vcenter_saml_login

vCenter SAML Login Tool أداة لاستخراج شهادة موفّر الهوية IdP من النسخ الاحتياطية لـ vCenter وتسجيل الدخول كمسؤول Administrator خلفية عادةً، أثناء الاختبارات الأمنية، نحصل على إمكانية الوصول إلى النسخ الاحتياطية لـ vCenter على خادم ملفات أو الوصول الجذري root إلى مضيف VCSA من خلال ثغرات CVE الحديث...

cve-2015-5477

PoC لـ BOND9 TKEY assert DoS CVE-2015-5477 يختبر هذا الاستغلال ما إذا كان خادم BIND9 ضعيفًا عن طريق إرسال الاستغلال لمعرفة ما إذا كان يتعطل. هو كود C تقوم بتجميعه بالطريقة العادية على Unix/Window، مثل: root@kitploit: gcc tkill.c -o tkill سيعمل عبر كل من IPv4 و IPv6. هذا ما يبدو عليه عند تشغيله ضد...

CVE-2026-30046

A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-30047

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2016-2569

مرحباً، شكراً لقراءة أول تدوينة لي. سنتناول اليوم إنشاء استغلال لأحد الأدوات مفتوحة المصدر وهو خادم الوكيل Squid للتخزين المؤقت. إذن ما هو Squido؟ Squid هو وكيل تخزين مؤقت للويب يدعم HTTP وHTTPS وFTP والمزيد. يقلل عرض النطاق الترددي ويحسن أوقات الاستجابة عن طريق التخزين المؤقت وإعادة استخدام صفحا...

CVE-2026-60206

CVE-2026-60206 – Oracle WebLogic Server SAML 认证绕过 PoC 该仓库提供了针对 CVE-2026-60206 的概念验证利用代码，这是 Oracle WebLogic Server SAML 实现中的一个关键认证绕过漏洞。该漏洞允许远程低权限攻击者通过伪造 SAML 断言完全入侵服务器。 ⚠️ 免责声明： 本工具仅限授权的安全研究和测试 使用。仅可对您拥有或获得明确许可的系统进行测试。作者不对滥用行为承担任何责任。 🔥 漏洞概述 CVE-2026-60206 影响 Oracle WebLogic Server 的核心组件。该漏洞源于 SAML...

CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille-

보안 권고: URL 접두사 처리의 도달 가능한 단언을 통한 원격 서비스 거부 rouille 지정된 CVE ID: CVE-2026-66754 요약 Request::removeprefix는 퍼센트 디코딩된 URL을 검사하지만 원시raw URL에 대해 단언assert합니다. 디코딩된 경로가 접두사로 시작하지만 원시 경로는 그렇지 않은 요청은 검사를 통과한 뒤 단언에 실패합니다. 접두사의 한 문자만 퍼센트 인코딩하면 충분합니다. 기본 빌드에서는 패닉이 포착되어 500으로 처리됩니다. panic = "abort"로 빌드한 경우에는 이를...

EUVD-2026-67104

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

EUVD-2026-67103

A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-30047

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-30046

A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-30046

A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2026-30047

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

smack

SMACK è sia una toolchain modulare per la verifica del software che un verificatore software autonomo. Può essere usato per verificare le asserzioni nei suoi programmi di input. Nella sua modalità predefinita, le asserzioni vengono verificate fino a un dato limite sulle iterazioni dei cicli e sul...

bind: BIND: Denial of Service via specially crafted DNS messages

A flaw was found in the bind component, specifically within the named daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System DNS messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the named daemon when...

bind: bind9: Unexpected exit with NSEC and NSEC3 both present

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof...

CVE-2026-54920

A flaw was found in OpenEXR. A remote attacker could exploit a reachable assertion failure in the HTJ2K decode path by providing a specially crafted HTJ2K-compressed EXR file. This file, containing a QCD marker with specific invalid bits, causes an unconditional process abort in applications that...

CVE-2026-53532

A flaw was found in OpenEXR. A remote attacker can provide a specially crafted HTJ2K-compressed EXR file, which causes an unconditional process abort in applications that process untrusted input. This denial of service occurs because OpenEXR passes a malformed QCD marker to the vendored OpenJPH...

BIT-KEYCLOAK-2026-2092 Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. Thi...

BIT-KEYCLOAK-2026-11800 Org.keycloak:keycloak-services: keycloak: authentication bypass via jwt algorithm confusion

A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Grant flow allows an attacker with valid client credentials to bypass signature verification. By forging an assertion, the attacker can create unauthorized access tokens. This enables the attacker to...