EUVD-2026-88560

SiYuan before v3.8.4 fails to enforce publish-access checks in the getCurrentAttrViewImages endpoint, allowing publish readers to retrieve image asset paths from unauthorized databases. Attackers can call the endpoint with an unrendered database identifier obtained through related endpoints to le...

log4j2-exploit

Log4Shell CVE-2021-44228 prueba de concepto Requisitos Java JDK/JRE 8 o una versión posterior curl exploitable Aplicación simple de Spring Boot que sirve una página de inicio de sesión con usuario y contraseña. Registra el nombre de usuario cuando se envía por POST a /. No es necesario que la...

cve-2025-32711

CVE-2025-32711 EchoLeak 检测工具 🔐 概述 CVE-2025-32711（代号“EchoLeak”）是 Microsoft 365 Copilot 中的一个严重的零点击漏洞，允许攻击者在无需任何用户交互的情况下窃取敏感的组织数据。此仓库包含检测和修复工具，帮助组织评估其暴露面并实施保护措施。 演示 基于 PowerShell 的检测与修复工具演示 漏洞详情 CVE ID : CVE-2025-32711 代号 : EchoLeak CVSS 评分 : 9.3（严重） 类型 : 大模型作用域违规 / AI 命令注入 受影响产品 : Microsoft 365...

external_c2_framework

Framework externalc2 Framework en Python para construir y utilizar interfaces que transfieran datos entre frameworks, con un enfoque específico en servir como extensión para frameworks de Comando y Control. Actualmente, esto solo está pensado como una implementación de la especificación External ...

CVE-2026-25212

CVE-2026-25212 – Percona PMM RCE PoC Critical – CVSS 9.9 – Authenticated Remote Code Execution in PMM 3.7. Description This proof‑of‑concept exploits a vulnerability where an internal PostgreSQL user in PMM retains 'SUPERUSER' privileges. An authenticated attacker with 'pmm-admin' rights can abus...

This Week in Spring - September 29th, 2026

Hi, Spring fans! Welcome to another rip-roarin' and exciting installment of This Week in Spring! We've got a ton of cool stuff to look at this week, so let's dive right into it! an important update on Spring's release practice Speaking of which, we had a slew of releases on the 24th, including...

EUVD-2026-89362

metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference IDOR in the MCP transport session dispatch. The session store getSession in session-lifetime-manager.ts is keyed only by the client-supplied mcp-session-id header with no owner, namespace, or endpoint binding, and the...

Paused shared dashboard access tokens still expose data source configuration

Pausing a shared public dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard’s data sources, including stored credential...

CVE-2026-79537

metatool-ai MetaMCP versions through 2.4.22 are vulnerable to an Insecure Direct Object Reference (IDOR) in the MCP transport session dispatch. The root cause is that the session store (specifically the getSession function in session-lifetime-manager.ts) is keyed solely by the client-supplied mcp...

nginx

CVE-2017-7529 唐胜表@portfolio10 摘要 本实验重现了Nginx服务器在处理Range请求过程中发生的缓存漏洞CVE-2017-7529，并展示漏洞的实际行为 漏洞：由于Nginx对Range头处理错误，可能导致缓存数据暴露 影响：服务器缓存文件中的敏感数据泄露 环境配置与运行 操作系统：Windows 10 Docker, Python 1. 在特定目录下创建文件夹 2. 创建Dockerfile、poc.py、docker-compose.yml文件 3. 运行'docker compose up -d' 4...

fuzzowski

Fuzzowski █ █ ████████ ██████████ ██ ████ ██ ██ ████ ██ ████ ████ █ ████████████ █ █ ██████████ █ Fuzzowski 网络模糊测试器 █ █ █ █ 🄯 Fuzzers, inc. ██ ██ 作者：Mario Rivas 这个理念是打造我们真正想要使用的网络协议模糊测试器。 该工具的目标是协助完成网络协议模糊测试的全过程，允许定义通信内容，帮助识别导致服务崩溃的“可疑点”，并提供更多功能。 最近更新 2019年12月16日 数据生成模块 已完全重写（原语、块、请求）...

xzf

Introduction xzf is a simple PoC demonstrating how EXIF data can be used for command and control. xzf GETs an image from a predetermined URL, then reads the software tag for an authentication string. If the string matches, xzf will execute anything contained within the ImageDescription tag. Usage...

CVE-2026-102365 mall4j through 4.0 Missing Authorization in Admin User Address Endpoints

mall4j through 4.0 fails to enforce authorization checks on GET endpoints in UserAddrController that retrieve customer address data. Authenticated attackers can call /user/addr/page and /user/addr/info endpoints to harvest all customer addresses including names, phone numbers, and postal...

CVE-2026-102365

The mall4j framework, through version 4.0 , is vulnerable to a missing authorization flaw in the UserAddrController component. Specifically, the application fails to enforce proper authorization checks on the GET endpoints /user/addr/page and /user/addr/info. This allows authenticated attackers t...

CVE-2022-36804

CVE-2022-36804 根据深信服安全团队最近发现的信息，Bitbucket Server 和 Bitbucket Data Center 组件存在一个命令注入漏洞。攻击者如果具有私有或公共 Bitbucket 仓库的读取权限，或者具有公共仓库的写入权限，则可以提交恶意 HTTP 请求来执行任意代码，并最终获取对服务器的访问权限。 此仓库包含该漏洞的有效载荷文件和完整 POC。...

CVE-2024-57373

CSRF Vulnerability in LifestyleStore v1.0 📌 Overview This repository documents a Cross-Site Request Forgery CSRF vulnerability identified in the LifestyleStore v1.0 project. The flaw allows attackers to perform unauthorized actions on behalf of authenticated users, posing risks to data integrity...

CVE-2022-36539

CVE-2022-36539 Referencia Directa Insegura a Objetos IDOR WeDayCare B.V. WeDayCare B.V Ouderapp anterior a v1.1.22 permite a los atacantes alterar el valor del ID en llamadas interceptadas para obtener acceso a los datos de otros padres e hijos. El tráfico con la API se hace transparente a través...

CVE-2024-6678

CVE-2024-6678 - GitLab: Disparo Arbitrario de Usuario en Pipeline Schedule PoC para CVE-2024-6678 Descripción de la vulnerabilidad GitLab permite a los usuarios ejecutar manualmente las programaciones de pipelines de CI/CD Pipeline Schedules mediante el botón «Play». La vulnerabilidad consiste en...

CVE-2026-102333

httpdbg before 2.2.1 fails to validate URL schemes in recorded HTTP request URLs rendered as clickable links in the web interface. Attackers controlling traffic recorded by httpdbg can supply javascript: scheme URLs that execute malicious scripts in the application origin when clicked, allowing...

Twitter-Info

Información de Twitter Un simple script de Python para obtener información de la cuenta de Twitter como: Nombre Siguiendo Seguidores Me gusta Fecha de la cuenta Foto de perfil solo con el nombre de usuario o el enlace del perfil. Uso python3 twitterinfo.py or Ejemplo Entrada python twitterinfo.py...