CVE-2026-78167

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made availab...

Chimera

Chimera Hardware Emulation & Proximity Exploitation なぜ Hak5 の機材は重くて目立ちます。私のスマートフォンには完全な Linux カーネルが搭載されているので、同じ仕事（HID エミュレーション、RNDIS、マスストレージなど）を ConfigFS を通して直接行えるようにしました。追加のハードウェアは不要。バッグからケーブルがぶら下がることもありません。 ターゲットに差し込み、ペイロードを選び、実行するだけ。キーストロークは直接 /dev/hidg0 に送られます。間に何もありません。 機能 ConfigFS 経由の Raw H...

WordPress-CVE-2026-63030-Analysis

🛡️ CVE-2026-63030: 技術的分析と監査 包括的な防御的分解、脅威分析、および非破壊的な検証ガイドライン。 概要 • マトリクス • 技術的な詳細分析 • 検証 • 対策 📑 エグゼクティブサマリー !IMPORTANT 防御目的限定: このリポジトリは、管理者が不正なREST APIルートの悪用から環境を保護することを支援するための、純粋に学術的な研究と非破壊的な診断ガイダンスを提供します。 CVE-2026-63030 は、認証されていないWordPress REST...

EUVD-2026-64691

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...

Deep-Reaver

Deep Reaver Deep Reaver 는 Python으로 구축된 강력한 AI 기반 취약점 평가 및 익스플로잇 툴킷입니다. Nmap이나 Nessus와 같은 도구에서 영감을 받아, Deep Reaver는 웹 애플리케이션 및 서비스의 심층적이고 모듈식 스캐닝을 위해 설계되었습니다. 기능 aiassistant.py를 통한 AI 지원 분석 모듈식 취약점 스캐닝: SQL 인젝션 SQLi 크로스 사이트 스크립팅 XSS 원격 코드 실행 RCE 크로스 사이트 요청 위조 CSRF 파일 업로드 테스트...

EUVD-2026-64687

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made availab...

CVE-2026-78167

EFM ipTIME T16000M (firmware 14.20.2 ) contains an improper authentication vulnerability in the httpcon_check_session_url function of the Session Validation Handler . The flaw allows remote exploitation over the network with no privileges required and low complexity , rated CVSS 4.0: 10.0 (CRITIC...

CVE-2026-78167 EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made availab...

CVE-2020-0796-PoC

CVE-2020-0796-PoC 승리자! Daniel García Gutiérrez @danigargu Manuel Blanco Parajón @dialluvioso 여기 보세요 : https://github.com/danigargu/CVE-2020-0796...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS 权限提升 此存储库包含一个Python脚本，可自动利用Camaleon CMS中的CVE-2025-2304权限提升漏洞。已在2.9.0版本上测试。 用法 root@kitploit: python exp.py http://target.exmaple user password123 链接 https://github.com/advisories/GHSA-rp28-mvq3-wf8j https://www.tenable.com/security/research/tra-2025-09 免责声明...

MSSQLand

✈️ MSSQLand 마치 비즈니스 클래스 비행에 샴페인 잔을 손에 들고 도착하는 것처럼, 대상 Microsoft SQL Server MS SQL DBMS에 우아하게 착륙하세요. 🥂 MSSQLand는 레드팀 운영자를 위해 제작된 C Microsoft SQL Server MSSQL / MS SQL 포스트 익스플로잇 도구입니다. 비콘예: Cobalt Strike 또는 Havoc에서 execute-assembly 사용, 또는 dotnet 명령을 통해 대상 환경 내에서 직접 실행되도록 설계되었으며, 연결된 서버 체인을 탐색하고, 그...

EUVD-2026-64673

A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeeminvitationcode of the file backend/app/api/routes/v1/userinvitationcode.py of the component Public Invitation-Code Redemption Endpoint. The manipulation of the argument code leads to missing...

EUVD-2026-64668

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

pwninit

pwninit バイナリエクスプロイトチャレンジの開始を自動化するためのツール 機能 チャレンジのバイナリを実行可能に設定する 提供された libc をセグフォルトなしでロードできるリンカ ld-linux.so. をダウンロードする デバッグシンボルをダウンロードし、libc のストリップを解除する 提供された libc に対して正しい RPATH とインタプリタを使用するように、patchelf でバイナリをパッチする テンプレートから pwntools の solve スクリプトを生成する 使い方 短縮版 pwninit を実行する 詳細版 関連ファイルがあるディレクトリで...

CVE-2026-78154

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The endpoint is public on purpose and the invitation code is the credential. This is the standalone SD...

PT-2026-80884

A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows...

PT-2026-79805

Name of the Vulnerable Software and Affected Versions EFM ipTIME T24000M versions prior to 14.20.0 Description Improper authentication exists in the Session Validation Handler component. A remote attacker can manipulate the httpcon check session url function to bypass authentication mechanisms...

PT-2026-80808

Name of the Vulnerable Software and Affected Versions itsourcecode Online Clinic Management System version 1.0 Description An issue in the Admin Login component allows remote exploitation via SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. T...

PT-2026-79804

Name of the Vulnerable Software and Affected Versions EFM ipTIME T16000M version 14.20.2 Description Improper authentication occurs within the Session Validation Handler component due to a weakness in the httpcon check session url function. This flaw allows remote exploitation to bypass...

CVE-2025-26238

D-Link DI-8100G firmware version 17.12.20A1 contains a vulnerability in the flag parameter of the msp_info function, which can be exploited to achieve arbitrary code execution . No patched version or vendor workaround is provided in the available documents. A research writeup and potential proof-...