sgxray

SGXRay: Автоматизация обнаружения уязвимостей для приложений SGX Intel SGX защищает изолированную логику приложения и конфиденциальные данные внутри анклава с помощью аппаратного шифрования памяти. Использование такого механизма аппаратной безопасности требует строгой модели программирования при...

mkdev

mkdev Настоящий HTTPS для локальной разработки — с TUI и расшариванием в LAN. mkdev запускает доверенный HTTPS на .local. Один Go-бинарник: центр сертификации CA + обратный прокси + /etc/hosts + mDNS-вещание + полноценный TUI. Что отличает его от других: Расшаривание в LAN. Пометьте маршрут как...

Quantum-Silicon-Core-Loader

Quantum Silicon Core Loader Основное ядро: qslcl.asm v0.0.2 в разработке Вспомогательный модуль: qslcl.bin v0.7.4 Универсальный контроллер: qslcl.py v2.2.2 Юридически защищённое исследование — Этот проект действует в рамках установленных правовых норм для исследований в области безопасности, прав...

boundary

Boundary Boundaryとは: https://developer.hashicorp.com/boundary/docs/what-is-boundary ウェブサイト: https://www.developer.hashicorp.com/boundary/ フォーラム: HashiCorp Discuss ドキュメント: https://developer.hashicorp.com/boundary/docs チュートリアル: HashiCorpのLearnプラットフォーム...

CVE-2026-84376

Astro is a web framework for content-driven websites. Prior to 7.2.4 , it stripped a configured non-root base path from request pathnames using a string-prefix check without verifying a path-segment boundary. For example, with base "/app", a request to "/appX/admin" resolved internally to the pro...

CVE-2026-24423

CVE-2026-24423 root@kitploit: CVE-2026-24423 – 재현 ⚠️ 보안 연구 및 승인된 테스트 전용 / For security research and authorized testing only 개요（Overview） 이 프로젝트는 CVE-2026-24423 취약점을 재현하기 위한 것입니다. 해당 취약점은 SmarterMail ConnectToHub 기능에 존재하며, 근본 원인은 다음과 같습니다: - 관리자 수준 인터페이스에 인증이 없음 - 서버가 사용자가 지정한 Hub에 능동적으로 연결함（SSRF） ...

CVE-2025-7783-poc

form-data boundary randomness vulnerability CVE-2025-7783 主に https://hackerone.com/reports/2913312 を基にしています。著者は https://hackerone.com/parrot409?type=user です。 インストール: npm install python3 がインストールされ、z3 モジュールが利用可能であることを確認してください（pip3 install -r requirements.txt）-- エクスプロイトコードは python3...

CVE-2026-27597

CVE-2026-27597 - 버전 원격 코드 실행 빠른 사용법 root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe 악용 참고 사항 심각도: CRITICAL CVSS: 10.0 영향: 기밀성, 무결성, 가용성 게시일: 2026-02-25 기술 요약 Enclave는 안전한 AI 에이전트 코드 실행을 위해 설계된 보안 JavaScript 샌드박스입니다. 버전 2.11.1 이전에는 @enclave-vm/core에 의해...

ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

A flaw was found in the ip-address library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass...

CVE-2026-66730-Infinite-Loop-DoS-in-facil.io-MIME-Parser

Уведомление о безопасности: Бесконечный цикл DoS в MIME-парсере facil.io Частичная граница Назначенный CVE ID : CVE-2026-66730 Продукт: facil.io Затронутые версии: facil.io = 0.6.0 все 0.6.x, все 0.7.x, master; появился вместе с MIME-парсером в 0.6.0 Компонент: lib/facil/http/http.c,...

CVE-2026-22019-libcurl-HTTP-2-CONNECT-Tunnel-Mixup

CVE-2026-22019 – Смешивание туннелей HTTP/2 CONNECT в libcurl Код программы C-симуляция root@kitploit: // curlhttp2tunnelmixup.c - Simulated libcurl handling CONNECT over HTTP/2 include void handlehttp2streamint streamid // Vulnerability: after CONNECT, the proxy mixes streams with the tunneled...

CVE-2026-73714

CVE-2026-73714 is an authenticated sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer . An authenticated low-privilege operator user can access data beyond what their existing privilege level authorizes, potentially leading to further unauthorized access. ...

CTF-Web-Exploitation

Десинхронизация Незер-портала HUUP "Я путешествую не по проложенным дорогам, а свободно прыгаю через пустоту. Упакуй меня неправильно, и я доставлю секрет не на тот порог." Описание Задача представляет собой приложение HTTP/3 QUIC, работающее поверх UDP. Поскольку UDP не сохраняет состояние, а...

CVE-2026-84126

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

EUVD-2026-69075

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84126

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84126 Incorrect boundary conditions in the Layout: Grid component

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84126 Incorrect boundary conditions in the Layout: Grid component

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84126

CVE-2026-84126 is a vulnerability in the Layout: Grid component of Firefox , caused by incorrect boundary conditions . The flaw allows a network-based attack with low complexity and no required privileges , but user interaction is required (e.g., visiting a crafted page). The impact is limited to...

CVE-2026-82873

ToolJet through 3.0.0-ee-beta.2 contains authorization bypass vulnerabilities in the POST /api/v2/resources/export endpoint that allow authenticated users to disclose TooljetDB table schemas across workspace boundaries and export app definitions across granular permission boundaries. Attackers ca...