CVE-2026-81643 Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification

Incorrect Authorization vulnerability in ash-project ashgraphql delivers GraphQL subscription payloads for records a subscriber is not authorized to see. In AshGraphql.Subscription.Batcher, dosend/5 resolves the first notification of a batch and filters it with shouldsend?/1, which drops results...

CVE-2026-81643 Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification

Incorrect Authorization vulnerability in ash-project ashgraphql delivers GraphQL subscription payloads for records a subscriber is not authorized to see. In AshGraphql.Subscription.Batcher, dosend/5 resolves the first notification of a batch and filters it with shouldsend?/1, which drops results...

CVE-2026-81643

CVE-2026-81643 is a broken access control flaw in ash_graphql (versions 1.4.0 through 1.10.0 ). In AshGraphql.Subscription.Batcher, the should_send?/1 authorization filter is applied only to the first notification in a batch; remaining notifications are appended to outgoing results without that f...

EUVD-2026-68284

Incorrect Authorization vulnerability in ash-project ashgraphql delivers GraphQL subscription payloads for records a subscriber is not authorized to see. In AshGraphql.Subscription.Batcher, dosend/5 resolves the first notification of a batch and filters it with shouldsend?/1, which drops results...

EEF-CVE-2026-81643 Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification

Summary Incorrect Authorization vulnerability in ash-project ash\graphql delivers GraphQL subscription payloads for records a subscriber is not authorized to see. In AshGraphql.Subscription.Batcher, do\send/5 resolves the first notification of a batch and filters it with should\send?/1, which dro...

CVE-2026-81643 Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification

Incorrect Authorization vulnerability in ash-project ashgraphql delivers GraphQL subscription payloads for records a subscriber is not authorized to see. In AshGraphql.Subscription.Batcher, dosend/5 resolves the first notification of a batch and filters it with shouldsend?/1, which drops results...

CVE-2017-8570

来源：https://www.exploit-db.com/exploits/44263/ 使用方法：python packagercompositemoniker.py -s calc.sct -o example.rtf What? This repo contains a Proof of Concept exploit for CVE-2017-8570, a.k.a the "Composite Moniker" vulnerability. This demonstrates using the Packager.dll trick to drop an sct file...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

CVE-2026-9147-uproot-rce

CVE-2026-9147：通过 TStreamerInfo 元数据在 uproot 中注入代码 严重性： 高危，CVSS 4.0 8.5 ，CVSS 3.1 7.8 （由 CNA VulnCheck 分配） 向量 v4.0： CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 向量 v3.1： CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 受影响版本： uproot = 5.7.4 修复版本： 5.7.5 / 提交 c045c28 CWE：...

CVE-2019-9978

CVE-2019-9978 - Social Warfare Wordpress plugin RCE 3.5.3 Remote Code Execution in Social Warfare Plugin before 3.5.3 for Wordpress. This Poc does not require running an additional HTTP Server. Just pass your local IP and the desired port and the exploit will create a server in its own thread...

printDemon2system

printDemon2system CVE-2020-1048 PrintDemon 特权提升至 SYSTEM PrintDemon 是 Windows 打印后台处理程序服务（spoolsv.exe ）中的一个逻辑漏洞。 该漏洞存在于后台处理程序处理打印作业到文件的方式中，一旦被利用，允许以 SYSTEM 用户身份任意写入文件系统。 该漏洞的一个示例利用包括覆盖 DriverStore 目录中的 PrintConfig.dll ，当启动 XPS 打印作业时，该 DLL 会被在 SYSTEM 用户上下文中运行的 spoolsv.exe 加载（如本仓库所示）。 利用 PrintDemon...

CVE-2022-23222

CVE-2022-23222 Haga clic aquí si solo desea compilar y ejecutar el asunto. Lo que sigue es más o menos una traducción del artículo chino, disponible aquí. Usaremos el código del kernel principal para la versión 5.13.0 como referencia. Hay un desajuste entre los tipos de puntero disponibles y la...

Exploit for CVE-2026-76581

CVE-2026-76581 - WPMU DEV Dashboard Vulnerability Detector A...

CVE-2025-26199

🛡️ CVE-2025-26199 — Insecure Password Transmission via Cleartext in CloudClassroom-PHP-Project v1.0 📄 Description CloudClassroom-PHP-Project v1.0 is vulnerable to insecure transmission of user credentials. During the authentication process, passwords are submitted over unencrypted HTTP rather than...

macOS-Security-and-Privacy-Guide

This guide is a collection of techniques for improving the security and privacy of macOS on Apple silicon Macs. It targets experienced users who want security practices commonly used by organizations, but is also suitable for novice users with an interest in privacy and security. For...

POC-CVE-2026-42826-2026-42826-Microsoft-Azure-DevOps-Information-Disclosure-Vulnerability

CVE-2026-42826 — Azure DevOps 信息泄露 PoC 概述 字段| 值 ---|--- CVE| CVE-2026-42826 CVSS| 10.0 严重（Microsoft）/ 7.5 高危（NVD） CWE| CWE-200（向未授权行为者暴露敏感信息） GHSA| GHSA-gmwx-3xm2-9fx8 受影响| Azure DevOps Services、Azure DevOps Server 2022/2025 已修补| Azure DevOps Server 2026.0.1+（Services 已在服务端修补） 发现者| Noa...

follina.py

'Follina' MS-MSDT n-day Microsoft Office RCE Quick POC to replicate the 'Follina' Office RCE vulnerability for local testing purposes. Running the script will generate a clickme.docx or clickme.rtf payload file in your current working directory, and start a web server with the payload file...

follina.py

'Follina' MS-MSDT n-day Microsoft Office RCE 漏洞 快速 POC，用于在本地测试环境中复现 “Follina” Office RCE 漏洞。运行脚本会在当前工作目录生成一个 clickme.docx（或 clickme.rtf）载荷文件，并启动一个承载该载荷文件（www/exploit.html）的 Web 服务器。载荷和 Web 服务器参数均可配置（参见帮助和示例）。 ⚠ 切勿在生产环境中使用，否则你会被视为傻瓜 用法： root@kitploit: $ python .\follina.py -h usage: follina.py -h ...

Threat-Remediation-Scripts

简介 自 2021 年以来，我开发了许多脚本，以协助我的调查和修复工作。我想，为什么不把它们分享给公众，希望它们能对您有所帮助。 这些脚本是如何工作的？ 我开发的脚本旨在与 Crowdstrike 端点检测与响应（EDR）配合使用。本质上，它们是云端脚本，只需点击一下按钮即可快速远程修复设备。 为什么要创建这些脚本？ 我的脚本旨在协助安全运营中心（SOC）或事件响应分析师进行调查。有些脚本协助修复特定的不需要的软件/广告软件，另一些脚本则通过用户名协助调查特定系统，以提供更全面的可见性。 目录 手动云端脚本 WinInspect - WinInspect...

SharpWnfSuite

SharpWnfSuite 这是 Windows 通知设施（WNF）工具的仓库。 目前，已上传了 Alex Ionescu（@aionescu）和 Gabrielle Viala（@pwissenlit）所开发的 wnfun 中工具的 C 移植版本。 当我为 Windows 通知设施开发更多工具时，它们将被上传到这里。 目录 SharpWnfSuite 用法 SharpWnfDump SharpWnfNameDumper SharpWnfClient SharpWnfServer SharpWnfScan SharpWnfInject KernelPrimitive...