299612 matches found
CVE-2026-88619
1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module. The AdminSmartJobController exposes scheduled-job management endpoints without method-level permission checks, allowing a low-privileged authenticated user to access functionality...
CVE-2026-55864
GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server...
CVE-2026-58196
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol MCP servers. Prior to 0.31.0, remote.Handler.Authenticate in pkg/auth/remote/handler.go invokes discovery.DetectAuthenticationFromServer in pkg/auth/discovery/discovery.go, whose host-side HTTP...
CVE-2025-31324
CVE-2025-31324 이 탐지 방법은 어떻게 작동하나요? 이 템플릿은 대상의 기본 URL에 HTTP GET 요청을 수행하고 응답 헤더를 검사하여 SAP NetWeaver Application Server 인스턴스를 식별합니다. 이 정보는 시스템이 CVE-2025-31324에 취약할 수 있는지 여부를 평가하는 데 도움이 됩니다. 이 스크립트는 어떻게 실행하나요? 1. 여기에서 Nuclei를 다운로드하세요. 2. 템플릿을 로컬 시스템에 복사하세요. 3. 다음 명령어를 실행하세요: nuclei -u...
CVE-2021-3899_PoC
CVE-2021-3899 PoC 재현 0. apport의 이전 버전을 설치하세요: sudo apt-get install apport=2.20.11-0ubuntu27 2.20.11-0ubuntu27.10 이하의 모든 버전은 괜찮지만, 소스 코드를 직접 내려받아야 합니다. 1. 선택 사항 pidmax를 작게 설정하세요. 그렇지 않으면 pid 롤백을 준비하는 데 더 오랜 시간이 걸립니다. echo 10000 | sudo tee /proc/sys/kernel/pidmax 2. 아무나 root로 ping을 실행할 수 있게 허용하세요:...
CVE-2024-36837
README.md CVE-2024-36837 Disclaimer 智联云采 SRM2.0 runtimeLog/download 인터페이스에 임의 파일 읽기 취약점이 존재하며, 인증되지 않은 공격자는 이 취약점을 통해 시스템 중요 파일예: 데이터베이스 구성 파일, 시스템 구성 파일, 데이터베이스 구성 파일 등을 읽을 수 있어 웹사이트가 극도로 안전하지 않은 상태에 놓이게 됩니다. fofa 구문： body="/wap/first/zsff/iconfont/iconfont.css" || body="CRMEB" POC： GET...
CVE-2026-27886
CVE-2026-27886 Strapi PoC 승인된 보안 테스트에만 사용하십시오. Strapi가 쿼리 샌티타이징 부재로 인해 관계형 필터링을 통해 민감한 데이터를 유출. 포함 항목: CVE-2026-27886.py - Python PoC CVE-2026-27886.yaml - 탐지용 Nuclei 템플릿 확인 사항 체커는 공개된 Strapi Content API 컬렉션 엔드포인트로 두 개의 요청을 보냅니다: root@kitploit: GET /api/ GET /api/?whereid$lt=-1 기준 응답에 레코드가 있고, 거짓...
Security Bulletin: IBM watsonx Code Assistant On Prem product impacted by Vulnerability Found in runtime-7.26.10.tgz
Summary A vulnerability CVE-2025-27789 has been identified in the Babel runtime package @babel/runtime version 7.26.10 and earlier, which impacts the IBM watsonx Code Assistant On Prem Vulnerability Details CVEID:CVE-2025-27789 DESCRIPTION: Babel is a compiler for writing next generation...
Malicious code in process-lhpm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a663308c4051eb4b31faf7fb984989f3e1b3498e505dc05052e2beb5fbf7e6d2 On require/import, index.js auto-invokes initialize, which spawns a detached, stdio-suppressed node loader.js background process. loader.js performs ...
MAL-2026-16178 Malicious code in process-lhpm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a663308c4051eb4b31faf7fb984989f3e1b3498e505dc05052e2beb5fbf7e6d2 On require/import, index.js auto-invokes initialize, which spawns a detached, stdio-suppressed node loader.js background process. loader.js performs ...
EUVD-2026-78818
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol MCP servers. Prior to 0.31.0, remote.Handler.Authenticate in pkg/auth/remote/handler.go invokes discovery.DetectAuthenticationFromServer in pkg/auth/discovery/discovery.go, whose host-side HTTP...
CVE-2026-58196 ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol MCP servers. Prior to 0.31.0, remote.Handler.Authenticate in pkg/auth/remote/handler.go invokes discovery.DetectAuthenticationFromServer in pkg/auth/discovery/discovery.go, whose host-side HTTP...
CVE-2026-58196 ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol MCP servers. Prior to 0.31.0, remote.Handler.Authenticate in pkg/auth/remote/handler.go invokes discovery.DetectAuthenticationFromServer in pkg/auth/discovery/discovery.go, whose host-side HTTP...
CVE-2026-58196
ToolHive (a utility for deploying Model Context Protocol (MCP) servers) is vulnerable to SSRF in its remote MCP server authentication discovery. Prior to 0.31.0 , the host-side HTTP clients in pkg/auth/discovery trust server-controlled resource_metadata URLs from the WWW-Authenticate header, foll...
CVE-2026-58196 ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol MCP servers. Prior to 0.31.0, remote.Handler.Authenticate in pkg/auth/remote/handler.go invokes discovery.DetectAuthenticationFromServer in pkg/auth/discovery/discovery.go, whose host-side HTTP...
CVE-2026-27886-PoC-Account-Takeover
CVE-2026-27886 자동 익스플로잇 - 사용 가이드 이 스크립트가 하는 일 4개의 HTTP 요청 그룹으로 전체 계정 탈취 체인을 자동화합니다: 1. 취약점 확인 - 대상이 취약한지 확인 2. 이메일 열거 - 부울 오라클을 통해 관리자 이메일 추출약 500개 요청 3. 비밀번호 재설정 트리거 - Strapi의 비밀번호 복구 흐름 시작 4. 토큰 유출 - 40자 재설정 토큰 탈취약 320개 요청 5. 계정 탈취 - 탈취한 토큰을 사용하여 슈퍼 관리자 JWT 획득 기본 사용법 확인 전용 모드 안전 익스플로잇 없이 대상이...
How to opt out of AI chatbot training
The tech journalists at 404 Media learned that OpenAI is hiring hundreds of contractors to read and review a massive stream of real users’ ChatGPT prompts and responses. “Project Lily” is reportedly a program that asks contractors to score or critique ChatGPT's answers to improve the chatbot's...
ipmi
I wrote some software to explore IPMI; here are some of results. I thought I'd do the usual detect, get data, and audit sort of cycle. Each of these turned out to be fairly interesting problem on its own, at least to me. BTW/FYI - I released a new tool to explore IPMI -...
CVE-2026-55864 GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool
GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server...
CVE-2026-55864 GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool
GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server...