cve-2022-31692

CVE-2022-31692 Демо Обзор Простое приложение Spring Boot, демонстрирующее конфигурацию, уязвимую к CVE-2022-31692. Эта уязвимость может привлечь внимание из-за своей серьёзности — она имеет базовую оценку CVSS 3.x 9,8, поскольку позволяет обойти аутентификацию. Цель этого проекта —...

procrustes

Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...

Adobe AEM Dispatcher <4.15 - Rules Bypass

Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass dispatcher rules via unspecified vectors. id: CVE-2016-0957 info: name: Adobe AEM Dispatcher 4.15 - Rules Bypass author: geeknik severity:...

CVE-2022-22536

CVE-2022-22536 Уязвимость десинхронизации SAP memory pipes MPI CVE-2022-22536. Описание - PoC для CVE-2022-22536: уязвимость десинхронизации memory pipes MPI в SAP. - создано antx 2022-02-15. Подробности SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform,...

CVE-2026-75125

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The webpoealivermtippost handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted reque...

CVE-2026-54746

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. From 0.40.0 until 0.91.1, the Dispatcher gRPC service does not verify that a request's worker ID belongs to the tenant identified by the bearer-token context in Dispatcher/UpsertWorkerLabels and...

GHSA-8X7X-83CF-C3PG Hatchet allows cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe

Summary A cross-tenant write / DoS vulnerability in the Hatchet Dispatcher gRPC service allows any holder of a normal tenant-scoped API token the lowest credential Hatchet issues — an OWNER of a brand-new tenant to overwrite the affinity labels of, or disconnect from the dispatcher, any worker UU...

Hatchet allows cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe

Summary A cross-tenant write / DoS vulnerability in the Hatchet Dispatcher gRPC service allows any holder of a normal tenant-scoped API token the lowest credential Hatchet issues — an OWNER of a brand-new tenant to overwrite the affinity labels of, or disconnect from the dispatcher, any worker UU...

CVE-2026-54746 Hatchet: Cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. From 0.40.0 until 0.91.1, the Dispatcher gRPC service does not verify that a request's worker ID belongs to the tenant identified by the bearer-token context in Dispatcher/UpsertWorkerLabels and...

CVE-2026-54746 Hatchet: Cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. From 0.40.0 until 0.91.1, the Dispatcher gRPC service does not verify that a request's worker ID belongs to the tenant identified by the bearer-token context in Dispatcher/UpsertWorkerLabels and...

EUVD-2026-67791

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. From 0.40.0 until 0.91.1, the Dispatcher gRPC service does not verify that a request's worker ID belongs to the tenant identified by the bearer-token context in Dispatcher/UpsertWorkerLabels and...

EUVD-2026-67788

PLANET GS-4210-16P2S firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The webloginfirstpost handler copies the usrPass POST parameter into a fixed-size stack buffer without length validation, the websysenablePasswdpost handler...

EUVD-2026-67787

PLANET GS-4210-16P2S firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The webradiusSrvpost family of handlers copies the radKey, radKey0, radDftParamKey, radName, and radIp POST parameters into...

PT-2026-83170

Summary A cross-tenant write / DoS vulnerability in the Hatchet Dispatcher gRPC service allows any holder of a normal tenant-scoped API token the lowest credential Hatchet issues — an OWNER of a brand-new tenant to overwrite the affinity labels of, or disconnect from the dispatcher, any worker UU...

NimbusPWN-CVE-2022-29799-29800

🛡️ NimbusPWN-CVE-2022-29799-29800 – Testen lokaler Privilegienausweitungs-Sicherheitslücken 📖 Über dieses Werkzeug Diese Software hilft Sicherheitsforschern, zwei spezifische Schwachstellen zu untersuchen, die als CVE-2022-29799 und CVE-2022-29800 bekannt sind. Diese Fehler existieren in der...

CVE-2026-30056

A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted NGAP messages during the initialization of a new RAN connection...

JOP_ROCKET

JOP ROCKET HINWEIS: Mit 2.15 führen wir den Zwei-Gadget-Dispatcher ein--dies erweitert die Möglichkeiten mit Dispatcher-Gadgets erheblich. Mit 2.15 wurden am 26. Mai 2021 viele Optimierungen und zusätzliche neue Funktionen hinzugefügt. Update: 29. November 2021: Ich habe die Folien für @Hack in...

open-klara

Open KLara Open KLara è un fork guidato dalla community di KLara di Kaspersky Lab — un sistema distribuito per la scansione di grandi collezioni di malware con regole Yara. Questo progetto è mantenuto dalla community e non è affiliato a Kaspersky Lab. Caratteristiche Interfaccia Web — Scansioni...

faraday_agent_dispatcher

Der Faraday Agents Dispatcher hilft Benutzern, Integrationen mit Faraday in jeder Sprache zu entwickeln. Installation Führen Sie einfach pip3 install faradayagentdispatcher aus, und Sie sollten den Befehl faraday-dispatcher in Ihrem System sehen. Um eine Entwicklungsumgebung einzurichten also den...

CVE-2026-30056

A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 (an open-source 5G Core implementation) allows a remote attacker to trigger a Denial of Service by supplying crafted NGAP messages during the initialization of a new RAN connection. The vulnerability is rated CVSS 7...