resumen CVE-2025-24813 es una vulnerabilidad de alta gravedad en Apache Tomcat que permite ejecución remota de código no autenticada cuando se cumplen tres condiciones: 1. El servlet predeterminado tiene habilitado el acceso de...

Tomcat-CVE-2025-24813

Conditions of Use DefaultServlet write function is enabled: it needs to web.xml be configured inreadonly=false Partial PUT request support: Tomcat supports block upload by default Enable file session persistence: need to context.xml configure PersistentManager and FileStore There is a...

Burp-Recordadora

🧙‍♂️ Recordadora Recordadora es una extensión para BurpSuite inspirada en Harry Potter. Como la recordadora de Neville, te ayuda a no olvidar ni perder el contexto de tus pruebas. ✨ Funcionalidades Guardar y restaurar historial del Proxy Exportar e importar requests del Repeater Persistir cargas...

java-vulnerable

Consumidor de demostración para CVE-2016-0714 RCE de persistencia de sesión de Tomcat + CVE-2013-1814 divulgación de información de UserApi de Apache Rave más cuatro vulnerabilidades de OSS de Java de filter-padding. context.xml habilita PersistentManager → cadena de Tomcat ACTIVA;...

CVE-2026-34828

CVE-2026-34828 Persistencia de sesión de listmonk tras el restablecimiento y cambio de contraseña Introducción Encontré este problema al revisar listmonk , un gestor de boletines y listas de correo de código abierto, con una simple pregunta de seguridad en mente: Cuando un usuario cambia o...

CVE-2025-62343

HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...

CVE-2025-62343 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...

CVE-2025-62343

HCL IntelliOps Event Management (IEM) is affected by an Admin Session Concurrency Vulnerability that may allow user sessions to remain active after logout or session deletion. The assigned CVSS 3.1 score is 3.1 (LOW) , reflecting a network attack vector with high complexity and required user inte...

ANT-2026-96NHD13X · supabase/auth · auth-bypass

auth-bypass low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-96NHD13X: Factor-type string mismatch prevents session AAL downgrade In supabase/auth, DowngradeSessionsToAAL...

CVE-2026-66376

Credentials for a deleted user may remain valid for a short period under specific conditions...

CVE-2026-17600

Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissions when that user's account was deleted, deactivated, or had its password changed. A user whose account was already logged in at the time of one of these actions could continue...

CVE-2026-17599

Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. This endpoint did not verify that onboarding was still in progress before allowing the password change, relying instead on the presence of a local onboarding artifact. As a result...

CVE-2026-19019 poco-ai poco-agent Claude File workspace.py WorkspaceManager._setup_session_persistence cleanup

A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager.setupsessionpersistence of the file executor/app/core/workspace.py of the component Claude File Handler. The manipulation results in incomplete cleanup. The attack may be performed fro...