CVE-2026-107814

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege...

CVE-2026-107807

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, Nginx UI accepts the Node.Secret master credential through the nodesecret query parameter in HTTP and WebSocket authentication paths instead of requiring the X-Node-Secret header. The credential can consequently...

CVE-2026-107809

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stores the JWT in that cookie. Because management endpoints do not universally require a CSRF token or perform Origin or...

CVE-2026-107810

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, internal/backup/restore.go extracts inner archives before applying the restorenginx and restorenginxui flags and permits symlinks targeting the live Nginx configuration path. An authenticated user who can create an...

CVE-2026-107808

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, POST /api/login checks EnabledOTP but does not require a WebAuthn assertion when EnabledPasskey is true and no TOTP secret is configured. A passkey-only account is therefore issued a session after password...

CVE-2026-107812

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the self-upgrade mechanism validates a downloaded binary only with a same-origin digest obtained from the same upgrade mirror. A compromised mirror or network attacker able to alter both responses can supply a...

CVE-2026-107811

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, ordinary authenticated users can access /api/nodes and /api/nodes/:id, whose responses serialize the node token field. The same token is accepted as X-Node-Secret by AuthRequired and maps the request to initUser,...

CVE-2026-102554

Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...

ScanX-AI_Based-Vulnerability-Scanning-System

ScanX — AI-Based Vulnerability Assessment System !Pythonh...

aggrokatz

aggrokatz What is this aggrokatz is an Aggressor plugin extension for CobaltStrike which enables pypykatz to interface with the beacons remotely. The current version of aggrokatz allows pypykatz to parse LSASS dump files and Registry hive files to extract credentials and other secrets stored...

DorkNet

DorkNet Selenium 기반의 Python 스크립트로, 취약한 애플리케이션을 찾기 위해 웹 검색을 자동화합니다. DorkNet은 단일 dork 또는 dork 목록을 인수로 받을 수 있습니다. 적절한 명령줄 인수가 전달된 후, 스크립트는 Selenium과 Geckodriver를 사용하여 원하는 결과를 찾고, 이를 텍스트 파일에 저장하여 SQLmap 또는 유사한 유틸리티로 추가 처리할 수 있도록 합니다. 사용법 git clone https://github.com/NullArray/DorkNet.git cd DorkNet...

hosts

!IMPORTANT Cloning this repository can take a long time! You probably just want to start with the latest version, not its whole history since 2018. Therefore you probably want to use git clone --depth 1 ... to save significant time. !NOTE With the exception of issues and PRs regarding changes to...

SuiteCRM-RCE

CVE-2020-28328 SuiteCRM 원격 코드 실행 - 로그 파일 시스템 설정 및 로그 파일 포이즈닝을 통한 취약점 개요 최근 저는 SuiteCRM에서 두 가지 취약점을 발견했습니다. 이 취약점들은 낮은 권한의 사용자가 기본 운영 체제에서 코드 실행을 달성할 수 있는 공격 체인을 제공합니다. 공격 체인은 크로스 사이트 스크립팅XSS으로, 이를 이용해 크로스 사이트 요청 위조CSRF를 수행할 수 있으며, 애플리케이션 구성을 변조하고 로그 파일을 포이즈닝하여 원격 코드 실행RCE으로 이어집니다. 이 모든 것은 악성...

CredSniper

CredSniper 개요 장점 기본 사용법 설치 스크린샷 Gmail 모듈 유지 관리자 기여 개요 CredSniper를 사용하여 SSL이 완전히 적용된 새로운 피싱 사이트를 쉽게 시작하고 자격 증명과 2FA 토큰을 캡처할 수 있습니다. API는 무작위로 생성된 API 토큰을 사용하여 다른 애플리케이션에서 소비할 수 있는 현재 캡처된 자격 증명에 대한 안전한 액세스를 제공합니다. 제공: 장점 Let's Encrypt를 통한 완전 지원 SSL 사실적인 피싱을 위한 정확한 로그인 양식 클론 모든 수의 중간 페이지 가능 예: Gmail...

CVE-2026-107815 MariaDB: one byte OOB write in DOS tables of the CONNECT engine

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...

EUVD-2026-95909

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...

CVE-2026-107815

The MariaDB server (versions 10.6.1 through 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2) contains a one-byte out-of-bounds (OOB) write in the CONNECT engine 's DOS table type. The vulnerability is caused by an incorrect boundary check , allowing an attacker-controlled offset to trigger...

CVE-2026-107815 MariaDB: one byte OOB write in DOS tables of the CONNECT engine

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...

CVE-2021-41773

CVE-2021-41773 Apache HTTP Server 2.4.49의 경로 탐색 CVE-2021-41773 교육 목적으로만 사용하세요 테스트 PoC 환경 설정 $ docker build -t cve-2021-41773 . $ docker run --rm -dit -p 8000:80 cve-2021-41773 작동 확인 $ curl http://localhost:8000 It works! 익스플로잇 보안상의 이유로 커밋되지 않았습니다. 참고 문헌...

CVE-2026-108157 Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linking

Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.signUp. Attackers can register a victim's unverified email on an enabled OAuth/OI...