1937535 matches found
PPLFault
PPLFault Por Gabriel Landau en Elastic Security. De PPLdump Is Dead. Long Live PPLdump! presentado en Black Hat Asia 2023. PPLFault ACTUALIZACIÓN 2024-02: Microsoft parcheó PPLFault el 2024-02-13. Consulteeste hilo para la discusión relacionada. Explota un TOCTOU en Code Integrity de Windows para...
detection-validation
Detection-Validation Propósito La herramienta automatiza el proceso de simulación de eventos de procesos maliciosos sin necesidad de configurar procesos reales. Supongamos que quieres probar w3wp.exe lanzando Powershell; tendrás que pasar por la configuración de iis para simular eventos de...
Lockbit3.0-MpClient-Defender-PoC
Lockbit3.0-MpClient-Defender-PoC PoC de secuestro de DLL de MpClient.dll de Microsoft Defender de Lockbit3.0 Basado en: LockBit ransomware abusa de Windows Defender para cargar Cobalt Strike...
GHSA-V77H-2W3M-94HX ZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider
Summary A token lifecycle validation vulnerability was discovered in ZITADEL's external JWT Identity Provider IdP implementation Specifically, within the validation pipeline, if an incoming JWT omits the exp claim entirely, the expiration block is silently skipped rather than rejected. The token ...
ZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider
Summary A token lifecycle validation vulnerability was discovered in ZITADEL's external JWT Identity Provider IdP implementation Specifically, within the validation pipeline, if an incoming JWT omits the exp claim entirely, the expiration block is silently skipped rather than rejected. The token ...
GHSA-2CG9-97GQ-9MQP Shopper: Missing authorization on product removal actions in CollectionProducts component
Title Missing authorization on product removal actions in CollectionProducts component Description A lack of authorization control was discovered on both the per-record delete action and the bulk delete action inside packages/admin/src/Livewire/Components/Collection/CollectionProducts.php. Neithe...
Shopper: Missing authorization on product removal actions in CollectionProducts component
Title Missing authorization on product removal actions in CollectionProducts component Description A lack of authorization control was discovered on both the per-record delete action and the bulk delete action inside packages/admin/src/Livewire/Components/Collection/CollectionProducts.php. Neithe...
Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)
Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...
GHSA-99H5-JHH7-V3R3 Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)
Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...
Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component
Title Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component Description A lack of authorization control was discovered in the stockAction method in packages/admin/src/Livewire/Components/Products/VariantStock.php. The component exposes a public $variant...
GHSA-G3F9-G5VJ-P62F Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component
Title Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component Description A lack of authorization control was discovered in the stockAction method in packages/admin/src/Livewire/Components/Products/VariantStock.php. The component exposes a public $variant...
ultrablue
Ultrablue, a remote attestation server for your phone Ultrablue User-friendly Lightweight TPM Remote Attestation over Bluetooth is a solution to allow individual users to perform boot state attestation with their phone. It consists in a server, running on a computer, acting as the attester, and a...
GHSA-J328-XMGP-J4Q3 Shopper: privilege escalation via improper Livewire admin component authorization
Summary Three Livewire admin components in shopper/framework latest master at commit fcd0c59, released as v2.8.0 gate state-mutating actions on the read-only viewusers permission. This is the same class as the issue Shopper fixed in v2.8.0 / PR 511 / GHSA-f946-9qp6-vgch — the PR moved most write...
Shopper: privilege escalation via improper Livewire admin component authorization
Summary Three Livewire admin components in shopper/framework latest master at commit fcd0c59, released as v2.8.0 gate state-mutating actions on the read-only viewusers permission. This is the same class as the issue Shopper fixed in v2.8.0 / PR 511 / GHSA-f946-9qp6-vgch — the PR moved most write...
GHSA-F7H9-QV4X-9X57 Shopping privilege escalation through missing authorization in Settings components
Summary Four Livewire components in the Settings area expose destructive Filament actions delete / edit that perform no server-side authorization. Any authenticated user who can reach the Settings pages — i.e. holding only the coarse accesssetting permission, without being an admin and without an...
Shopping privilege escalation through missing authorization in Settings components
Summary Four Livewire components in the Settings area expose destructive Filament actions delete / edit that perform no server-side authorization. Any authenticated user who can reach the Settings pages — i.e. holding only the coarse accesssetting permission, without being an admin and without an...
Exploit for CVE-2026-85706
GitLabSniper CVE-2026-85706 — GitLab CE/EE unauthenticated a...
CABTrap_OneNote2007
CABTrapOneNote2007 Microsoft Office OneNote 2007 CVE-2014-2815 ".ONEPKG" 文件目录遍历漏洞导致任意代码执行 Microsoft Office OneNote 2007 CVE-2014-2815 ".ONEPKG" 文件目录遍历漏洞导致任意代码执行 OneNote 2007 存在一个漏洞，该漏洞会导致程序解压 ".onepkg" 文件中包含的文件（该文件使用 "MS CAB 格式"），通过使用文件名中的父目录 ".." 将其解压到系统中的任意位置。 由于 OneNote...
CVE-2026-49464
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The nl.nl-portal:taak package from version 1.5.0 through 3.0.0 fails to verify ownership when processing the submitTaakV2 GraphQL...