vulnbox-easy-CVE-2025-29927

Man-in-the-middle This application is named Man-in-the middle because it contains a vulnerability in Next.JS middleware and the flag is in the API call. 🚀 Production Setup 1. .env.production root@kitploit: DATABASEURL=postgresql://postgres:password@db:5432/nextauth JWTSECRET=your-production-secre...

CVE-2026-44633 Live Helper Chat: REST API chat update accepts arbitrary chat fields across department boundaries

Live Helper Chat is an open-source application that enables live support websites. In 4.84v, the Live Helper Chat REST API chat update endpoint allows a REST user with lhchat/use to update a chat in a department they cannot read. The endpoint accepts arbitrary chat object fields, so the user can...

MAL-2025-146827 Malicious code in pulsar-despina-apollo-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8378b5877907e04eadc11e82025babd84f62bc8d563fe6c2c0ff3d55c0cc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CTF-challenges-by-me

This repository contains a series of CTF Capture The Flag challenges created by l4wio. The challenges are designed to test various skills such as web security, cryptography, and problem-solving. The repository includes several files and directories, each containing a specific challenge. The...