ca-clone

CAクローニングスクリプト HTTPSクライアント攻撃で使用するCA証明書をクローンするためのスクリプト集です。現在、ルートComodo CAとDigicert CAをクローンするスクリプトが含まれており、どちらもIoTデバイスでかなり広く信頼されています。 使用方法 いずれかのスクリプトをその場で実行すると、キーと証明書が自動的に生成されます。一般的には、どちらか一方を実行するだけで十分ですが、特定のCAが必要になる可能性がある場合に備えて、両方がここに含まれています。 生成されたP12をHTTPSプロキシにインポートします。 Burpでは、Proxy - Options...

uaf-2023-28205

CVE-2023-28205: Apple WebKit Use-After-Free 취약점 이 취약점은 Apple WebKit에 영향을 미치며, 악의적으로 조작된 웹 콘텐츠를 통해 WebKit 프로세스 컨텍스트에서 임의 코드 실행이 가능해질 수 있습니다. 이 리포지토리에서 분석된 영향받는 WebKit 빌드는 WebKit-613.1.17.1 PlayStation / Safari 15.4 계열을 기반으로 합니다. 설명 PoCProof of Concept는 구조화된 복제 작업 중 Map 및 Date와 같은 JavaScript 객체의 등록...

CVE-2026-46331

CVE-2026-46331 - «pedit COW» – Руководство по оценке уязвимости и смягчению последствий Этот репозиторий содержит базовые административные инструменты для проверки подверженности системы и применения временных мер по смягчению последствий уязвимости локального повышения привилегий CVE-2026-46331...

CVE-2026-86494

In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues...

CVE-2026-86494

In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues...

CVE-2026-86494

In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues...

CVE-2026-86494

In JetBrains YouTrack versions prior to 2026.2.18634 , cloning a whiteboard allowed an attacker with low privileges to make unauthorized changes to links on issues they could not otherwise access. The vulnerability is rated CVSS 7.7 (High) with changed scope and high integrity impact , requiring ...

EUVD-2026-72510

In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues...

CVE-2018-17456

CVE-2018-17456 Обзор уязвимости Название уязвимости: Ошибка проверки ввода Git Номер CNNVD: CNNVD-201810-234 Уровень опасности: Критический Номер CVE: CVE-2018-17456 Тип уязвимости: Ошибка проверки ввода Дата публикации: 2018-10-08 Тип угрозы: Удаленный Дата обновления: 2019-04-25 Производитель:...

Cartero

Cartero URL http://section9labs.github.io/Cartero/ 설명 강력한 피싱 프레임워크로, 완전한 기능을 갖춘 CLI 인터페이스를 제공합니다. 이 프로젝트는 수년간의 업무 수행 과정에서 제대로 작동하지 않는 도구들에 대한 필요성에서 탄생했습니다. 비슷한 프로젝트가 많지만, 사용 편의성과 커스터마이징 기능을 모두 갖춘 적절한 솔루션을 찾을 수 없었습니다. Cartero는 독립적인 작업을 수행하는 명령들예: Mailer, Cloner, Listener, AdminConsole 등로 나뉜 모듈형...

cve-2025-48384-poc

CVE-2025-48384용 PoC 참조: CVE-2025-48384 실행 방법: root@kitploit: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git 예제 출력: root@kitploit: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning into 'test'...

CVE-2026-84778

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

CVE-2026-83615

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.1.5 through 0.6.0, appendElement in lib/sax.js uses copy to clone the complete currentNSMap for each nested element...

DEBIAN-CVE-2026-83615

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.1.5 through 0.6.0, appendElement in lib/sax.js uses copy to clone the complete currentNSMap for each nested element...

CVE-2026-83615 xmldom: Quadratic-memory consumption

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.1.5 through 0.6.0, appendElement in lib/sax.js uses copy to clone the complete currentNSMap for each nested element...

CVE-2026-83615 xmldom: Quadratic-memory consumption

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.1.5 through 0.6.0, appendElement in lib/sax.js uses copy to clone the complete currentNSMap for each nested element...

CVE-2026-47836

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

CVE-2026-47836 Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

EUVD-2026-66637

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

PT-2026-82231

Name of the Vulnerable Software and Affected Versions Spring Cloud Config versions 5.0.0 through 5.0.4 Spring Cloud Config versions 4.3.0 through 4.3.4 Spring Cloud Config versions 4.0.0 through 4.2.8 Spring Cloud Config versions 3.1.14 and earlier Description The base directory used by the Sprin...