91020 matches found
CVE-2026-104892 Plane: Plaintext logging of API token
Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This allows someone with low privileges to steal user API keys and further escalate their privileges. This issue is fixed in 1.4.0...
[SECURITY] [DLA 4822-1] ruby-oauth2 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4822-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley October 05, 2026 https://wiki.debian.org/LTS -...
CVE-2025-5777-Exploit
CVE-2025-5777 익스플로잇 툴 🔥 Citrix NetScaler VPN에 영향을 미치는 취약점 CVE-2025-5777 을 시연하고 분석하기 위해 설계된 강력한 교육용 도구 입니다. 이 프로젝트는 GO-TO CVE 이니셔티브의 일부입니다. ⚠️ 교육 목적으로만 사용하세요. 소유하지 않았거나 테스트 허가를 받지 않은 시스템에서는 사용하지 마세요. 📌 소개 이 스크립트는 취약한 Citrix VPN 엔드포인트에 의해 노출된 민감한 내부 토큰, 내부 IP 및 숨겨진 엔드포인트 경로를 탐지하고 추출하려고 시도합니다. 학생, 보안...
CVE-2025-29824-Exploit
🚨 CVE-2025-29824 Exploit: PipeMagic Ransomware Chain 📌 Critical Vulnerability Overview Privilege Escalation Flaw in Windows CLFS → SYSTEM Privilege Hijack Exploited in Active Ransomware Attacks by Storm-2460 Threat Group 🖥️ Affected Systems Expand System List 🧩 Exploit Chain Workflow graph LR...
recipe-blog-encoding
recipe-blog-encoding !WARNING This project is entirely vibe-coded likely partially plagiarized from this repository and the author is a dumb-dumb who just thought the idea was funny Use SEO-gaming recipe preambles as a vehicle for encoding secret messages the prompt can really be anything though,...
MetabaseRceTools
MetabaseRceTools CVE-2023-38646 Metabase RCE Tool CVE-2023-38646 RCE Graphical Exploitation Tool Verification Module Input the specified URL to detect unauthorized token Command Execution This module requires executing the verification module to obtain a token first JarLocation: the location of...
f5_rce_poc
Usage python3 f5rce.py -u 指定目标URL -f 批量检测文件 -c 执行命令 -s/--ssrf 通过ssrf获得token执行命令 The effect is as shown below: python3 f5rce.py -u 127.0.0.1 --ssrf After executing the command, enter exit to exit PS: The output is not elegant enough, I will modify it 😁 Future Updates: Fixed some command execution...
CVE-2023-48084
CVE-2023-48084 POC의 잘못된 구문을 수정합니다. 주로 잘못된 import와 잘못된 API 함수 참조를 수정합니다. APIToken 검색을 자동화하고, 토큰을 변수에 저장한 후 수정된 POC로 파이프합니다. https://github.com/Hamibubu/CVE-2023-48084 어떤 이유로 작동하지 않으면 위에 링크된 의존성의 소스를 diffcheck하고 내 변경 사항을 되돌리십시오. 설치 git clone https://github.com/bucketcat/CVE-2023-48084 cd...
CVE-2020-17103
🛡️ MiniPlasma - CVE-2020-17103 A Windows Local Privilege Escalation Zero-Day Turning placeholder files into SYSTEM access 📋 Overview MiniPlasma is a powerful local privilege escalation exploit targeting CVE-2020-17103 in the Windows Cloud Files Mini Filter Driver cldflt.sys. It allows any standard...
FOSKiller
███████╗ ██████╗ ███████╗██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██╔════╝██╔═══██╗██╔════╝██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ █████╗ ██║ ██║███████╗█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██╔══╝ ██║ ██║╚════██║██╔═██╗ ██║██║ ██║ ██╔══╝ ██╔══██╗ ██║ ╚██████╔╝███████║██║ ██╗██║███████╗███████╗███████╗██║ ██║...
CVE-2026-105396
Heym before v0.0.112 contains a token leakage vulnerability in buildpublicbaseurl that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to...
cve-2022-39227-jwt-auth-bypass-demo
CVE-2022-39227 JWT 인증 우회 데모 프로젝트 목표 이 프로젝트는 통제된 로컬 랩 환경에서 CVE-2022-39227 취약점을 시연합니다. 이 취약점은 python-jwt 라이브러리3.3.4 미만 버전에 영향을 미치며, 공격자가 python-jwt와 해당 의존성인 jwcrypto 간의 파싱 불일치JWS 직렬화를 악용하여 비밀 키 없이 JWT 클레임을 위조할 수 있게 합니다. 기술 스택 Python 3.9 Flask 웹 프레임워크 python-jwt 3.3.3 취약한 버전 python-jwt 3.3.4 수정/패치된 ...
Astra Linux – Vulnerability in Firefox
The “Copy Image Link” context menu action would copy the final image URL after redirects. By embedding an image that triggered authentication flows—in conjunction with a Content Security Policy that stopped a redirection chain in the middle—the final image URL could contain an authentication toke...
CVE-2026-105396 Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header
Heym before v0.0.112 contains a token leakage vulnerability in buildpublicbaseurl that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to...
CVE-2026-105396
The Heym library (versions before v0.0.112 ) is vulnerable to a token leakage flaw within the build_public_base_url() function. An unauthenticated attacker can spoof Origin or X-Forwarded-Host headers to redirect HITL (Human-in-the-Loop) review links to an attacker-controlled domain. By triggerin...
CVE-2026-105396 Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header
Heym before v0.0.112 contains a token leakage vulnerability in buildpublicbaseurl that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to...
CVE-2026-105396 Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header
Heym before v0.0.112 contains a token leakage vulnerability in buildpublicbaseurl that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to...
EUVD-2026-92414
Heym before v0.0.112 contains a token leakage vulnerability in buildpublicbaseurl that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to...
cve-2026-21858
CVE-2026-21858 + CVE-2025-68613 - n8n 전체 체인 인증되지 않은 임의 파일 읽기 → 관리자 토큰 위조 → 샌드박스 우회 → RCE | ---|--- CVE| CVE-2026-21858 AFR + CVE-2025-68613 RCE CVSS| 10.0 + 9.9 심각 영향 받는 버전| = 0.211.0 RCE 수정된 버전| 1.121.0 AFR / 1.120.4+ RCE 공개일| 2026-01-07 11:09 UTC 코드명| Ni8mare 발견자| Dor Attias Cyera 익스플로잇|...