league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters

Impact Affected versions of league/commonmark perform super-linear work on three independent parsing paths, all of which are reachable on a stock new CommonMarkConverter with default configuration and no extensions registered. Each trigger fits on a single line of input, so no complex Markdown...

GHSA-J8PM-GJ4C-RQ4X league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters

Impact Affected versions of league/commonmark perform super-linear work on three independent parsing paths, all of which are reachable on a stock new CommonMarkConverter with default configuration and no extensions registered. Each trigger fits on a single line of input, so no complex Markdown...

CVE-2021-41773

CVE-2021-41773 Apache HTTP Server 2.4.49 中的路径遍历与文件泄露漏洞 CVE-2021-41773 信息 在 Apache HTTP Server 2.4.49 的路径规范化更改中发现了一个缺陷。攻击者可以利用路径遍历攻击将 URL 映射到预期文档根目录之外的文件。 如果文档根目录之外的文件未受 "require all denied" 保护，这些请求可能成功。此外，此缺陷可能泄露解释型文件（如 CGI 脚本）的源代码。 此问题已知已在野外被利用。 该问题仅影响 Apache 2.4.49，不影响早期版本。 鸣谢：该问题由 Ash Daulton ...

CVE-2026-78608

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...

CVE-2026-78607

Missing Authorization CWE-862 in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse CAPEC-122. A user holding only inference execution privileges could cause outbound inference traffic to be directed to a destination of their choosing and could cause...

CVE-2026-78597

Missing Authorization CWE-862 in the Kibana Entity Store feature can lead to unauthorized credential creation via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user holding only low-privilege Security feature access could invoke an administrative operation tha...

CVE-2026-78592

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in Kibana can lead to the unauthorized deletion of privileged resources via Path Traversal CAPEC-126. A low-privileged user holding tag creation privileges could cause a subsequent administrative action in the tag...

CVE-2026-78605

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

CVE-2026-78606

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Where two authenticated principals originating from different authentication realms share the same username value...

CVE-2026-72654

Execution with Unnecessary Privileges CWE-250 in the Kibana machine learning feature can lead to information disclosure via Privilege Abuse CAPEC-122. An operation available to users holding only read access to the machine learning feature was performed with an internal service identity rather th...

log4shell-example

Log4Shell 漏洞利用测试 本项目旨在演示 Spring Boot 环境中的 log4j CVE-2021-44228 漏洞利用，并展示如何修复该漏洞。 项目包含三个子模块。其中一个包含易受攻击的代码，另外两个已修复。 如何使用本项目 在项目的根目录下运行 ./mvnw clean test 即可在两个模块中执行测试。在 log4shell-example-unpatched 中，您会看到大量异常（测试仍然会通过，因为这是预期的），因为它无法从尝试连接的服务器获得正确响应。 何时易受攻击？ 如果您的应用程序覆盖了默认日志记录器，使用了 log4j2 实现，并且没有覆盖所使用的...

CVE-2026-72628

Improper Handling of Highly Compressed Data CWE-409 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user holding Streams management privileges could supply specially crafted content that expands to a far larger volume of data during processing,...

CVE-2026-72652

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted request that causes excessive resource consumption, which may render Kibana unavailable...

CVE-2026-72649

Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...

CVE-2026-56143

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

CVE-2026-33465

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user with low-level permissions could submit a specially crafted request that causes excessive resource consumption, which may render Kibana...

CVE-2023-27587-PoC

CVE-2023-27587-PoC CVE-2023-27587のシンプルなPoC ReadToMyShoeとは？ ReadtoMyShoe RTMSは、記事をURL経由または直接貼り付けてアップロードし、後で聴くことができるWebアプリケーション（rust、yew、axum）です。 影響 記事の追加時にエラーが発生すると、Webサイトはユーザーにエラーメッセージを表示します。エラーがGoogle Cloud TTSリクエストに起因する場合、リクエストの完全なURLが含まれます。リクエストURLにはGoogle Cloud APIキーが含まれています。 PoC...

endext

EndExt EndExt is a .go tool for extracting all the possible endpoints from the JS files Idea When you crawll all the JS files from waybackruls for example, or even collecting the JS files urls from your target website's home source page .. If the website was using API system and you wanna look fo...

CVE-2024-21626

利用: 1.git clone https://github.com/cdxiaodong/CVE-2024-21626 2.docker-compose up 验证: 如果获取到宿主的/etc/passwd 即存在该漏洞 环境: runc: =v1.0.0-rc93,=1.1.11 攻击细节原理: 在 runc 受影响版本中，由于在初始化过程中泄露了部分内部文件描述符，包括对宿主的 /sys/fs/cgroup 的句柄，同时 runc 未验证最终工作目录是否位于容器的挂载命名空间。攻击者可以修改 process.cwd 配置为 /proc/self/fd/7或者将宿主机调用runc...

CVE-2018-7600-Drupal-RCE

CVE-2018-7600 Drupal RCE クレジット: ファイル| Drupal バージョン| ソース| コメント ---|---|---|--- poc0-curl.sh| 8| https://twitter.com/ibo0om/status/984674893768921089 https://twitter.com/IamSecurity/status/984977193565646848 https://gist.github.com/g0tmi1k/7476eec3f32278adc07039c3e5473708| poc1-a2u.py| 8|...