Grav CMS vulnerable to remote code execution via .zip file upload

Summary A logged-in user can run any command on the server. A settings field can fill itself by calling one of Grav's built-in routines, and a safety check is supposed to allow only harmless ones. The check only recognises a routine when its name is written as one piece of text; named as a pair o...

GHSA-R94F-HX44-8JQF Grav CMS vulnerable to remote code execution via .zip file upload

Summary A logged-in user can run any command on the server. A settings field can fill itself by calling one of Grav's built-in routines, and a safety check is supposed to allow only harmless ones. The check only recognises a routine when its name is written as one piece of text; named as a pair o...

chameleon

19 настраиваемых ханипотов для мониторинга сетевого трафика, активности ботов и учетных данных DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic и ldap Если вы хотите внедрить ханипоты в свой проект, ознакомьтесь с QeeqBox...

Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin

Summary The core Flex group blueprint system/blueprints/user/group.yaml access field, lines 48-55 omits the security@: admin.super field guard that its sibling account blueprint carries account.yaml:131/138/150, added by the CVE-2026-42613 fix. A delegated non-super operator holding...

GHSA-XHFV-7758-R9HX Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin

Summary The core Flex group blueprint system/blueprints/user/group.yaml access field, lines 48-55 omits the security@: admin.super field guard that its sibling account blueprint carries account.yaml:131/138/150, added by the CVE-2026-42613 fix. A delegated non-super operator holding...

BurpSuite-Grand-Master-Tools

BurpSuite-Grand-Master-Tools nu11secur1ty 제작 — Burp 캡처를 즉각적이고 반복 가능한 작업으로 변환하는 모듈식 도구 키트입니다. 변환. 재사용. 열기. 자동화. 🚀 엘리베이터 피치 BurpSuite-Grand-Master-Tools 는 침투 테스터와 버그 바운티 헌터를 위한 가볍고 감사 가능하며 확장 가능한 도구 키트입니다. Nu11Request 같은 도구로 빠르게 시작하세요. Burp에서 캡처한 HTTP 요청을 한 번의 클릭으로 브라우저에서 열어볼 수 있는 실제 URL로 변환한 다음, 나...

EUVD-2026-60598

Grav: Single invalid UTF-8 byte disables every rule in Security::detectXss, bypassing the page-content XSS safety gate...

GHSA-Q2J8-X8HF-63CH Grav: Single invalid UTF-8 byte disables every rule in Security::detectXss(), bypassing the page-content XSS safety gate

Vulnerability Details Component: getgrav/grav core File: system/src/Grav/Common/Security.php Function: detectXss all six entries in the $patterns array use the PCRE u modifier, invoked from Grav\Common\Data\Validation::checkSafety the save-time XSS gate for any non-security.xsswhitelist account's...

Grav: Single invalid UTF-8 byte disables every rule in Security::detectXss(), bypassing the page-content XSS safety gate

Vulnerability Details Component: getgrav/grav core File: system/src/Grav/Common/Security.php Function: detectXss all six entries in the $patterns array use the PCRE u modifier, invoked from Grav\Common\Data\Validation::checkSafety the save-time XSS gate for any non-security.xsswhitelist account's...

CVE-2023-23946-POC

CVE-2023-23946 POC エクスプロイト CVE-2023-23946 の説明と POC CVE-2023-23946 の脆弱性は、git がシンボリックリンクを処理する際の欠陥に起因します。git はシンボリックリンクを作成するとき、実際にはそれをシンボリックリンクとして処理しないため、これを悪用して、作業ツリーの外部にあるファイルを指すことができます。 最初にシンボリックリンクを作成する root@kitploit: ln -s PATHYOUWANTTOACCESSOUTSITEWORKINGTREE symlink 次に、git apply で使用するパッチを作成する...

CVE-2022-45701

EN このプロジェクトは、特定のArrisルーターにおけるリモートコード実行（RCE）の脆弱性（CVE-2022-45701）を悪用するPythonスクリプトを提供します。この脆弱性により、認証されたユーザーがWebインターフェースを介してSNMP設定を操作することで、デバイス上で任意のコマンドを実行できます。 免責事項 : このツールは教育目的および倫理的なセキュリティテストのためのみです。このスクリプトの無断使用は違法かつ非倫理的です。 特徴 CVE-2022-45701 を悪用したリモートコード実行。 SNMP操作によるルーターセキュリティの回避。 Arris モデル...

GHSA-F8WV-XP27-6GQ7 Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write

Affected versions and vulnerable location - Confirmed on grav core at 78ebfc1 tag 2.0.13. - Sinks: - system/src/Grav/Common/Data/Blueprint.php:455-458 calluserfuncarray$o, $params bare-function dynamic-data provider. - Twin: system/src/Grav/Framework/Flex/FlexDirectory.php:936-938...

Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write

Affected versions and vulnerable location - Confirmed on grav core at 78ebfc1 tag 2.0.13. - Sinks: - system/src/Grav/Common/Data/Blueprint.php:455-458 calluserfuncarray$o, $params bare-function dynamic-data provider. - Twin: system/src/Grav/Framework/Flex/FlexDirectory.php:936-938...

ddos-reduction-system

FLOD 시스템 First Line Of Defense 적응형 2단계 Layer 4 볼류메트릭 DDoS 완화 게이트웨이. 저자: Abdullah Armiyao 프로젝트: 행동 기반 트래픽 분석을 이용한 준실시간 Layer 4 볼류메트릭 DDoS 완화를 위한 적응형 2단계 프레임워크 기능 대부분의 DDoS 완화는 고정 임계값을 사용한다. 초당 하드코딩된 패킷 수를 초과하는 모든 트래픽을 차단하는 식이다. 이 방식은 양방향 모두에서 실패한다. 바쁜 시간대에 정상 트래픽이 급증하면 실제 사용자가 차단되거나, 공격자가 임계값 바로 아...

GHSA-VFMF-Q6X9-CW96 Grav: detectXss() misses an event-handler attribute after an unpaired quote in an unquoted attribute value, giving stored XSS

Affected versions and vulnerable location - Confirmed on grav core at 78ebfc1 tag 2.0.13. - Detector: system/src/Grav/Common/Security.php:290, the onevents regex, run via patternMatches :315-330. - The onevents pattern at HEAD: "'??:\s\x00-\x20"'/|"^""|'^''on\sa-z+\s=iu - Sole save-time guard for...

Grav: detectXss() misses an event-handler attribute after an unpaired quote in an unquoted attribute value, giving stored XSS

Affected versions and vulnerable location - Confirmed on grav core at 78ebfc1 tag 2.0.13. - Detector: system/src/Grav/Common/Security.php:290, the onevents regex, run via patternMatches :315-330. - The onevents pattern at HEAD: "'??:\s\x00-\x20"'/|"^""|'^''on\sa-z+\s=iu - Sole save-time guard for...

CVE-2025-52688

CVE-2025-52688 영향을 받는 제품 Alcatel AP13161 - 엔터프라이즈 WIFI 액세스 포인트 요약 여기에 다루는 두 가지 주요 취약점이 있습니다: 여러 JSON 웹 파라미터에 대한 입력 검증 부족으로 ;와 같은 악성 문자를 주입하여 명령어 인젝션 공격을 유발할 수 있음 fileName 파라미터에 대한 적절한 검증 및 접근 제어 부족으로 서버에서 허가되지 않은 임의 파일 읽기를 가능하게 함 이 취약점은 CSA싱가포르 사이버보안청와 NTU가 주최한 SPIRICYBER-24 IoT/OT 해커톤에서 발견되었습니다...

Exihibitor-RCE

Exhibitor-RCE Exhibitor Web Ui 1.7.1 RCE、CVE-2019-5029 ステップ1: $ git clone https://github.com/thehunt1s0n/Exihibitor-RCE/ ステップ2: $ cd Exihibitor-RCE/ ステップ3（任意）: スクリプト内のjsonデータペイロードを編集する必要があるかもしれません。その場合は、Exhibitorの設定タブで変更をコミットする際にBurp Suiteでリクエストをキャプチャし、スクリプト内のcurlコマンドにコピー＆ペーストしてください。...

GHSA-4V9Q-P283-QC2M Grav: Unauthenticated Path Traversal via Missing Directory-Boundary Check in `plugin-asset-map.php` Static Asset Server (`index.php`)

Verified against: getgrav/grav devel branch, GRAVVERSION = "2.0.15", file index.php Title Unauthenticated Path Traversal via Missing Directory-Boundary Check in plugin-asset-map.php Static Asset Server index.php Product / Affected Versions - Product: getgrav/grav - File: index.php top-level front...

Grav: Unauthenticated Path Traversal via Missing Directory-Boundary Check in `plugin-asset-map.php` Static Asset Server (`index.php`)

Verified against: getgrav/grav devel branch, GRAVVERSION = "2.0.15", file index.php Title Unauthenticated Path Traversal via Missing Directory-Boundary Check in plugin-asset-map.php Static Asset Server index.php Product / Affected Versions - Product: getgrav/grav - File: index.php top-level front...