299174 matches found
Security Bulletin: Multiple security vulnerabilities found and remediated in IBM webMethods Managed File Transfer
Summary IBM webMethods Managed File Transfer is vulnerable to multiple issues in third-party JavaScript libraries used by its web user interface. The Axios HTTP client is susceptible to prototype pollution attacks that could allow an attacker to intercept or hijack HTTP transport, and to stream...
CVE-2026-23550
root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ███████╗ ███████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ╚════██╗╚════██╗██╔════╝ ██╔════╝██╔═████╗ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ █████╔╝ █████╔╝███████╗...
Kage-DFIR-toolkit
의심스러운 Windows 호스트에 Point Kage를 지정하면 하나의 체인으로 전체 트리아지를 실행합니다: CyLR 이 아티팩트를 수집하고, Hayabusa 가 이벤트 로그를 Sigma와 상관 분석하며, THOR Lite 가 YARA 매치를 스캔하고, VirusTotal 과 AbuseIPDB 가 지표를 검증하며, 원하는 AI 제공자가 보고서 초안을 작성합니다. 모든 단계는 실시간으로 스트리밍되고, 생성한 결과물을 봉인하며, 단독으로 재실행할 수 있습니다.bash pip install -r requirements.txt...
DEBIAN-CVE-2026-17495
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
CVE-2026-17495
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
CVE-2026-17495
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
UBUNTU-CVE-2026-17495
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
CVE-2026-23813
CVE-2026-23813 — Обход аутентификации до авторизации в AOS-CX Неаутентифицированные удаленные злоумышленники могут получить доступ к REST API управления AOS-CX, проталкивая токен login через излишне разрешающую регулярную версию nginx, открывая поверхность конфигурации на основе OVSDB включая...
CVE-2021-31630
OpenPLC WebServer v3 - Authenticated RCE CVE-2021-31630 이 익스플로잇은 Fellipe Oliveira가 만든 Exploit-DB의 익스플로잇을 기반으로 합니다. 먼저 인증합니다 악성 C 파일을 업로드합니다 컴파일합니다 PLC를 시작합니다 리버스 셸 시작 PLC를 중지합니다 실행할 필요는 없으며, 리버스 셸은 이미 시작되었습니다 root@kitploit: └─ python3 customexploit.py --url http://10.10.11.7:8080 --username openp...
Exploit for Improper Input Validation in Apache Tomcat
CVE-2026-24733 What is CVE-2026-24733? Apache Tomcat incor...
Shockwave-OSS
BountyTricks Делимся советами и хитростями по Bug Bounty с сообществом, включая автоматизацию, однострочники и полезные мысли Содержание 💂♂️ Разное Валидатор регулярных выражений Генератор гомоглифов Shodan-Scripts HTTP-заголовки MIME-типы Обратные прокси Разборы Контрабанда HTTP-запросов...
CVE-2022-26923
CVE-2022-26923 – Эксплойт Certifried Злоупотребление AD CS Автоматизированная эксплуатация CVE-2022-26923 Certifried , позволяющая повысить привилегии через злоупотребление службами сертификации Active Directory AD CS, с автоматическим переходом на делегирование на основе ресурсов RBCD и...
FUXAPWN
CVE-2026-25895 — FUXA = 1.2.9: неаутентифицированный обход пути Path Traversal, ведущий к удалённому выполнению кода Неаутентифицированная pre-auth произвольная запись файлов в FUXA — SCADA/HMI-платформе на базе Node.js. Цепочка доводится до удалённого выполнения кода через несколько отдельных...
CVE-2026-17495 moment vulnerable to Path Traversal via crafted non-string locale name
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
CVE-2026-17495
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
CVE-2026-17495 moment vulnerable to Path Traversal via crafted non-string locale name
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
EUVD-2026-78277
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
CVE-2026-17495
moment (a JavaScript date library) versions 2.29.2 through 2.30.1 are vulnerable to a path traversal via a specially crafted non-string object passed to moment.locale(). The guard assumes string input, so an object whose match() method satisfies the check while toString() returns a traversal path...
CVE-2026-17495 moment vulnerable to Path Traversal via crafted non-string locale name
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...