17 matches found
CVE-2026-21858-n8n-FullChain
🛡️ AI Security Tool モジュール n8n フルチェーン CVE-2026-21858 + CVE-2025-68613 — 「Ni8mare」 AI Security Tool エコシステム向け公式セキュリティ監査モジュール 🌐 Web デモ • 📚 プロジェクトサイト • 💬 コミュニティチャット ウェブサイトナビゲーション: ホーム • アップデート • ダウンロード • モジュール 🧠 概念の概要 本モジュールは、n8n ワークフロー自動化インスタンスに対する診断ツールと完全なエクスプロイトチェーンを提供します。これは Ni8mare と呼ばれています。...
CVE-2026-21858
CVE-2026-21858 + CVE-2025-68613 - n8n 전체 체인 인증 없는 임의 파일 읽기 → 관리자 토큰 위조 → 샌드박스 우회 → RCE | ---|--- CVE| CVE-2026-21858 AFR + CVE-2025-68613 RCE CVSS| 10.0 + 9.9 Critical 영향 범위| = 0.211.0 RCE 수정 버전| 1.121.0 AFR / 1.120.4+ RCE 공개일| 2026-01-07 11:09 UTC 코드네임| Ni8mare 크레딧| Dor Attias Cyera 익스플로잇|...
DSL-2750U-Full-chain
펌웨어 분석 1. DSL-2750U 버그 : tftp 서버의 잘못된 구성 CVE-2021-3707 명령어 인젝션 버그 CVE-2021-3708...
CVE-2025-2783
Chromium CVE-2025-2783: 샌드박스 탈출 및 전체 체인 RCE 익스플로잇 이 저장소는 CVE-2025-2783 에 대한 전체 체인 익스플로잇 구현을 포함합니다. 취약점은 Chromium의 Ipcz 통신 계층에 존재하며, 공격자가 제한된 렌더러 프로세스에서 샌드박스 탈출 및 임의 코드 실행을 달성할 수 있게 합니다. 이 익스플로잇은 134.0.6998.177 까지의 버전을 지원합니다...
darksword-Exploit
🗡️ DarkSword — iOS Full-Chain Exploit Analysis Reference:...
Exploit for CVE-2024-11114
Chromium Exploit Development Toolkit A toolkit for weaponizing...
PT-2026-23506
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.10 Description A time-of-check-time-of-use TOCTOU issue exists in the validateScriptFileForShellBleed function. A TOCTOU issue is a software bug where a system checks a condition such as a security credential...
📄 n8n 2.0.0-rc.4 Remote Command Execution
n8n version 2.0.0-rc.4 PHP port of a research exploit that chains together multiple vulnerabilities including arbitrary file read and sandbox escape in order to achieve remote command execution...
Exploit for Cross-site Scripting in Snipeitapp Snipe-It
PoC for CVE-2025-59712 and CVE-2025-59713 This PoC provides a...
PT-2024-27470 · Collabora · Collabora Online
Name of the Vulnerable Software and Affected Versions: Collabora Online versions prior to 22.05.23.1 Collabora Online versions prior to 23.05.14.1 Collabora Online versions prior to 24.04.4.3 Description: In affected versions of Collabora Online, a collaborative online office suite based on...
Vulnerabilities fixed in OpenSSL
The developers of OpenSSL have fixed several vulnerabilities fixed. A malicious party could exploit the vulnerabilities to cause a denial-of-service by offering manipulated certificates causing the OpenSSL system to crash. Under specially prepared circumstances, where the malicious party has...
Mozilla FireFox (Windows 10 x64) - Full Chain Client Side Attack Exploit
// Axel '0vercl0k' Souchet - November 19 2019 // EDB Note: Download https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/47752.zip // 0:000 ? xul!sAutomationPrefIsSet - xul // Evaluate expression: 85724947 = 00000000051c0f13 const XulsAutomationPrefIsSet = 0x051c0f13...
Mozilla FireFox (Windows 10 x64) - Full Chain Client Side Attack
Mozilla FireFox Windows 10 x64 - Full Chain Client Side Attack // Axel '0vercl0k' Souchet - November 19 2019 // EDB Note: Download https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/47752.zip // 0:000 ? xul!sAutomationPrefIsSet - xul // Evaluate expression: 8572494...
Mozilla FireFox (Windows 10 x64) - Full Chain Client Side Attack
// Axel '0vercl0k' Souchet - November 19 2019 // EDB Note: Download https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/47752.zip // 0:000 ? xul!sAutomationPrefIsSet - xul // Evaluate expression: 85724947 = 00000000051c0f13 const XulsAutomationPrefIsSet = 0x051c0f13n;...
Google offers up to $1.5 million bounty for remotely hacking Titan M chip
With its latest announcement to increase bug bounty rewards for finding and reporting critical vulnerabilities in the Android operating system, Google yesterday set up a new challenging level for hackers that could let them win a bounty of up to $1.5 million. Starting today, Google will pay $1...
Exploit Reseller Offering Up To $2.5 Million For Android Zero-Days
Well, there's some good news for hackers and vulnerability hunters, though terrible news for Google, Android device manufacturers, and their billions of users worldwide. The zero-day buying and selling industry has recently taken a shift towards Android operating system, offering up to $2.5 milli...
