net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

Security Bulletin:Vulnerabilities exists in callhome of IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in security patch ina-release-callhomeimage-1.0.2.3. Vulnerability Details CVEID:CVE-2022-2042 DESCRIPTION: Use After Free in GitHub repository vim/vim prior to 8.2. CWE:CWE-416: Use After Free CVSS Source: IBM X-Force...

MicroburstSecretsHunter

MicroBurst Secrets Hunter Azure 環境で暗号化されずに放置されるべきではない平文パスワード、キー、接続文字列、その他のシークレットを、MicroBurst の Get-AzDomainInfo 出力から探し出す PowerShell スキャナです。 読み取り専用の監査ワークフロー 向けに作られています: MicroBurst でドメインダンプを収集しGet-AzDomainInfo には Reader アクセスで十分です、このツールを出力フォルダに向けます。Azure 自体には一切触れません —...

wayBackLister

WaybackLister v1.1 — 作者 FR13ND0x7F 通过 Wayback Machine 的存档 URL 发现潜在的目录列表。 🕵️‍♂️ 它做什么 WaybackLister 是一款侦察工具，它利用 Wayback Machine 获取某个域名的历史 URL，解析出唯一路径，并检查这些路径中是否有任何路径当前暴露了 目录列表 。它速度快、支持多线程，专为安全评估和漏洞赏金侦察中的实际使用而构建。 🚀 功能特性 通过 Wayback Machine 获取存档的 URL 从这些 URL 中提取唯一路径和子域名 主动检查活跃的目录列表 支持多线程扫描 可根据 Wayback...

apache__jspwiki_CVE-2022-46907_2-11-3

Apache JSPWiki 2.11 - 문서 root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache...

CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack

CVE-2026-23004 – 自動車UDS認証バイパス（リプレイ攻撃） プログラムコード（Python CAN‑UDSシミュレータ） root@kitploit: udssim.py - ECU that authenticates with a simple challenge import random, hashlib class ECU: def initself: self.secret = b'longsecretkey' def generatechallengeself: self.challenge = random.randbytes8 return...

MongoBleed-exploit

CVE-2025-14847: MongoBleed 실험실 logo.svg 목차 1. 소개 2. 취약점 세부사항 작동 원리 3. 영향 4. 실험실 아키텍처 5. 사전 요구사항 6. 설치 및 사용법 1. 환경 시작 2. 의존성 설치 3. 실험실 설정 확인 선택 사항 4. 익스플로잇 실행 7. 익스플로잇 워크스루 8. 해결 방법 9. 라이선스 10. 면책 조항 11. 참고 자료 12. 저자 소개 이 실험실은 MongoDB의 심각한 취약점인 MongoBleedCVE-2025-14847를 재현하고 분석하기 위해 설계되었습니다. 이...

nahsra__antisamy_CVE-2017-14735_1-5-6

AntiSamy 신뢰할 수 없는 소스에서 들어오는 HTML을 빠르고 설정 가능하게 정리하는 라이브러리입니다. Java 8 이상을 지원합니다. 다른 말로 표현하자면: 클라이언트가 프로필, 댓글 등에 제공하는 HTML에 악성 코드를 포함하지 않도록 서버에 저장되기 전에 검증하는 API입니다. 웹 애플리케이션에서 '악성 코드'는 일반적으로 'JavaScript'를 의미합니다. 대부분의 경우, CSSCascading Stylesheets는 JavaScript를 호출할 때만 악성으로 간주됩니다. 하지만 '정상적인' HTML과 CSS도...

CVE-2025-53964

CVE-2025-53964 风险评估 CVSS v3: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - 9.6/10 描述 GoldenDict 1.5.0 和 1.5.1 存在一个暴露的危险方法，当用户添加精心制作的词典并在该词典中搜索任意词条时，可以读取和修改文件。 附加信息 该产品提供了与外部行为者交互的接口，其中包含 GoldenDict（版本 1.5.0、1.5.1）中一个未被适当限制的危险方法。这使远程攻击者能够在用户添加并使用恶意词典时，访问并修改用户文件系统上的文件。 漏洞类型...

ff4j__ff4j_CVE-2022-44262_1_8_13_fixed

✨✨✨ FF4J - Java를 위한 Feature Flipping ✨✨✨ Codacy Badge FF4j는 Feature Toggle 패턴의 구현체입니다. 🤘기능 Feature Toggle: 런타임에 기능을 활성화/비활성화할 수 있습니다. 배포가 필요 없습니다. 코드에서 동적 조건if/then/else으로 보호된 여러 경로를 구현하세요. 역할 기반 토글링: 플래그 값뿐만 아니라 역할과 그룹카나리 릴리스을 사용하여 접근을 제어합니다. Spring Security를 시작으로 다양한 프레임워크를 지원합니다. 전략 기반 토글링: 기능...

BIT-ELASTICSEARCH-2026-78607 Missing Authorization in Elasticsearch Leading to Information Disclosure

Missing Authorization CWE-862 in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse CAPEC-122. A user holding only inference execution privileges could cause outbound inference traffic to be directed to a destination of their choosing and could cause...

BIT-ELASTICSEARCH-2026-78605 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

BIT-ELASTICSEARCH-2026-72649 Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution

Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...

monitor v0.41.0

BetterDB Monitor The monitoring layer that Valkey deserves. BetterDB persists what Valkey throws away - slowlogs, command patterns, client activity, anomaly signals - so you can debug what happened at 3am, not just what's happening now. Built for Valkey 8.x with native support for COMMANDLOG,...

CVE-2026-80734 btrfs: initialize inode mapping flags for cached inodes

In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached inodes BUG When running generic/795 with 8K block size, 4K page size, the test always fails, triggering some ASSERTs related to folio size: 795 241074: dropcaches: 3 assertion...

CVE-2026-80734

CVE-2026-80734 affects the btrfs filesystem in the Linux kernel . When a btrfs inode is evicted from the page cache under memory pressure and subsequently re-looked up via btrfs_iget(), the code path that reuses a previously cached delayed_node skips calls to btrfs_update_inode_mapping_flags() an...

CVE-2026-80734 btrfs: initialize inode mapping flags for cached inodes

In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached inodes BUG When running generic/795 with 8K block size, 4K page size, the test always fails, triggering some ASSERTs related to folio size: 795 241074: dropcaches: 3 assertion...