CVE-2022-1386

CVE-2022-1386 - Fusion Builder 3.6.2 - 認証なしSSRF 説明 Fusion Builder は、ユーザーがドラッグ＆ドロップインターフェースを使用してページを作成・編集できるWordPressプラグインです。このプラグインには、攻撃者がサーバー上の任意のファイルを読み取ることを可能にする、認証なしのSSRF脆弱性があります。 概念実証 リクエスト: root@kitploit: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: example.com User-Agent: Mozilla/5.0 Windo...

CVE-2026-61589 djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live path

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket handlemount and ViewRuntime.buildrequest rebuild an HttpRequest via RequestFactory.get... with no HTTPHOST, so request.gethost defaulted to...

EUVD-2026-81306

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket handlemount and ViewRuntime.buildrequest rebuild an HttpRequest via RequestFactory.get... with no HTTPHOST, so request.gethost defaulted to...

CVE-2026-61589 djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live path

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket handlemount and ViewRuntime.buildrequest rebuild an HttpRequest via RequestFactory.get... with no HTTPHOST, so request.gethost defaulted to...

CVE-2026-61589

djust , a Phoenix LiveView-style reactive server-side rendering library for Django, had a tenant resolution flaw in versions prior to 1.0.7 . The WebSocket handle_mount and ViewRuntime._build_request rebuilt the HttpRequest via RequestFactory().get(...) without an HTTP_HOST header, causing reques...

CVE-2026-61589 djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live path

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket handlemount and ViewRuntime.buildrequest rebuild an HttpRequest via RequestFactory.get... with no HTTPHOST, so request.gethost defaulted to...

CVE-2025-24893-XWiki-Unauthenticated-RCE-Exploit-POC

CVE-2025-24893 - XWiki 未認証RCEエクスプロイトPOC ⚠️ XWikiにおける未認証のリモートコード実行 🛠️ @dollarboysushilによるPoC実装 💡 概要 CVE-2025-24893 は、XWikiにおける深刻なRCE脆弱性であり、SolrSearchマクロ内での安全でないGroovy式の処理に起因します。攻撃者は巧妙に細工されたGETリクエストを通じてGroovyコードを注入し、リモートコード実行 を引き起こすことができます（認証不要）。 重要度: 緊急 CVSS 9.8 影響を受けるバージョン:...

djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live path

Impact The WebSocket handlemount and ViewRuntime.buildrequest rebuild an HttpRequest via RequestFactory.get... with no HTTPHOST, so request.gethost defaulted to "testserver" on the live path. Host/subdomain/domain TenantResolvers then misresolved the tenant — None on the live path while the HTTP...

GHSA-V9RJ-XJFV-XJ9R djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live path

Impact The WebSocket handlemount and ViewRuntime.buildrequest rebuild an HttpRequest via RequestFactory.get... with no HTTPHOST, so request.gethost defaulted to "testserver" on the live path. Host/subdomain/domain TenantResolvers then misresolved the tenant — None on the live path while the HTTP...

EUVD-2026-81305

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization getobject + hasobjectpermission, ADR-017 was enforced on the WebSocket mount and event paths but not on three other render entry...

CVE-2026-61596 djust has broken object-level access control (IDOR)

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization getobject + hasobjectpermission, ADR-017 was enforced on the WebSocket mount and event paths but not on three other render entry...

CVE-2026-61596

djust , a Django library providing Phoenix LiveView-style reactive server-side rendering with Rust-powered performance, had a broken object-level access control (IDOR) flaw prior to version 1.0.7 . Per-object authorization (get_object + has_object_permission) was enforced on WebSocket mount and e...

CVE-2026-61596 djust has broken object-level access control (IDOR)

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization getobject + hasobjectpermission, ADR-017 was enforced on the WebSocket mount and event paths but not on three other render entry...

CVE-2026-61596 djust has broken object-level access control (IDOR)

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization getobject + hasobjectpermission, ADR-017 was enforced on the WebSocket mount and event paths but not on three other render entry...

CVE-2017-10271

CVE-2017-10271 の特定と悪用。認証不要の WebLogic RCE。 https://nvd.nist.gov/vuln/detail/CVE-2017-10271 https://www.oracle.com/technetwork/topics/security/cpuoct2017-3236626.html root@kitploit: POST /wls-wsat/CoordinatorPortType HTTP/1.1 Host: SOMEHOSTHERE Content-Length: 1226 content-type: text/xml...

GHSA-C7C5-5J6R-Q957 djust has broken object-level access control (IDOR)

Impact djust's per-object authorization getobject + hasobjectpermission, ADR-017 was enforced on the WebSocket mount and event paths but not on three other render entry points: a the initial HTTP GET render, b SPA urlchange navigation, and c % liverender % embedded child views. An authenticated...

djust has broken object-level access control (IDOR)

Impact djust's per-object authorization getobject + hasobjectpermission, ADR-017 was enforced on the WebSocket mount and event paths but not on three other render entry points: a the initial HTTP GET render, b SPA urlchange navigation, and c % liverender % embedded child views. An authenticated...

custom-bytecode-analyzer

custom-bytecode-analyzer JSONルールでカスタマイズ可能なJavaバイトコードアナライザ。これはコマンドラインツールで、1つ以上のJarまたはWarファイルを含むパスを受け取り、提供されたルールを使用して解析し、結果のHTMLレポートを生成します。 使用方法 root@kitploit: usage: java -jar cba-cli.jar OPTIONS -a DIRECTORYTOANALYZE -a,--analyze 解析を実行するディレクトリのパス。 -c,--checks 解析で実行されるカスタムチェックのスペース区切りリスト。...

overwrite

Laravel Nova 向けの、簡単かつ完全なフレキシブルフィールド。繰り返し可能で柔軟なフィールドグループに最適です。 クイックスタート ここでは、すぐに始めるための非常に簡潔なガイドを紹介します。 完全なドキュメントはこちらをご覧ください: https://whitecube.github.io/nova-flexible-content インストール root@kitploit: composer require whitecube/nova-flexible-content 使用方法...

CVE-2026-61594

djust is a Phoenix LiveView-style reactive server-side rendering library for Django with Rust-powered performance. Prior to version 1.0.7 , its live WebSocket transport authorized view mounts via check_view_auth rather than Django's View.dispatch() chain. This caused standard Django authorization...