EUVD-2026-83707

A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevops/settings.py. This manipulation causes information disclosure. It is possible to initiate the attack remotely. Patch name: 2b4bf8585c3e731e7a8af30801ea46680bc783f9. It is...

CVE-2026-93971 aiyiyi121 SxDevOps settings.py information disclosure

A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevops/settings.py. This manipulation causes information disclosure. It is possible to initiate the attack remotely. Patch name: 2b4bf8585c3e731e7a8af30801ea46680bc783f9. It is...

universal-android-debloater-next-generation

Universal Android Debloater Next Generation !warning 免責事項 : ご自身の責任でご使用ください。当方は、お客様のデバイスに発生するいかなる事象についても責任を負いません。 これは UADプロジェクト の独立したフォークです。不要で不明瞭なシステムアプリを削除することで、プライバシーと効率性（エネルギー、速度、メモリ）の向上を目指しています。 また、攻撃対象領域 を減らすことでセキュリティも向上させます。詳細はウィキをご覧ください。 ドキュメント...

moltis

Moltis — A secure persistent personal agent server in Rust One binary — sandboxed, secure, yours. Installation • Comparison • Architecture • Security • Features • How It Works • Contributing Moltis recently hit the front page of Hacker News. Please open an issue for any friction at all. I'm focus...

CVE-2026-93970

aiyiyi121 SxDevOps (versions 1.0/1.1) contains a hard-coded credentials vulnerability in the file backend/sxdevops/settings.py within the Settings Handler component. The flaw is exploitable remotely over the network with no required privileges or user interaction, rated CVSS 3.1: 7.3 (HIGH) with ...

EUVD-2026-83706

A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the component Settings Handler. The manipulation results in hard-coded credentials. The attack may be performed from remote. The patch is...

CVE-2026-93970 aiyiyi121 SxDevOps Settings settings.py hard-coded credentials

A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the component Settings Handler. The manipulation results in hard-coded credentials. The attack may be performed from remote. The patch is...

EUVD-2026-83705

A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensuredefaultsuperuser of the file rbac/services.py. The manipulation leads to hard-coded credentials. The attack is possible to be carried out remotely. The identifier of the patch is...

CVE-2026-93969 aiyiyi121 SxDevOps services.py ensure_default_superuser hard-coded credentials

A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensuredefaultsuperuser of the file rbac/services.py. The manipulation leads to hard-coded credentials. The attack is possible to be carried out remotely. The identifier of the patch is...

CVE-2026-93968

aiyiyi121 SxDevOps versions 1.0 and 1.1 are affected by an improper privilege management vulnerability in the update function of the UserSerializer component (file backend/rbac/serializers.py). A remote attacker with high privileges can manipulate the update function to alter user privileges, res...

CVE-2026-93968 aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management

A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/serializers.py of the component UserSerializer. Executing a manipulation can lead to improper privilege management. The attack can be executed remotely. This patch is called...

CVE-2026-93968 aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management

A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/serializers.py of the component UserSerializer. Executing a manipulation can lead to improper privilege management. The attack can be executed remotely. This patch is called...

Full-Attack-Lifecycle-Simulation-on-Metasploitable

このリポジトリには README がありません。...

Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462

⚠️ CVE‑2025‑32463 および CVE‑2025‑32462 – Linux における Sudo 権限昇格の脆弱性 🧠 TL;DR 2025年7月、sudo ユーティリティにおいて新たに公開された2つの脆弱性 CVE-2025-32463 および CVE-2025-32462 が、多数の Linux ディストリビューションを危険にさらしています。より深刻な CVE‑2025‑32463 は CVSS スコア 9.3 を記録し、ローカル権限昇格 とシステム全体の完全な侵害を可能にします。現在、実際の悪用が発生しています。直ちに パッチを適用してください。 🔍 Sudo とは？...

EUVD-2026-83659

A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the function paramiko.SSHClient.execcommand of the file backend/ops/hosttasks.py of the component TASKRUNCOMMAND. Such manipulation of the argument command leads to command injection. The attack may be...

CVE-2026-93966 aiyiyi121 SxDevOps TASK_RUN_COMMAND host_tasks.py paramiko.SSHClient.exec_command command injection

A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the function paramiko.SSHClient.execcommand of the file backend/ops/hosttasks.py of the component TASKRUNCOMMAND. Such manipulation of the argument command leads to command injection. The attack may be...

CVE-2024-21689

CVE-2024–21689 RCE Bamboo Data Center and Server Atlassian CVSSスコア - 7.6 🔥 説明 この高重大度のRCE（リモートコード実行）脆弱性CVE-2024-21689 は、バージョン9.1.0、9.2.0、9.3.0、9.4.0、9.5.0、および9.6.0のBamboo Data Center and Serverで導入されました。このRCE（リモートコード実行）脆弱性は、CVSSスコア7.6で、認証された攻撃者が任意のコードを実行することを可能にし、機密性、完全性、可用性に対する高い影響があり、ユーザーの操作が必要です...

CVE-2026-93965 aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection

A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops/services.py of the component MCP STDIO Server Management. This manipulation of the argument endpointorcommand causes command injection. The attack may be initiated remotely...

CVE-2026-93965 aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection

A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops/services.py of the component MCP STDIO Server Management. This manipulation of the argument endpointorcommand causes command injection. The attack may be initiated remotely...

CVE-2021-31761

..| CVE-2021-31761 |.. 説明 : リフレクト型クロスサイトスクリプティング（XSS）攻撃を悪用して、Webminの実行中プロセス機能を介してリモートコマンド実行（RCE）を取得する テスト済みバージョン : Webmin 1.973 GitHubの最新版 07/03/2021 攻撃タイプ: リモート 影響 : リモートコマンド実行 エクスプロイトのコード PoC : YouTube PoC : https://youtu.be/23VvUMu-28c 製品のベンダー :...