hackerone

hackerone 1 から 1500000 まで、HackerOne の API である https://api.hackerone.com/v1/hackers/reports/id をブルートフォースし、開示されたすべてのハッカーワンレポートを収集しました。 ID が 1500000 より大きいレポートも、さらに存在する可能性があります。 reports.csv ファイルには 10000 件以上の開示レポートが含まれており、各行に reportid、link、title、state が含まれています。 同じことを行うには、h1reports.py スクリプトを使用できます。...

JoomlaUX JUX Real Estate 3.4.0 - Reflected XSS

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla. It has been classified as problematic. Affected is an unknown function of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties. The manipulation of the argument Itemid/jpyearbuilt leads to cross...

gha-lab-a7f6217d26

自動化研究アーティファクト — 上流プロジェクトではありません。 このリポジトリは、公開済みの GitHub Actions ワークフロー脆弱性の再現を目的とした、ラヴァル大学の修士論文のために自動化ハーネスによって構築された使い捨てラボです。これは wp-graphql/wp-graphql のコミット b216fe22f3a119f256511ec7353f536fee6886ac（2026-02-20）時点の逐語的スナップショットであり、そのプロジェクト自身のライセンスに基づいて再配布されています。ライセンスファイルはこのスナップショットに変更なしで含まれています。...

remic

remic 애플리케이션 종속성에서 공개된 취약점을 탐지하는 취약점 스캐너 사용법 root@kitploit: $ remic -h NAME: remic - A simple and fast tool for detecting vulnerabilities in application dependencies USAGE: remic options file VERSION: 0.0.2 OPTIONS: --format value, -f value format table, json default: "table" --severity value, -s...

Chrome-CVE-2024-2887-RCE-POC

Chrome-CVE-2024-2887-RCE-Poc概要 脆弱性名：Google Chrome Type Confusion 脅威タイプ：コード実行 悪用可能性：高 POC状態：公開済み 野中悪用状態：未公開 EXP状態：公開済み 技術詳細状態：公開済み This can be considered a variant bug of CVE-2024-2887 discovered by Manfred Paul and presented in Vancouver 2024. 注記...

CVEs

CVEs これらは、CVEプログラムを通じて私が特定し、開示した脆弱性です。...

CVE-2021-21972

VMware vCenter Server RCE — CVE-2021-21972 研究ラボ 著者: Niranjan Pokhrel 公開されている重大なVMware vCenter Serverの脆弱性を、隔離された自宅ラボで再現・文書化する独立した研究プロジェクト。脆弱性クラス、攻撃経路、防御策を理解することを目的とする。 概要...

vulnerability-research

脆弱性調査 公開された脆弱性やその他の発見を収集したコーパスです。...

apache__nifi_CVE-2022-33140_1-16-22

Apache NiFi ステータス リソース 連絡先 !Track Issueshttps://img.shields.io...

EUVD-2026-80091

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

EUVD-2026-80082

A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this vulnerability is the function generateindexpasien of the file application/models/appglobaladminmodel.php. Executing a manipulation of the argument cari can lead to sql...

CVE-2026-92221 gedelumbung HospitalManagement app_global_admin_model.php generate_index_pasien sql injection

A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this vulnerability is the function generateindexpasien of the file application/models/appglobaladminmodel.php. Executing a manipulation of the argument cari can lead to sql...

CVE-2026-91090

A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gfnodeactivateex of the file scenegraph/basescenegraph.c. This manipulation causes stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclose...

CVE-2026-91086

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmxprocess of the file filters/reframempgvid.c of the component MPEG Video Reframer. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The...

EUVD-2026-78283

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...

CVE-2026-90852 luben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use after free

A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. Such manipulation leads to use after free. The attack can be executed remotely. The exploit has...

EUVD-2026-78251

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /College/login.php. The manipulation of the argument User leads to sql injection. The attack may be initiated remotely...

CVE-2026-90849 SourceCodester College Notes Gallery Management System login.php sql injection

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /College/login.php. The manipulation of the argument User leads to sql injection. The attack may be initiated remotely...

CVE-2026-90846

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

EUVD-2026-78242

A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iuxset.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and ma...