CVE-2026-95654

Databasement before 1.7.14 is affected by an authorization bypass via stale invitation tokens . The vulnerability resides in the invitation acceptance flow (AcceptInvitation.php), where the system validates the token only when the page loads and caches the authorization decision without re-checki...

CVE-2018-9995-ModifiedByGwolfs

状態 このツールはgwolfsによって書かれたCVE-2018-9995の改良版であり、学習目的のみに使用するものです。違法な目的で使用しないでください。これにより生じる結果はすべてあなた自身の責任です。元のバージョンはezelfによって書かれており、https://github.com/ezelf/CVE-2018-9995dvrcredentials にあります。 ezelfに感謝します。 エクスプロイト: 2つの方法があります。method1またはmethod2のREADME.mdを読むことができます。method1をお勧めします。...

TREVORspray

TREVORspray 2.0 TREVORsprayは、スレッド、SSHプロキシ、略奪モジュールなどを備えたモジュール式パスワードスプレイヤーです！ 作者: @thetechr0mancer インストール: root@kitploit: pip install git+https://github.com/blacklanternsecurity/trevorproxy pip install git+https://github.com/blacklanternsecurity/trevorspray 付属のブログ記事で楽しい解説とクールなデモをご覧ください！ 機能...

CVE-2020-1472

CVE-2020-1472 POC 最新のimpacket（netlogon構造が追加されたバージョン）をGitHubから入手する必要があります。 デフォルトでは、これによりドメインコントローラアカウントのパスワードが変更されることに注意してください。これによりDCSyncが可能になりますが、他のドメインコントローラとの通信も切断されるため、十分注意してください！ 詳細情報と元の研究はこちら エクスプロイト手順 上記のブログ/ホワイトペーパーを読んで、何をしているのか理解してください DCのIPアドレスとNetBIOS名を指定してcve-2020-1472-exploit.pyを実行しま...

MalSeclogon

MalSeclogon 一个用于操作Seclogon服务的小工具。 完整技术细节见： https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-2.html https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-3.html 用法 root@kitploit: MalSeclogon v0.2 @splintercode Args: -p Pid of the process to spoof the PPID through...

honeybits

Honeybits 함정의 효과를 높이기 위해 프로덕션 서버와 워크스테이션 전체에 breadcrumbs와 honeytokens를 심어 공격자를 honeypot으로 유인하는 간단한 PoC 도구입니다. 저자: Adel "0x4D31" Karimi. 이 프로젝트의 Windows 버전: honeybits-win 배경 허니팟은 보안 연구자들이 공격자의 도구, 기술 및 동기를 연구하는 데 수년간 사용되어 왔지만, 여전히 프로덕션 환경에서 널리 채택 및 배포되지 못하고 있습니다. 그 이유 중 하나는 전통적인 허니팟 구현이 정적이며 성공 여부...

postEX

PostEX - 사후 익스플로잇 정찰 에이전트 승인된 보안 테스트 전용입니다. 무단 사용은 불법입니다. PostEX는 Windows용 Python 기반 사후 익스플로잇 정찰 에이전트입니다. 시스템 정보, 권한 상태, 설치된 패치, 방어 메커니즘, 네트워크 구성, 자격 증명 및 지속성 메커니즘을 수집한 후 구조화된 JSON 보고서를 생성합니다. 선택적으로 PostEX는 OpenRouter API를 통해 LLM에 보고서를 전송하여 자동 Red Team공격 경로 또는 Blue Team방어 감사 분석을 수행할 수 있습니다. 기능 시스...

CVE-2026-92133

Jenkins GitLab Plugin 1.2149.vcfc32c82bf7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the credentials ID alone, omitting the folder in which the credentials are resolved, allowing attackers with Item/Configure...

CVE-2026-92133

Jenkins GitLab Plugin 1.2149.vcfc32c82bf7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the credentials ID alone, omitting the folder in which the credentials are resolved, allowing attackers with Item/Configure...

EUVD-2026-80757

Jenkins GitLab Plugin 1.2149.vcfc32c82bf7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the credentials ID alone, omitting the folder in which the credentials are resolved, allowing attackers with Item/Configure...

EUVD-2026-80754

Jenkins Pipeline: Multibranch Plugin 841.vec5b9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to...

EUVD-2026-79181

Server-Side Request Forgery SSRF in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier allows a low-privileged authenticated user to obtain other users' credentials and reach internal or cloud-metadata network endpoints via a crafted connection definition submitted for...

CVE-2026-91993

Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, allowing authenticated users to access repositories from other workspaces. Attackers can submit repository identifiers from different workspaces to enumerate repository...

CVE-2026-91993 Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list

Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, allowing authenticated users to access repositories from other workspaces. Attackers can submit repository identifiers from different workspaces to enumerate repository...

CVE-2026-77883

Exposure of sensitive information through data queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User read to access LinkedAccount's if...

CVE-2026-78807

A flaw was found in wpasupplicant. A local attacker can exploit missing validation in the driver-based PMKSA Pairwise Master Key Security Association selection path to bypass proper network context and AKMP Authentication Key Management Protocol matching for PMKSA caching. This could allow the...

AZL-100172 CVE-2026-80928 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smackfilesendsigiotask When inspecting the credentials of another task, objective credentials -realcred, accessed with taskcred must always be used. Accessing -cred on a non-current task is forbidden unless...

CVE-2026-80928

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smackfilesendsigiotask When inspecting the credentials of another task, objective credentials -realcred, accessed with taskcred must always be used. Accessing -cred on a non-current task is forbidden unless...

CVE-2026-80928 smack: fix cred UAF in smack_file_send_sigiotask()

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smackfilesendsigiotask When inspecting the credentials of another task, objective credentials -realcred, accessed with taskcred must always be used. Accessing -cred on a non-current task is forbidden unless...

CVE-2026-88017

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.0 until 1.75.1, the FTP auth-proxy driver in cmd/serve/ftp/ftp.go stores one obscured password per username in the server-wide userPass mapstringstring instead of binding the...