mongobleed

mongobleed CVE-2025-14847 OPCOMPRESSED 버퍼 오버리드를 통한 MongoDB 힙 메모리 노출 익스플로잇. 사용법 root@kitploit: $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017 --min-offset MIN Min doc length default: 20...

CVE-2023-5612

Tags RSS 피드에서 공개 이메일 노출 https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ root@kitploit: An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the user email...

CVE-2026-92031

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics: ImageLib component...

EUVD-2026-81397

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key ...

CVE-2026-91099

A flaw was found in HPLIP HP Linux Imaging and Printing software. Multiple vulnerabilities exist in several software components that could potentially allow a local attacker to achieve local code execution, escalate privileges, cause a denial of service DoS, disclose sensitive information, or...

CVE-2026-91098

A flaw was found in HP Linux Imaging and Printing HPLIP software. Multiple vulnerabilities exist that could allow a remote attacker to achieve remote code execution, escalate privileges, cause a denial of service, disclose information, or modify files without authorization under certain condition...

CVE-2024-58258

CVE‑2024‑58258 – SugarCRM SSRF 및 로컬 파일 노출 소개 이 저장소는 CVE‑2024‑58258 에 대한 개념 증명을 제공합니다. 이는 사용자 입력이 /css/preview API에서 LESS로 구문 분석되어 인증 없이 SSRF 또는 로컬 파일 접근을 허용하는 SugarCRM13.0.4 / 14.0.1 취약점입니다. 영향받는 버전 13.0.4 이전의 모든 상용 에디션 14.0.1 이전의 모든 상용 에디션 설명 SugarCRM은 /css/preview REST 엔드포인트에서 사용자가 제공한 GET 매개변수...

kernel: net: guard timestamp cmsgs to real error queue skbs

A flaw was found in the Linux kernel's networking component. This vulnerability allows a remote attacker to potentially access sensitive information or cause system instability. By sending specially crafted network packets, an attacker can exploit an issue in how the kernel handles timestamping f...

kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface VTI module. When a VTI tunnel device is moved to a different network environment, an unprivileged user in a separate user space can manipulate tunnel parameters. This manipulation could allow the user to intercept or redirect...

kernel: netfilter: conntrack_irc: fix possible out-of-bounds read

A flaw was found in the Linux kernel's netfilter conntrackirc module. This vulnerability allows for a possible out-of-bounds read. When parsing network traffic, if a command string is matched but subsequent parsing fails, the system does not properly exit, leading to the flaw. This could...

kernel: ipv6: sit: reload inner IPv6 header after GSO offloads

A flaw was found in the Linux kernel's Simple Internet Transition SIT tunnel driver for IPv6. When processing network traffic with Generic Segmentation Offload GSO enabled, the driver may use a stale pointer to the inner IPv6 header after the socket buffer skb head has been reallocated. This can...

CVE-2025-58434-poc

CVE-2025-58434 — 토큰 노출을 통한 Flowise 계정 탈취 ⚠️ 이 저장소는 교육 및 공인된 보안 연구 목적으로만 제공됩니다. 소유하지 않았거나 명시적 테스트 허가를 받지 않은 시스템에 대한 무단 사용은 불법 입니다. 목차 개요 취약점 세부 정보 공격 흐름 영향을 받는 버전 저장소 구조 요구 사항 설치 사용법 예시 출력 수정 및 완화 조치 공개 타임라인 참고 자료 면책 조항...

CVE-2018-13379

CVE-2018-13379 - FortiGate SSL-VPN 경로 탐색 PoC 설명 CVE-2018-13379Fortinet FortiGate SSL VPN 웹 포털의 심각한 경로 탐색 취약점에 대한 개념 증명PoC 스크립트입니다. 이 취약점으로 인해 인증되지 않은 공격자는 특수하게 조작된 HTTP 리소스 요청을 통해 시스템 파일을 다운로드할 수 있으며, 민감한 정보가 포함된 세션 파일이 노출될 수 있습니다. 취약점 세부 정보 CVE ID : CVE-2018-13379 CVSS 점수 : 9.8 치명적 영향받는 버전 :...

CVE-2026-91019

The Event Booking Manager for WooCommerce WordPress plugin before 5.6.0 does not restrict who can view its stored payment gateway configuration, allowing users with Contributor-level access and above to read the site's PayPal and Stripe credentials, including their secret keys...

CVE-2026-91016

The Motors WordPress plugin before 1.4.121 does not verify that a request is authorized to view a user's non-published listings before returning them, allowing unauthenticated attackers to read any author's draft, pending and private car listings - including titles, prices, media URLs and seller...

CVE-2026-90923

The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete the stored payment parameters of other customers' orders...

CVE-2026-87836

The Comments Import & Export WordPress plugin before 2.5.4 does not restrict its comment export to users able to moderate comments, nor scope the export to content owned by the requesting user, allowing users with the Author role and above to retrieve every comment on the site, including commente...

CVE-2026-86446

The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is checked, allowing unauthenticated attackers to obtain the correct answer to every option of a question, along with the instructor's explanation, on courses configured to be taken...

CVE-2026-91019

CVE-2026-91019 affects the Event Booking Manager for WooCommerce WordPress plugin in versions before 5.6.0 . The plugin fails to restrict access to its stored payment gateway configuration, allowing any user with Contributor-level permissions or higher to read the site's PayPal and Stripe credent...

CVE-2026-91019 Event Booking Manager for WooCommerce < 5.6.0 - Contributor+ Payment Gateway Credential Disclosure

The Event Booking Manager for WooCommerce WordPress plugin before 5.6.0 does not restrict who can view its stored payment gateway configuration, allowing users with Contributor-level access and above to read the site's PayPal and Stripe credentials, including their secret keys...