CVE-2025-29927_Scanner

CVE-2025-29927 Проверщик 📌 Введение Этот скрипт проверяет уязвимость CVE-2025-29927 в серверах Next.js, тестируя несколько payload'ов в заголовке x-middleware-subrequest для обнаружения несанкционированного доступа. ❓ Что такое CVE-2025-29927? CVE-2025-29927 — это уязвимость, позволяющая обойти...

CVE-2021-22192

CVE-2021-22192 CVE-2021-22192 полигон: RCE-уязвимость для неавторизованных пользователей 0x10 Среда полигона 0x20 Структура каталогов CVE-2021-22192 ├── README.md ............... описание этого README ├── imgs .................... изображения для README ├── gitlab .................. каталог...

Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2.6.0)

Description Summary In Vikunja v2.6.0 the project-permission engine resolves a user's effective permission on a project as the MAX over the entire reachable project subtree. As a result, when a user has been granted a higher permission on a parent project and the owner explicitly shares a child...

Contao: Improper access control in the preview links module

core-bundle/config/services.yaml registers the preview access voter with the class Contao\CoreBundle\Security\Voter\DataContainer\PreviewAccessVoter, but the class shipped on disk is named PreviewVoter. Symfony resolves the class with getReflectionClass$class, false, gets null, silently skips the...

Contao: Improper access control in the table access voter

Due to a caching defect in the security voter that governs table-level access to Contao's Data Container DCA backend, a low-privileged, non-admin backend user can obtain unauthorized read, create, update, and delete access to database tables outside their assigned module permissions. This include...

EUVD-2026-78651

Vikunja: Any user can enumerate every team and its members by attaching arbitrary teams to a throwaway project...

hm-surf

Оценщик HM-Surf Оценивает подверженность обычных браузеров macOS уязвимости CVE-2024-44133. Также содержит HTML, который делает скриншот и скачивает его вместе с извлечением местоположения. Использование - оценщик Чтобы запустить оценщик, который оценивает CVE-2024-44133 на всех обычных браузерах...

EUVD-2026-78656

Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint v1 and v2 and escalate to the share's permission level...

EUVD-2026-78653

Vikunja: TOTP secret is readable after enrollment, no step-up auth...

Vikunja: TOTP secret is readable after enrollment, no step-up auth

Summary Once a user has TOTP enabled, the API still hands back the raw shared secret to anyone holding that account's access token. Reading it doesn't ask for the password, even though disabling TOTP does. So a stolen token, an XSS, or a browser left open is enough to copy the second factor into...

Reaper

「💀」 À propos de Reaper Reaper est une preuve de concept conçue pour exploiter la vulnérabilité du pilote BYOVD Bring Your Own Vulnerable Driver. Cette technique malveillante consiste à insérer un pilote légitime et vulnérable dans un système cible, ce qui permet aux attaquants d'exploiter le pilo...

CVE-2026-62376 Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access

Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens in the usertokens table in plaintext. If an attacker gains read access to the database through a backup leak, misconfigured storage, or...

Forbidden-Buster

Forbidden Buster est un outil conçu pour automatiser diverses techniques afin de contourner les codes de réponse HTTP 401 et 403 et d'obtenir un accès à des zones non autorisées du système. Ce code est destiné uniquement aux passionnés et professionnels de la sécurité. Utilisez-le à vos propres...

EUVD-2026-95992

Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in core/workflow/engine/nodes/code/codenode.py when CODEEXECTYPE is not explicitly...

CVE-2021-25374_Samsung-Account-Access

CVE-2021-25374 - Script d'accès au compte Samsung Ce script peut être utilisé pour accéder au compte Samsung d'une victime si celle-ci dispose d'une version spécifique de Samsung Members installée sur son appareil Samsung, et si l'appareil de la victime provient de la région des États-Unis ou de ...

blind-ssrf-chains

Введение Что такое Server Side Request Forgery SSRF? Server Side Request Forgery происходит, когда вы можете заставить сервер выполнять произвольные запросы от вашего имени. Поскольку запросы выполняются сервером, возможно получение доступа к внутренним ресурсам из-за положения сервера в сети. В...

EUVD-2026-51991

Vikunja: Link-share principal ID collision allows cross-account API token issuance and management...

CVE-2026-41089-Netlogon

🛡️ AI Security Tool Module CVE-2026-41089: Netlogon Stack Buffer Overflow Официальный модуль проверки безопасности для AI Security Tool Ecosystem 🌐 Демо-версия • 📚 Сайт проекта • 💬 Чат сообщества Навигация по сайту: Главная • Обновления • Загрузки • Модули 🧠 Conceptual Overview Я публикую подробны...

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056는 제가 NVIDIA PSIRT에 제출한 취약점입니다. 개인적으로 이 취약점은 멀티 테넌트 HPC 클러스터, 특히 클라우드 머신러닝 플랫폼에서 높은 보안 위험을 초래할 수 있습니다. 이 저장소는 nvidia-container-runtime으로 생성된 GPU 컨테이너에서 이 취약점을 간단히 시연합니다. 작동 방식 공격자는 GPU 컨테이너nvidia-container-runtime으로 생성된 컨테이너에서 특정 문자 디바이스 파일을 생성함으로써 호스트의 모든 GPU 디바이스에 접근할 ...

CVE-2022-44311

CVE-2022-44311 설명 html2xhtml v1.3은 procesador.c의 static void elmclosetreenodet nodo 함수에서 Out-Of-Bounds범위를 벗어난 읽기가 발생하는 것으로 발견되었습니다. 이 취약점으로 인해 공격자는 조작된 html 파일을 통해 민감한 파일에 접근하거나 서비스 거부DoS를 유발할 수 있습니다. 재현 취약점을 재현하려면 취약한 버전의 html2xhtmlv1.3을 다운로드하고 프로젝트를 컴파일합니다: wget...