669 matches found
Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher
Summary The V1 DurableTask stream handler registers worker-supplied durable task external IDs in an in-memory callback routing map before verifying that the authenticated tenant owns the task. If the tenant-scoped ownership check fails, the handler logs the error and continues, but the map entry...
EUVD-2026-84624
Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify any tenant's account balance by supplying crafted act and frombillingmodule parameters to the admin panel...
CVE-2026-43643
Softaculous Virtualizor versions before 3.2.9 (Patch 9) and 3.0.0 are susceptible to an authorization bypass vulnerability in the billing module handler. An unauthenticated remote attacker can modify any tenant's account balance by sending a POST request to the admin panel dispatcher with crafted...
NimbusPWN-CVE-2022-29799-29800
NimbusPwn — networkd-dispatcher !NOTE 他のディストリビューション: dnf install gcc dbus-devel pkgconf（Fedora/RHEL）またはpacman -S gcc dbus pkgconf（Arch）。コンパイル行は同じです。 ⚙️ 使い方 脆弱なホスト上で非特権ユーザーとして実行します。 root@kitploit: ./nimbuspwn -c -s SHELL -c, --check non-breaking vuln check, no exploitation -s, --shell SHELL shell t...
procrustes
Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...
open-klara
Open KLara Open KLara 는 Kaspersky Lab의 KLara의 커뮤니티 주도 포크입니다. Yara 규칙을 사용하여 대규모 악성코드 컬렉션을 스캔하는 분산 시스템입니다. 이 프로젝트는 커뮤니티에서 유지 관리하며 Kaspersky Lab과 관련이 없습니다. 기능 웹 인터페이스 — 이메일 알림과 함께 Yara 스캔을 제출하고 잊어버리세요문서 REST API — 프로그래밍 방식으로 작업 제출 및 결과 검색문서 분산 스캐닝 — 일반 하드웨어에서 확장 가능한 디스패처-워커 모델아키텍처 빠른 시작 시작하려면 빠른 시작...
faraday_agent_dispatcher
Faraday Agents Dispatcher は、ユーザーがあらゆる言語で Faraday との統合を開発するのを支援します。 インストール pip3 install faradayagentdispatcher を実行するだけで、システムに faraday-dispatcher コマンドが表示されるはずです。 開発環境をセットアップするには（つまり、独自の統合を書くのではなく、ディスパッチャ自体のコードを変更する場合）、このリポジトリをクローンして pip install -e . を実行してください。 Faraday Agent Dispatcher を初めて実行する 1...
Adobe AEM Dispatcher <4.15 - Rules Bypass
Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass dispatcher rules via unspecified vectors. id: CVE-2016-0957 info: name: Adobe AEM Dispatcher 4.15 - Rules Bypass author: geeknik severity:...
CVE-2022-22536
CVE-2022-22536 SAP 메모리 파이프 비동기화 취약점MPI CVE-2022-22536. 설명 - CVE-2022-22536에 대한 PoC: SAP 메모리 파이프MPI 비동기화 취약점. - antx가 2022-02-15에 작성함. 상세 정보 SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 및 SAP Web Dispatcher는 요청 스머글링 및 요청 연결에...
CVE-2026-84298
Hatchet , a platform for orchestrating background tasks and durable workflows, contains a cross-tenant information disclosure in its V1 DurableTask stream handler prior to version 0.95.3. The root cause is that worker-supplied task_external_id values are stored in the durableInvocations routing m...
CVE-2026-84298 Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher
Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.95.3, the V1 DurableTask stream handler stores worker-supplied taskexternalid values in the durableInvocations routing map before tenant ownership is verified, and callback delivery...
cve-2022-31692
CVE-2022-31692 데모 개요 간단한 Spring Boot 애플리케이션으로, CVE-2022-31692에 취약한 구성을 시연합니다. 이 취약점은 심각도 때문에 주목을 받을 만합니다. 인증 우회를 허용하므로 CVSS 3.x 기본 점수는 9.8입니다. 이 프로젝트의 목적은 권고문에 설명된, 취약점이 적용되도록 하는 조건들을 시연하는 것입니다. 애플리케이션은 Spring Security가 forward 및 include 디스패처 유형에 보안을 적용할 것으로 기대합니다. 애플리케이션은 AuthorizationFilter를 수동...
CVE-2022-22536_SAP_Request_Smuggling_Scanner
CVE-2022-22536 SAP Rquest 밀반입 스캐너 이것은 CVE-2022-22536SAP Internet Communication Manager ICM 및 SAP Web Dispatcher 의 중요한 요청 밀반입 취약점을 위한 빠른 소켓 수준 배치 스캐너입니다. 프로토콜 비동기화 동작을 위해 여러 호스트를 병렬로 테스트합니다. CVE-2022-22536은 CVSS 10.0 으로 평가되며, 야생에서 악용되는 것으로 알려져 있습니다 CISA KEV 목록. 이 도구는 HTTP 또는 HTTPS를 통해 노출된 잠재적으로 취약...
JOP_ROCKET
JOP ROCKET 注記: 2.15 では、ツーガジェットディスパッチャを導入しました。これにより、ディスパッチャガジェットの可能性が大幅に広がります。2021年5月26日の2.15では、多くの最適化と追加の新機能が加えられています。 更新: 2021年11月29日: @Hack in Ryadh のスライドと、Shellcodeless JOP...
Astra Linux – Vulnerability in grub2
A flaw was discovered in grub2, where the grubextcmddispatcher function calls grubarglistalloc to allocate memory for the grub’s argument list. However, it does not check in case the memory allocation fails. Once the allocation fails, a NULL pointer will be processed by the parseoption function,...
EUVD-2026-75109
MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers that allows unauthenticated attackers to execute privileged handler files by supplying base64-encoded path traversal sequences. Attackers can bypass path validation checks and execu...
CVE-2026-87927
MaxSite CMS through version 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers. By supplying base64-encoded path traversal sequences, unauthenticated attackers bypass path validation checks and execute admin-gated handler actions without authentication...
CVE-2026-87927 MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher
MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers that allows unauthenticated attackers to execute privileged handler files by supplying base64-encoded path traversal sequences. Attackers can bypass path validation checks and execu...
SAP NetWeaver Information Disclosure (3750721)
The version of the SAP NetWeaver kernel detected on the remote host is affected by an information disclosure vulnerability as referenced in SAP Security Note 3750721: - SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to...