tough-cookie-patch-cve-2023-26136

RFC6265 用于 Node.js 的 Cookie 与 CookieJar 概要 javascript var tough = require'tough-cookie'; var Cookie = tough.Cookie; var cookie = Cookie.parseheader; cookie.value = 'somethingdifferent'; header = cookie.toString; var cookiejar = new tough.CookieJar; cookiejar.setCookiecookie,...

CVE-2026-104054 calcom cal.diy PBAC Permission BookingAccessService.ts doesUserIdHaveAccessToBooking authorization

A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function doesUserIdHaveAccessToBooking of the file BookingAccessService.ts of the component PBAC Permission Engine. Performing a manipulation results in missing authorization. The attack can be initiated remotely...

CVE-2026-104054 calcom cal.diy PBAC Permission BookingAccessService.ts doesUserIdHaveAccessToBooking authorization

A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function doesUserIdHaveAccessToBooking of the file BookingAccessService.ts of the component PBAC Permission Engine. Performing a manipulation results in missing authorization. The attack can be initiated remotely...

EUVD-2026-91160

A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function doesUserIdHaveAccessToBooking of the file BookingAccessService.ts of the component PBAC Permission Engine. Performing a manipulation results in missing authorization. The attack can be initiated remotely...

CVE-2026-104054 calcom cal.diy PBAC Permission BookingAccessService.ts doesUserIdHaveAccessToBooking authorization

A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function doesUserIdHaveAccessToBooking of the file BookingAccessService.ts of the component PBAC Permission Engine. Performing a manipulation results in missing authorization. The attack can be initiated remotely...

CVE-2026-104054

A security flaw in calcom cal.diy up to version 6.2.0 allows for missing authorization due to a vulnerability in the PBAC Permission Engine component. Specifically, the doesUserIdHaveAccessToBooking function within the BookingAccessService.ts file can be manipulated to bypass intended access cont...

Exploit for CVE-2026-19553

abraxaslabs.tech · github.com/abraxas ·&...

Exploit for CVE-2026-19445

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-88789

CVE-2026-88789 — Camel Quarkus: el TransformerFactory de Xalan forzado elimina las restricciones de acceso externo de JAXP Reproductor de prueba de concepto ejecutable para la vulnerabilidad de Apache Camel Quarkus en la que la extensión de soporte XSLT camel-quarkus-support-xalan proporciona su...

CVE-2026-73637

A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...

CVE-2026-63045

A flaw was found in httpd. When configured as a forward proxy using the modproxyftp module, the server improperly validates the network address returned in a File Transfer Protocol FTP passive mode PASV response. A malicious FTP server can exploit this flaw by returning a crafted reply, forcing t...

CVE-2026-63718

A flaw was found in the modproxyuwsgi module of Apache HTTP Server. This issue allows HTTP response smuggling when the server processes a crafted uWSGI response containing a Transfer-Encoding header. A remote attacker can exploit this vulnerability to desynchronize HTTP communications, potentiall...

CVE-2026-63292

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

CVE-2026-59685

A flaw was found in httpd. When deployed on Windows environments, an out-of-bounds write vulnerability occurs while processing path requests containing short 8.3 file names that expand beyond allocated memory buffers. A remote attacker can exploit this flaw by sending crafted HTTP requests,...

CVE-2026-56153

A flaw was found in httpd's modcharsetlite module. A heap-based buffer overflow an out-of-bounds memory write occurs in the finishpartialchar function when handling character set conversions. A remote attacker can exploit this flaw by sending specially crafted requests, leading to memory...

C2-Tracker

C2 Tracker C2 Tracker 是一个免费使用、社区驱动的 IOC 情报源，利用 Shodan 和Censys 搜索来收集已知恶意软件/僵尸网络/C2 基础设施的 IP 地址。 此项目已归档 此项目已归档。data/ 中的文本文件已被移除，不再更新。tracker.py 中的签名也不再更新。 此项目仍可在本地运行，请参阅下方。 致谢 许多查询来源于其他 CTI 研究人员： BushidoToken Michael Koczwara ViriBack Gi7W0rm Glacius corumir salmanvsf SecurityJosh 向他们致以崇高的敬意！ 感谢...

IoT-PT-v1

🛠️ IoT-PT OS v1 物联网渗透测试操作系统 - 版本 1 📦 什么是 IoT-PT OS v1？ IoT-PT OS v1 是一款专为物联网安全评估设计的渗透测试虚拟机。它预配置了针对固件分析、嵌入式系统攻击、无线破解等场景的工具、脚本和环境。 💾 下载 直接链接 ：下载 IoT-PT OSv1 校验和： MD5: d9c20057b14cfa3fb25f744813b828df SHA1: 8828d693dc6c809377bab40d2bc26f525685e287 📷 截图 🧰 系统信息与要求 组件| 最低要求 ---|--- 基础系统| Lubuntu 18.04...

bug-bounty-domains

漏洞赏金域名 属于最知名公共漏洞赏金项目的域名。 不适用于非货币或私人项目 平台| 条目数 ---|--- BUGBASE| 2 HACKENPROOF| 22 HACKERO...

Source

LibreWolf Source Repository This repository contains all the patches and theming that make up LibreWolf, as well as scripts and a Makefile to build LibreWolf. There also is the Settings repository, which contains the LibreWolf preferences. LibreWolf overview graph LR FFSRCFirefox Source...

CLEANSTART-2026-IT57555 Security fix for ghsa-p77j-4mvh-x3m3 applied in: consul 1.21.5-r0

Security vulnerability affects the consul package. This issue is resolved in later releases. See references for vulnerability details...