CVE-2026-47323

camel-cxf-rest / camel-cxf / camel-knative-http 头部注入复现工具 CVE-2026-47323 该项目演示了 Apache Camel 的 CXF 和 Knative HTTP 头部过滤策略中的消息头部注入 漏洞，追踪编号为 CVE-2026-47323 。CxfRsHeaderFilterStrategy camel-cxf-rest、CxfHeaderFilterStrategy camel-cxf-transport 和 KnativeHttpHeaderFilterStrategy camel-knative-http 仅过滤出站 ...

Shockwave-OSS

BountyTricks 分享 Bug Bounty 技巧和诀窍，包括但不限于自动化、单行命令和实用思路 目录 💂‍♂️ 杂项 正则表达式验证器 同形字攻击生成器 Shodan-Scripts HTTP 头部 MIME 类型 反向代理 Writeups HTTP 请求走私 Github 本地侦察 - 用法：gitsecrets “word” | gf pattern root@kitploit: gitsecrets find .git/objects/pack/ -name ".idx"|while read i;do git show-index no WAF...

CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address

CVE-2026-0101 – 通过弱可解析私有地址实现 BLE 地址欺骗 程序代码（使用 bleak 模拟的 Python） root@kitploit: bleperipheralsim.py - Simulated BLE peripheral with weak RPA verification import asyncio, random, hashlib from bleak import BleakServer, BleakScanner Simplified - we'll use a basic socket to simulate BLE bonding Store...

CVE-2026-8181

CVE-2026-8181 此漏洞允许知道有效管理员用户名的未经身份验证的攻击者，通过在 Basic Authentication 标头中使用任意错误密码，在 REST API 请求期间冒充该管理员。攻击者可利用此漏洞，在未经事先身份验证的情况下创建新的管理员账户。...

Exploit for Improper Access Control in Widgetfactorylimited Jce

E.L.V CVE Research & Assessment Framework E.L.V — Exploit...

CVE-2025-70830

CVE-2025-70830: Datart Server-Side Template Injection SSTI 漏洞概述 Overview CVE 编号 : CVE-2025-70830 受影响产品 : Datart 受影响版本 : v1.0.0-rc.3 漏洞类型 : Server-Side Template Injection SSTI - 服务端模板注入 危害等级 : Remote Code Execution RCE 漏洞描述 Description Datart v1.0.0-rc.3 版本的 Freemarker 模板引擎存在服务端模板注入 SSTI 漏洞。...

Joomla HTTP Header Unauthenticated - Remote Code Execution

Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP User-Agent header, as exploited in the wild in December 2015 id: CVE-2015-8562 info: name: Joomla HTTP Header Unauthenticated - Remote Code Execution...

Windows Server Update Service - Insecure Deserialization

Windows Server Update Service contains an insecure deserialization vulnerability caused by deserialization of untrusted data. An unauthorized attacker with network access can exploit this to execute arbitrary code remotely, potentially leading to full system compromise. id: CVE-2025-59287 info:...

ProjectSend <= r1605 - Improper Authorization

An improper authorization check was identified within ProjectSend version r1605 that allows an attacker to perform sensitive actions such as enabling user registration and auto validation, or adding new entries in the whitelist of allowed extensions for uploaded files. Ultimately, this allows to...

Icinga Web 2 - Arbitrary File Disclosure

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including icingaweb2 configuration files with database credentials. id: CVE-2022-24716 info:...

Node.JS System Information Library <5.3.1 - Remote Command Injection

Node.JS System Information Library System before version 5.3.1 is susceptible to remote command injection. Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. id: CVE-2021-21315 info: name: Node.JS System...

CVE-2026-81303 Hawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostname

A flaw was found in hawtio-operator. The operator holds routes/custom-host:create permission cluster-wide and writes the tenant-supplied spec.routeHostName value from the Hawtio custom resource directly into the Route spec without validation or authorization checks. A namespace edit user, who...

CVE-2026-81303 Hawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostname

A flaw was found in hawtio-operator. The operator holds routes/custom-host:create permission cluster-wide and writes the tenant-supplied spec.routeHostName value from the Hawtio custom resource directly into the Route spec without validation or authorization checks. A namespace edit user, who...

CVE-2026-81303

CVE-2026-81303 affects hawtio-operator , a Kubernetes operator. The operator holds the routes/custom-host:create permission cluster-wide and writes the tenant-supplied spec.routeHostName value from the Hawtio custom resource directly into the Route spec without validation or authorization checks....

EUVD-2026-78275

A flaw was found in hawtio-operator. The operator holds routes/custom-host:create permission cluster-wide and writes the tenant-supplied spec.routeHostName value from the Hawtio custom resource directly into the Route spec without validation or authorization checks. A namespace edit user, who...

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft Windows to deliver a malicious JavaScript backdoor called GRIMWEDGE. Volexity, which is tracking the threat cluster under the moniker UTA0560 , said...

CVE-2026-81303

A flaw was found in hawtio-operator. The operator holds routes/custom-host:create permission cluster-wide and writes the tenant-supplied spec.routeHostName value from the Hawtio custom resource directly into the Route spec without validation or authorization checks. A namespace edit user, who...

redact

redact Strip credential-like content from free-form strings before they reach logs, telemetry, or any third-party surface Part of thephpboyscout Go toolkit — small, framework-free Go modules extracted from go-tool-base. Docs: redact.go.phpboyscout.uk gitlab.com/phpboyscout/go/redact redacts...

React2Shell-PoC-CVE-2025-55182

模拟 React2Shell CVE-2025-55182 漏洞利用 注意： 本文档仅用于学习和安全研究目的。 未经授权，请勿用于攻击系统。 1. 概述 CVE-2025-55182，又称 React2Shell，是一个影响 React Server Components RSC 的严重远程代码执行（Remote Code Execution, RCE）漏洞。它通过 Flight 协议在客户端和服务器之间进行通信。当客户端请求数据时，服务器会收到一个 payload 并对其进行解析，这可能允许攻击者注入 React 会视为合法的恶意结构或任意代码。 项目| 内容 ---|--- 严重程度...

CVE-2026-90858

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected by this vulnerability is the function sessionstart of the file adminappview.php. Executing a manipulation of the argument adminmail can lead to authorization bypass. The...