CVE-2026-90460

A flaw was found in OpenStack Keystone. Tokens obtained via delegated authentication methods trusts, application credentials, OAuth1 access tokens can move a credential to an unauthorized project by supplying a new projectid in a PATCH /v3/credentials request, because only the pre-update project ...

CVE-2026-79993

A flaw was found in Apache ZooKeeper. The deleteContainer opcode is processed without verifying Access Control List ACL permissions. A remote, unauthenticated attacker with network access to the ZooKeeper client port can delete any empty persistent znode, including container and TTL nodes. This c...

CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-

CVE-2025-8088 WinRAR: Подтверждение концепции PoC-эксплойт Этот репозиторий содержит скрипт подтверждения концепции PoC для CVE-2025-8088 — уязвимости path traversal в WinRAR версий до 7.12. Данный PoC демонстрирует, как злоумышленники могут использовать уязвимость для размещения вредоносных файл...

email-osint-ripper

email-osint-ripper EO-RIPPER.PY — это идеальный инструмент для проведения OSINT по одному email или списку email. Его функциональные возможности разнообразны и позволяют получить много информации о нашей цели. Видео https://www.youtube.com/watch?v=Eo9mJLBc2c&t=254s...

CVE-2020-11019

CVE-2020-11019 Dans FreeRDP version 2.0.0 ou antérieure, lorsque le logger est réglé sur "WLOGTRACE", un possible crash de l'application peut se produire en raison d'une lecture d'un index de tableau invalide. Les données peuvent être affichées sous forme de chaîne sur le terminal local. Cela a é...

cve-2025-66478_rce_vulnerable

Blog moderne avec shadcn/ui Un blog moderne et élégant construit avec Next.js 16, React 19, shadcn/ui et Tailwind CSS. IMPORTANT : Projet Next JS VULNÉRABLE créé uniquement à des fins éducatives, de tests et d'exploitation, INSTALLATION NON RECOMMANDÉE EN PRODUCTION, UNIQUEMENT EN ENVIRONNEMENT...

CVE-2023-30146

CVE-2023-30146 - Exploit de caméra Web Assmann/HooToo - Exposition de données sensibles Description Un problème a été découvert dans les caméras IP de marque HooToo et Assmann. Le firmware stocke les identifiants de l'administrateur et des utilisateurs dans la sauvegarde en texte clair. La...

CVE-2024-0044-EXP

CVE-2024-0044-EXP Использование CVE-2024-0044 для резервного копирования данных на Android 12, 13 до мартовского обновления безопасности 2024 года Использование ./CVE-2024-0044-EXP.sh Пример ./CVE-2024-0044-EXP.sh com.tencent.mm Описание Обнаружение уязвимости:...

opencast-CVE-2021-43821-env

opencast-CVE-2021-43821-env Environnement de vulnérabilité opencast CVE-2021-43821 fuite d'informations sensibles Article de reproduction : https://mp.weixin.qq.com/s/fjna3mHraPmEy1b1wnEYrQ...

CVE-2018-1273

CVE-2018-1273 Environnement pour CVE-2018-1273 CVE-2018-1273 : RCE avec Spring Data Commons https://pivotal.io/security/cve-2018-1273 Application https://github.com/spring-projects/spring-data-examples/tree/master/web/example Construction $ docker build -t cve-2018-1273 . Exécution $ docker run -...

s2-048

s2-048 Exploit pour s2-048, CVE-2017-9791. / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc:...

ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence AI pen testing tool named ARTEX to carry out the attacks. The activity, per CrowdStrike Intelligence, was active from late September to early...

CVE-2026-105826

A security policy bypass exists in the ImageMagick MAT decoder in versions before 6.9.13-55 and 7.x before 7.1.2-30 . A remote attacker can submit a specially crafted MAT image containing highly compressed data that causes the decoder to fail to enforce configured temporary file size limits. This...

CVE-2026-105823

...

CVE-2026-105823

Removed by vendor...

EUVD-2026-95010

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...

CVE-2026-105823 ImageMagick before 7.1.2-31 Policy Bypass in CUT Encoder

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...

CVE-2026-13257 IBM DataPower Gateway Insufficient Verification of Data Authenticity

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to forge signature requests due to improper verification of data authenticity...

CVE-2017-5638

LAB 1 — Injection OGNL dans Apache Struts2 CVE-2017-5638 / S2-045 I. ANALYSE DU SYSTÈME Analyse de la surface d'attaque Après le démarrage du conteneur, les journaux Struts2 montrent que l'application charge des fichiers de configuration familiers tels que struts-default.xml , struts-plugin.xml e...

EUVD-2026-94991

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive...