CVE-2026-76900 CordysCRM: SSRF via Approval Flow Webhook Execution due to Missing SSRF Validation at Runtime

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. In version 1.7.3, ApprovalResourceService.sendWebHook reads WebHookConfig.webHookUrl from stored approval-node configuration and passes it through...

EUVD-2026-83371

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. In version 1.7.3, ApprovalResourceService.sendWebHook reads WebHookConfig.webHookUrl from stored approval-node configuration and passes it through...

CVE-2026-76900

CordysCRM is an open-source AI-powered CRM that supports private deployment. In version 1.7.3 , the ApprovalResourceService.sendWebHook method reads WebHookConfig.webHookUrl from stored approval-node configuration and passes it through ApprovalFlowService.updateApprovalPostField to HttpClientUtil...

GPOHound

GPOHound GPOHound는 SYSVOL 공유에서 추출된 GPO그룹 정책 개체를 덤프하고 분석하기 위한 도구입니다. 이는 Active Directory 환경에서 잘못된 구성, 안전하지 않은 설정, 권한 상승 경로를 발견하는 데 도움이 되는 구조화되고 공식화된 형식을 제공합니다. 이 도구는 BloodHound의 Neo4j 데이터베이스와 통합되어 이를 Active Directory 정보의 LDAP 유사 소스로 사용하는 동시에 분석 결과를 바탕으로 새로운 관계엣지 및 노드 속성을 추가하여 이를 보강합니다. 기능 덤프 구조화된...

sniffly

Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...

CVE-2026-93873 Cotonti through 1.0.0 Cross-Site Request Forgery in the Contact Plugin

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to forge messages. Attackers can auto-submit contact forms from attacker-controlled pages to send forged messages attributed to authenticated victims to the administrator inbox...

CVE-2026-93873

Cotonti CMS through version 1.0.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the contact plugin's submission handler (plugins/contact/contact.php). The root cause is a failure to validate anti-CSRF tokens, allowing attackers to auto-submit contact forms from attacker-cont...

EUVD-2026-83370

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to forge messages. Attackers can auto-submit contact forms from attacker-controlled pages to send forged messages attributed to authenticated victims to the administrator inbox...

CVE-2026-93873 Cotonti through 1.0.0 Cross-Site Request Forgery in the Contact Plugin

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to forge messages. Attackers can auto-submit contact forms from attacker-controlled pages to send forged messages attributed to authenticated victims to the administrator inbox...

CVE-2026-93873 Cotonti through 1.0.0 Cross-Site Request Forgery in the Contact Plugin

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to forge messages. Attackers can auto-submit contact forms from attacker-controlled pages to send forged messages attributed to authenticated victims to the administrator inbox...

EUVD-2026-83367

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge ratings on behalf of authenticated users. Attackers can craft malicious pages that auto-submit POST requests to modify stored rating data when visited by logged-in users...

CVE-2026-93870

Cotonti through 1.0.0 has a Cross-Site Request Forgery (CSRF) vulnerability in the ratings plugin AJAX handler (ratings.ajax.php). The root cause is a failure to validate anti-CSRF tokens, allowing an attacker to craft a malicious page that auto-submits POST requests to modify stored rating data ...

CVE-2026-93870 Cotonti through 1.0.0 Cross-Site Request Forgery in the Ratings Plugin AJAX Handler

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge ratings on behalf of authenticated users. Attackers can craft malicious pages that auto-submit POST requests to modify stored rating data when visited by logged-in users...

CVE-2026-93870 Cotonti through 1.0.0 Cross-Site Request Forgery in the Ratings Plugin AJAX Handler

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge ratings on behalf of authenticated users. Attackers can craft malicious pages that auto-submit POST requests to modify stored rating data when visited by logged-in users...

transfer.sh

보안 경고 인증되지 않은 X-Forwarded-For 헤더 스푸핑을 통한 IP 필터 및 HTTP 인증 우회 transfer.sh 쉬운 명령줄 파일 공유. 이 코드는 자신의 인스턴스를 생성하는 데 필요한 모든 것을 갖춘 서버를 포함하고 있습니다. Transfer.sh는 현재 s3 Amazon S3, gdrive Google Drive, storj Storj 프로바이더 및 로컬 파일 시스템 local을 지원합니다. 면책 조항 @stefanbenten은 이 저장소의 관리자이며, 동시에 이 저장소에 있는 소프트웨어의 잘 알려진 공개...

CVE-2024-32002-Reverse-Shell

CVE-2024-32002-Reverse-Shell このスクリプトは、CVE-2024-32002の脆弱性を悪用してリバースシェルを取得し、影響を受けたシステムへのリモートアクセスを提供する方法を示しています。管理された環境でのみ、教育目的またはセキュリティテストの目的でのみ慎重に使用してください。 ブログ記事 このスクリプトはブログ Blog: https://amalmurali.me/posts/git-rce に触発されています。ここでこの脆弱性の詳細を見つけることができます。 仕組み 1...

dnsdiag

DNS 측정, 문제 해결 및 보안 감사 도구 세트 ISP가 귀하의 DNS 트래픽을 가로채고 있는지 궁금한 적이 있으신가요? DNS 응답에서 비정상적인 동작을 발견했거나, 잘못된 주소로 리디렉션되어 DNS에 문제가 있다고 의심된 적이 있으신가요? 저희는 DNS 요청과 응답에 대한 기본 감사를 수행하여 DNS가 예상대로 작동하는지 확인할 수 있는 도구 세트를 제공합니다. dnsping을 사용하면 임의의 쿼리에 대해 모든 DNS 서버의 응답 시간을 측정할 수 있습니다. 일반적인 ping 유틸리티와 유사하게, dnsping은 DNS...

CVE-2023-43879-RiteCMS-Stored-XSS---GlobalContent

Rite CMS v3.0 の複数の格納型XSS 作成者: Sergio 説明: Rite CMS 3.0 は、攻撃者が管理メニューの「Global Content Blocks」に細工したペイロードを注入することで任意のコードを実行できる、格納型クロスサイトスクリプティング（XSS）脆弱性の影響を受けます。 攻撃ベクトル: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L POC: パネルにログインしたら、「Administration - Global Content Blocks - Home」に移動します。 bodyの設定を編集し、XSSペイロードを追加しま...

hooky

hooky このリポジトリは https://github.com/markuta/CVE-2024-32002 のサブモジュールであり、macOSシステム上で計算機を開くためのシンプルなフックを y/hooks/post-checkout に含んでいます。 root@kitploit: open -a Calculator.app 脆弱性の詳細は こちら と こちら で確認できます。...

CVE-2025-50365_CSRF_DELETE_CATEGORY-phpgurukul-CVE

プロジェクト名とリポジトリURL: Maid Hiring Management System using PHP and MySQL 脆弱性タイプ: クライアントサイドリクエストフォージェリ 影響を受けるバージョン: v1.0 💣脆弱性説明: PHPGurukul採用管理システムの管理パネルにクロスサイトリクエストフォージェリ CSRF の脆弱性が存在します。攻撃者は認証済み管理者を悪意のあるサイトにアクセスさせることで、任意の採用カテゴリを削除できます。これにより、データの削除や管理者権限での不正な変更が発生する可能性があります。 👩‍💻影響: 不正なカテゴリ削除。 🛜概念実証 PoC:...