887750 matches found
GHSA-H7VF-4X9W-H99V oras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probing
Summary oras-go's pagination helper parseLink in registry/remote/utils.go follows the Link response header from a registry without validating the URL's host or scheme. When a malicious registry returns a Link header containing an absolute URL pointing to an arbitrary host e.g., a cloud metadata...
oras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probing
Summary oras-go's pagination helper parseLink in registry/remote/utils.go follows the Link response header from a registry without validating the URL's host or scheme. When a malicious registry returns a Link header containing an absolute URL pointing to an arbitrary host e.g., a cloud metadata...
GHSA-M37J-52J7-PJW7 oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)
Summary The content/file.Store in oras-go v2 unpacks OCI layer tarballs when a descriptor carries io.deis.oras.content.unpack=true. The extraction routine validates symlink targets purely lexically filepath.Join and, for regular files placed directly at the extraction root, skips the parent-symli...
oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)
Summary The content/file.Store in oras-go v2 unpacks OCI layer tarballs when a descriptor carries io.deis.oras.content.unpack=true. The extraction routine validates symlink targets purely lexically filepath.Join and, for regular files placed directly at the extraction root, skips the parent-symli...
Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata
Summary The Pebble template engine's http function in Kestra OSS accepts user-controlled URLs without any validation, allowing Server-Side Request Forgery SSRF attacks. An unauthenticated attacker can import a malicious Flow YAML and execute it to access internal services, cloud metadata endpoint...
GHSA-R56G-Q4P6-M3P6 Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata
Summary The Pebble template engine's http function in Kestra OSS accepts user-controlled URLs without any validation, allowing Server-Side Request Forgery SSRF attacks. An unauthenticated attacker can import a malicious Flow YAML and execute it to access internal services, cloud metadata endpoint...
Grav: FlexDirectory::dynamicDataField() executes arbitrary callables from blueprint data with no validation
Summary A missing validation check in Grav's Flex framework lets an account holding nothing but an ordinary object-create permission on a single Flex directory execute arbitrary shell commands on the server. Any authenticated user with create or update rights on a Flex-based directory Flex Users,...
GHSA-C4WF-2XXC-68QM Grav: FlexDirectory::dynamicDataField() executes arbitrary callables from blueprint data with no validation
Summary A missing validation check in Grav's Flex framework lets an account holding nothing but an ordinary object-create permission on a single Flex directory execute arbitrary shell commands on the server. Any authenticated user with create or update rights on a Flex-based directory Flex Users,...
noisy
Noisy 평소 웹 브라우징을 하는 동안 백그라운드에서 무작위 HTTP/DNS 트래픽 노이즈를 생성하여 웹 트래픽 데이터의 판매 가치를 낮추고 추가적인 난독성을 제공하는 간단한 파이썬 스크립트입니다. MacOS High Sierra, Ubuntu 16.04, Raspbian Stretch에서 테스트되었으며 Python 2.7 및 3.6 모두와 호환됩니다. 시작하기 이 지침은 로컬 머신에서 프로젝트 사본을 실행할 수 있도록 안내합니다. 의존성 requests가 아직 설치되지 않은 경우 pip를 사용하여 설치하세요:...
CVE-2026-54677 Scoold: Authenticated user can post replies and comments to private-space questions without space membership
Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of a private space can create content in questions belonging to that space because src/main/java/com/erudika/scoold/controllers/QuestionController.java in QuestionController.reply...
CVE-2026-54677 Scoold: Authenticated user can post replies and comments to private-space questions without space membership
Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of a private space can create content in questions belonging to that space because src/main/java/com/erudika/scoold/controllers/QuestionController.java in QuestionController.reply...
CVE-2026-54677
Scoold is a team Q&A and knowledge-sharing platform. Prior to 1.69.0 , the QuestionController.reply() and CommentController.createAjax() methods failed to apply the canAccessSpace authorization check used by the question read path. When scoold.is_default_space_public is set to false and private s...
EUVD-2026-82337
Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of a private space can create content in questions belonging to that space because src/main/java/com/erudika/scoold/controllers/QuestionController.java in QuestionController.reply...
CTT-HEARTBLEED-Temporal-Resonance-Memory-Leak-Exploit-Heartbleed-CVE-2014-0160
CTT-HEARTBLEED-Temporal-Resonance-Memory-Leak-Exploit-Heartbleed-CVE-2014-0160 HeartbleedCVE-2014-0160는 인접 메모리를 유출하여 치명적이었습니다. CTT-Heartbleed는 더 나아가 33계층 시간 공명을 사용하여 특정 메모리 영역을 시간에 걸쳐 매핑, 재구성 및 추출하며, 단순한 인접 버퍼를 넘어섭니다. 🕰️ CTT-Heartbleed v2.0: 시간 공명 메모리 추출 대상: OpenSSL 1.0.1 - 1.0.1f CVE-2014-0160 CT...
cve-2019-6340
CVE-2019-6340 이것은 Cved의 일부입니다: 취약한 도커 컨테이너를 관리하는 도구 Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2019-6340 Image author: https://github.com/cved-sources/cve-2019-6340...
CVE-2022-21587-POC
CVE-2022-21587-POC- CVE-2022-21587 POC root@kitploit: file exploit.py will overwrite to file .pl not recommended for use, will affect the system file EBS not overwrite, will create a new shell file slipit 설치: git clone https://github.com/usdAG/slipit root@kitploit: cd slipit python3 setup.py sdis...
CVE-2026-54053 Many Notes: Path Traversal via ZIP import allows arbitrary file write and stored XSS in other users' vaults
Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import implemented in app/Actions/ProcessImportedVault.php accepts archive filenames containing parent-directory traversal segments. An authenticated user can write arbitrary files outside...
CVE-2026-54053
Many Notes , a Markdown note-taking web application, is vulnerable to path traversal via its ZIP vault import (app/Actions/ProcessImportedVault.php) prior to version 0.16.0 . The import accepts archive filenames containing parent-directory traversal segments, allowing an authenticated user to wri...
CVE-2026-54053 Many Notes: Path Traversal via ZIP import allows arbitrary file write and stored XSS in other users' vaults
Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import implemented in app/Actions/ProcessImportedVault.php accepts archive filenames containing parent-directory traversal segments. An authenticated user can write arbitrary files outside...
EUVD-2026-82335
Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import implemented in app/Actions/ProcessImportedVault.php accepts archive filenames containing parent-directory traversal segments. An authenticated user can write arbitrary files outside...