exfil-scan

exfil-scan Scan LLM-Ausgaben und KI-generierte Inhalte auf Datenexfiltrationssignale, bevor sie Benutzer, Protokolle oder nachgelagerte Systeme erreichen. 1 Warum exfil-scan existiert Moderne LLM-Anwendungen verarbeiten routinemäßig sensible Prompts, interne Dokumente, API-Antworten und...

Pocket-ID has an Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none

Summary The OIDC authorization page in the pocket-id frontend redirects the browser to an attacker-controlled URL without consulting the backend redirecturi allow-list when the request uses prompt=none. An attacker who knows a valid clientid can craft an /authorize link that sends a victim or a...

GHSA-2WVM-8MVP-22QV Pocket-ID has an Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none

Summary The OIDC authorization page in the pocket-id frontend redirects the browser to an attacker-controlled URL without consulting the backend redirecturi allow-list when the request uses prompt=none. An attacker who knows a valid clientid can craft an /authorize link that sends a victim or a...

Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-

Esecuzione di codice remoto – CVE-2024-28397 pyload-ng / js2py Questo repository contiene un exploit Proof-of-Concept PoC per CVE-2024-28397 , una vulnerabilità di esecuzione di codice remoto che affligge pyload-ng a causa dell'uso non sicuro di js2py. Disclaimer: Questo PoC è solo a scopo...

Aqua's archive extraction follows attacker-planted symlinks, allowing writes outside the install directory

Summary aquaproj/aqua extracts downloaded tool archives through pkg/unarchive/archives.go using github.com/mholt/archives. The archive handler creates symlink entries with os.Symlinkf.LinkTarget, dstPath without validating that the symlink target resolves inside the extraction destination. A...

GHSA-MF5C-HW34-4HPP Aqua's archive extraction follows attacker-planted symlinks, allowing writes outside the install directory

Summary aquaproj/aqua extracts downloaded tool archives through pkg/unarchive/archives.go using github.com/mholt/archives. The archive handler creates symlink entries with os.Symlinkf.LinkTarget, dstPath without validating that the symlink target resolves inside the extraction destination. A...

EXPLOIT-CVE-2026-40901

DataEase — Unauthentifizierte RCE über eine 4-Schwachstellen-Kette CVE-2026-40901 und andere Authentifizierungsumgehung → JDBC-Blocklist-Umgehung beliebiges Dateilesen → SQL-Injection → Java-Deserialisierung in Quartz → Remote-Code-Ausführung alsroot. In sich geschlossenes lokales Labor Docker +...

EXPLOIT-CVE-2026-26216

CVE-2026-26216 — Crawl4AI RCE non autenticata tramite hooks GHSA-5882-5rx9-xgxp CVSS 10.0 · RCE pre-autenticazione · CWE-94 Code Injection Esecuzione remota di codice non autenticata sul server Docker di Crawl4AI . Questo codice viene eseguito con exec all'interno di un "sandbox fatto in casa" — ...

Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Summary The per-entry percentages of a KDA asset's split royalties are validated by summing them into a uint32 accumulator and checking the sum against HundredPercent 10000, with no upper bound on each individual entry. Two split entries whose percentages sum to just over 2^32 wrap around below...

GHSA-CGC5-V3F2-8M2V Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Summary The per-entry percentages of a KDA asset's split royalties are validated by summing them into a uint32 accumulator and checking the sum against HundredPercent 10000, with no upper bound on each individual entry. Two split entries whose percentages sum to just over 2^32 wrap around below...

CVE-2026-32194

cve-id Spenden Unterstütze die Pflege dieses Projekts mit PayPal oder indem du den QR-Code unten scannst. ⚡ Einfache Nutzung Verwende dieses Projekt nur in sicheren und autorisierten Umgebungen wie: Lokale virtuelle Maschinen Docker-Container Isolierte Laborumgebungen Autorisierte...

CVE-2025-7558-PoC

CVE-2025-7558-PoC सारांश code-projects Voting System 1.0 में एक महत्वपूर्ण critical भेद्यता पाई गई है। प्रभावित तत्व फ़ाइल /admin/positionsadd.php का एक अज्ञात फ़ंक्शन है। Description तर्क में इस प्रकार की हेरफेर SQL इंजेक्शन की ओर ले जाती है। यह भेद्यता CVE-2025-7558 के रूप में दर्ज है। हमला...

GHSA-P7GW-2PCP-5PF8 Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)

Summary When a marketplace order is settled MarketBuy / BuyItNow, and auction Claim, the buyer's payment is split three ways — referral, royalties, and the seller market-order owner remainder: marketOwnerAmount = CurrentBid − referralAmount − royaltiesAmount Referral and royalties are paid out...

Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)

Summary When a marketplace order is settled MarketBuy / BuyItNow, and auction Claim, the buyer's payment is split three ways — referral, royalties, and the seller market-order owner remainder: marketOwnerAmount = CurrentBid − referralAmount − royaltiesAmount Referral and royalties are paid out...

CVE-2025-24893

XWiki SSTI Exploit Ein Python-Exploit für die XWiki-Schwachstelle Server-Side Template Injection SSTI über Groovy-Template-Injection im SolrSearch-Endpunkt. Schwachstelle Typ : Server-Side Template Injection SSTI Komponente : XWiki SolrSearch-RSS-Feed Auswirkung : Remote Code Execution Betroffene...

CVE-2026-0770

CVE-2026-0770 Übersicht Dieses Tool wird verwendet, um die Schwachstelle CVE-2026-0770 in der Anwendung Langflow zu testen. Es nutzt den Endpoint /api/v1/validate/code, um eine Remote Code Execution RCE durchzuführen. Entwickler: Ohang Dank an: @C4p333 Zweck: Sicherheitsforschung & Bildungszwecke...

CVE-2025-8359

CVE-2025-8359 AdForest Repo: Nxploited/CVE-2025-8359 Script di exploit: CVE-2025-8359.py 📋 Descrizione CVE: CVE-2025-8359 Tipo di vulnerabilità: Bypass dell'autenticazione Prodotto interessato: AdForest - Tema WordPress per Annunci Classificati Versioni interessate: Fino alla 6.0.9 inclusa...

Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers

Google on Thursday announced new network security protections in Android 17 to bolster connection privacy, address cellular vulnerabilities, and safeguard the privacy of users' home networks. Topping the list is support for Encrypted Client Hello ECH, a privacy standard that prevents networks fro...

CVE-2026-82278 BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once

BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow runonce endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/runonce endpoint, which executes them with exec...

CVE-2026-82278 BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once

BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow runonce endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/runonce endpoint, which executes them with exec...