2199452 matches found
CVE-2026-19912 CVE-2026-19912
The Kaltura HTML5 player mwEmbed / html5lib contains an unauthenticated remote code execution vulnerability caused by unsafe data deserialization and unsanitized filesystem path construction. mwEmbedLoader.php accepts a user‑controlled ServiceUrl, whose response is passed to unserialize, and the...
AIP
Attacker IP Prioritization AIP Tool The Attacker IP Prioritization AIP is a tool to generate efficient and economic IP blocklists based on network traffic captured from honeypot networks. With the advent of 5G, IoT devices are directly connected often without firewall protection. Therefore we nee...
uafuzz
UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 stati...
urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage
Summary urllib supports redirect-following through followRedirect, which is expected behavior for an HTTP client. The issue is that, when following a redirect to a different origin, urllib preserves the caller-supplied request headers verbatim, including credential-bearing headers such as...
keyhacks
KeyHacksは、バグバウンティプログラムやペンテストで見つけたさまざまなAPIキーを検証する方法を示しています。 @Gwen001 が全プロセスをスクリプト化しており、こちらから入手できます。こちら 目次 ABTasty API Key Algolia API key Amplitude API Keys Asana Access token AWS Access Key ID and Secret Azure Application Insights APP ID and API Key Bazaarvoice Passkey Bing Maps API Key Bit.ly...
awesome-privacy
Una lista seleccionada de aplicaciones, software y proveedores que respetan la privacidad 🌐 awesome-privacy.xyz Espejo en CodeBerg | Añadir una sugerencia | Datos sin procesar y API Introducción Las grandes corporaciones ávidas de datos dominan el mundo digital, pero con poco o ningún respeto por...
Scrapling
Effortless Web Scraping for the Modern Web 選択メソッド · Fetcher の選び方 · スパイダー · プロキシローテーション · CLI · MCP モード Scrapling は、単一のリクエストから本格的なクロールまですべてを処理する適応型 Web Scraping フレームワークです。 そのパーサーはウェブサイトの変更から学習し、ページが更新されたときに要素を自動的に再配置します。Fetcher はすぐに使える Cloudflare Turnstile などのアンチボットシステムを回避します。そして Spider...
qu1ckdr0p2
关于 快速通过HTTP或HTTPS托管有效载荷和后利用二进制文件。 专为OSCP/PNPT等考试或HTB等CTF比赛设计。 欢迎提交Pull Requests和Issues，也欢迎任何贡献。 Qu1ckdr0p2附带别名和搜索功能。工具位于qu1ckdr0p2-tools仓库中。默认情况下，它会生成一个自签名证书用于--https选项；当Web服务器运行时，优先使用tun0接口，否则使用eth0。 common.ini定义了--search和-u选项中使用的映射别名。 当Web服务器运行时，屏幕上会打印出多个下载执行语句，可直接复制粘贴。 注意...
CVE-2026-24168
NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative privileges may cause command injection by sending crafted API requests. A successful exploit of this vulnerability may lead to code execution, escalation of privileges and...
EUVD-2026-65611
NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative privileges may cause command injection by sending crafted API requests. A successful exploit of this vulnerability may lead to code execution, escalation of privileges and...
CVE-2026-24168
NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative privileges may cause command injection by sending crafted API requests. A successful exploit of this vulnerability may lead to code execution, escalation of privileges and...
CVE-2026-24168
NVIDIA UFM Enterprise is affected by a command injection vulnerability in the IBDiagnet API . An authenticated attacker with administrative privileges on an adjacent network can send crafted API requests to exploit this flaw, potentially leading to code execution , privilege escalation , and info...
EUVD-2026-65610
NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator could inject commands by sending a crafted API request. A successful exploit of this vulnerability might lead to code execution, escalation of privileges and information disclosur...
CVE-2026-24167
NVIDIA UFM Enterprise contains a command injection vulnerability in its user management component . An authenticated administrator on an adjacent network can exploit it by sending a crafted API request , potentially leading to code execution , privilege escalation , and information disclosure . T...
CVE-2026-24167
NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator could inject commands by sending a crafted API request. A successful exploit of this vulnerability might lead to code execution, escalation of privileges and information disclosur...
CVE-2026-24167
NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator could inject commands by sending a crafted API request. A successful exploit of this vulnerability might lead to code execution, escalation of privileges and information disclosur...
CVE-2026-24169
NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject code by sending a specially crafted API request. A successful exploit of this vulnerability might lead to code execution, escalation of privileges and...
CVE-2026-24169
NVIDIA UFM Enterprise contains a vulnerability in its plugin management API . An authenticated user with low privileges can inject code by sending a specially crafted API request. A successful exploit may lead to code execution , privilege escalation , and information disclosure . The CVSS 3.1 sc...
EUVD-2026-65609
NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject code by sending a specially crafted API request. A successful exploit of this vulnerability might lead to code execution, escalation of privileges and...