MongoBLEED---CVE-2025-14847-POC-

MongoBLEED---CVE-2025-14847-POC- このリポジトリには、CVE-2025-14847（MongoBleed）の私のPythonスクリプト版が含まれています。 説明 このスクリプトは、偽造された解凍サイズフィールドを送信することで悪意のあるリクエストをシミュレートします。サーバーに脆弱性がある場合、ヒープメモリから隣接するデータが返されます。 前提条件 Python 3.x ポート27017でターゲットへのネットワークアクセス。 使用方法 スクリプトの先頭にある HOST、PORT、SIZE...

WordPress Support Genix plugin <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token vulnerability

Authenticated Subscriber+ Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin Support Genix versions = 1.4.52...

Transformers-Forged-To-Fight-Offline-Version

Transformers: Forged to Fight, 오프라인 부활 인계 이 패키지는 Transformers: Forged to Fight의 작동하는 오프라인 부팅과 함께, 그 과정에 사용된 모든 도구, 패치, 리버스 엔지니어링 노트를 포함합니다. 이는 시간과 에너지를 들여 다음이자 훨씬 더 큰 단계인 게임 서버 측 콘텐츠를 처음부터 다시 구축하려는 사람을 위해 준비되었습니다. 여기에 있는 모든 것은 문서화되어 있어 제가 했던 것처럼 처음부터 시작할 필요가 없도록 했습니다. 무엇이든 건드리기 전에 이 파일 전체를 읽으십시오...

watchTowr-vs-Check-Point-CVE-2026-50751

CVE-2026-50751 Check Point Remote Access VPN IKEv1 証明書認証バイパスの検出アーティファクトジェネレーターです。 https://github.com/user-attachments/assets/1280c545-364e-42d1-94ac-5b2cd850d14e 技術的な詳細については、ブログ記事をご参照ください。 検出動作例 root@kitploit: $ python3 watchTowr-vs-Check-Point-CVE-2026-50751.py -rh vpn.example.com -u watchtowr /...

Microsoft SharePoint Server - Authentication Bypass (ToolShell)

Microsoft Office SharePoint Server contains an improper authentication vulnerability that allows unauthorized attackers to perform spoofing over a network. By crafting a POST request to /layouts/15/ToolPane.aspx with a forged Referer header /layouts/SignOut.aspx, attackers can bypass authenticati...

CVE-2017-9606

CVE-2017-9606 Aufgrund unzureichender Prüfung von Integrität, Authentizität und geringer Benutzerrechte auf den Update-Ordner kann ein lokaler Benutzer gefälschte ViPNet-Update-Dateien mit beliebigem ausführbarem Code erstellen und sie im ViPNet-Update-Ordner platzieren. Nach dem Platzieren der...

CVE-2023-37597

CVE-2023-37597 — issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF — Eliminazione di un gruppo utenti Disclaimer: Questo repository è destinato esclusivamente a scopi educativi e di ricerca sulla sicurezza autorizzata. Non utilizzare questo exploit contro sistemi di cui non sei proprietario o...

CVE-2026-81694

openssl-encrypt (pip package, versions ≤ 1.4.8) is vulnerable to output injection in the verify-usb command. Filenames read from untrusted drive data—residing outside the AES-GCM authenticated manifest —are printed without sanitization, allowing an attacker to plant terminal cursor-movement and e...

CVE-2026-81694 verify-usb before 1.4.9 Output Injection via Unsanitized Filenames

openssl-encrypt pip package, versions = 1.4.8 fails to sanitize filenames read from untrusted drive data outside the AES-GCM authenticated manifest before printing them in the verify-usb command's output. An attacker can plant filenames containing terminal cursor-movement and erase-line control...

EUVD-2026-67050

openssl-encrypt pip package, versions = 1.4.8 fails to sanitize filenames read from untrusted drive data outside the AES-GCM authenticated manifest before printing them in the verify-usb command's output. An attacker can plant filenames containing terminal cursor-movement and erase-line control...

CVE-2026-81694 verify-usb before 1.4.9 Output Injection via Unsanitized Filenames

openssl-encrypt pip package, versions = 1.4.8 fails to sanitize filenames read from untrusted drive data outside the AES-GCM authenticated manifest before printing them in the verify-usb command's output. An attacker can plant filenames containing terminal cursor-movement and erase-line control...

CVE-2026-80210 FrontAccounting through 2.4.20 Cross-Site Request Forgery on Financial Transaction Forms

FrontAccounting through 2.4.20 generates a CSRF token in endform in includes/ui/uicontrols.inc and embeds it as the token hidden field in every form it renders, but only admin/users.php and admin/changecurrentuserpassword.php call checkcsrftoken to validate it. No financial transaction handler...

CVE-2026-80210

FrontAccounting through 2.4.20 suffers from a Cross-Site Request Forgery (CSRF) flaw in its financial transaction forms. The application generates a CSRF token in end_form() (includes/ui/ui_controls.inc) and embeds it as the _token hidden field, but only admin/users.php and admin/change_current_u...

CVE-2026-36960

CVE-2026-36960: Cross-Site Request Forgery CSRF nell'interfaccia di gestione web ID CVE: CVE-2026-36960 Data: 2026-04-29 Scopritore: Kirubel Solomne Vendor: U-SPEED Prodotto: Router U-SPEED Versione Firmware: V1.0.0 CWE: CWE-352 - Cross-Site Request Forgery CSRF Descrizione Il firmware V1.0.0 del...

CVE-2026-77035

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-77035

Joomla Event Manager (joomlaeventmanager.net) versions prior to 5.0.1 are affected by a cross-user event and venue takeover vulnerability. A registered user with edit-own rights (via the eventowner=1 setting or core.edit.own permission) can forge form fields by POSTing another user's record ID to...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

EUVD-2026-66863

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-74752 sctp: validate cookie AUTH state before use

In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled cookie bytes. A forged RANDOM length, HMAC list, or CHUNKS list can then...