CVE-2024-37843-POC

CVE-2024-37843-POC CVE-2024-37843 的 POC。Craft CMS 基于时间盲注 SQL 注入 详情见博客 POC root@kitploit: curl -X POST '/api/' -H 'Content-Type:application/json' -d '"query":"query IntrospectionQuery assetsorderBy: "assets.volumeId -- \\ \n \n LIMIT 5 AS subquery\nINNER JOIN assets assets ON assets.id =...

hetty

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. Features Machine-in-the-middle MITM HTTP proxy, with logs and advanced...

cli

CloudGraph 是一个免费的开源通用 GraphQL API 和云安全态势管理（CSPM）工具，支持 AWS、Azure、GCP 和 K8s 。通过 CloudGraph，您可以获得： 免费且轻松的 合规性检查 （例如 Azure CIS 1.3.1、GCP CIS 1.2、AWS CIS 1.2、AWS CIS 1.3、AWS CIS 1.4、AWS PCI 3.2.1、AWS NIST 800-53 Rev. 4） 所有云环境中所有资源的 类型安全资产清单 自动生成的文档和查询验证——在发送查询之前就能知道其是否有效！ 包含资源间 关系 的完整资源数据，以便理解上下文...

GraphQLer

唯一一款依赖感知的 GraphQL API 测试工具！ GraphQLer 是一款前沿工具，专为动态测试 GraphQL API 而设计，注重适应性。它提供一系列高级功能，可简化测试流程并确保对 GraphQL API 进行可靠分析。GraphQLer 能高效管理已创建的对象和资源，有效识别对象、查询和变更之间的依赖关系，并根据 API 的限制动态纠正查询中的错误。GraphQLer 已被用于在生产级 GraphQL API 中发现大量漏洞！ 主要功能 依赖感知 ：根据依赖关系执行查询和变更！ 动态测试 ：跟踪测试过程中创建的资源 错误纠正 ：尝试修复请求，以便 GraphQL API...

CVE-2026-19478

-b91c1c?style=flat-square CVE-2026-19478 — Plantilla de Nuclei Plantilla de detección no destructiva de Nuclei para CVE-2026-19478 , una vulnerabilidad crítica CVSS 9.4 de invocación arbitraria de métodos sin autenticación en la API GraphQL de GitLab, corregida por GitLab el 17 de agosto de 2026...

CVE-2021-4191-EXPLOIT

CVE-2021-4191 - Enumeración de usuarios de GitLab GitLab es una herramienta de ciclo de vida DevOps basada en web y ampliamente utilizada que ofrece un administrador de repositorios Git con funciones integradas para integración continua, seguimiento de problemas, revisiones de código y más. La AP...

CVE-2021-4191_Exploits

CVE-2021-4191漏洞利用 pip install python-graphql-client 用法： python3 gitlabenum.py --rurl http://10.0.0.6/api/graphql 版权：https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/...

CVE-2026-86176

NetBox through 4.7.0 fails to properly scope user-private records in REST and GraphQL API endpoints for Notifications, Subscriptions, and Bookmarks. Authenticated users with view permissions can access all users' private records through unscoped querysets, disclosing which users watch or bookmark...

CVE-2026-86176 NetBox through 4.7.0 Information Disclosure via REST and GraphQL APIs

NetBox through 4.7.0 fails to properly scope user-private records in REST and GraphQL API endpoints for Notifications, Subscriptions, and Bookmarks. Authenticated users with view permissions can access all users' private records through unscoped querysets, disclosing which users watch or bookmark...

CVE-2026-86176

NetBox through 4.7.0 fails to properly scope user-private records in its REST and GraphQL API endpoints for Notifications, Subscriptions, and Bookmarks . The root cause is the use of unscoped querysets , which allows any authenticated user with view permissions to access all users' private record...

CVE-2026-86175 NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...

CVE-2026-86175

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses . Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, enabling unauthorized access to e...

CVE-2026-86175 NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...

CVE-2025-56643

CVE-2025-56643 CVE-2025-56643 的公开参考 – Wiki.js 2.5.307 JWT 会话漏洞 描述： Requarks Wiki.js 2.5.307 在用户登出时未能正确撤销或使活跃的 JWT 令牌失效。 因此，先前发放的令牌仍然有效，可在登出后重新用于访问系统。 此行为影响会话完整性，若令牌泄露，可能导致未经授权的访问。 该问题存在于身份验证解析器逻辑中，影响 GraphQL 端点及登出机制。 受影响产品： Wiki.js – 版本 2.5.307 受影响组件： GraphQL API 端点（/graphql）、认证模块、JWT 会话管理、登出逻辑（U...

CVE-2026-18885

CVE-2026-18885 is a code injection vulnerability in the ServiceNow AI platform , specifically in its GraphQL Composite Data API , enabling an unauthenticated attacker to execute arbitrary code and access or modify instance data. The CVSS 4.0 base score is 10.0 (Critical) with all impact dimension...

CVE-2026-18885 Unauthenticated Remote Code Execution in GraphQL Composite Data API

ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access to, or modify, instance data beyond...

CVE-2026-55489

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentationId through /api/graphql that identified a presentation belonging to another meeting...

EUVD-2026-63683

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentationId through /api/graphql that identified a presentation belonging to another meeting...

CVE-2026-55489 BigBlueButton: IDOR on BBB through /api/graphql via POST parameter "presentationId" leads to Authentication Bypass

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentationId through /api/graphql that identified a presentation belonging to another meeting...

CVE-2026-55489 BigBlueButton: IDOR on BBB through /api/graphql via POST parameter "presentationId" leads to Authentication Bypass

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentationId through /api/graphql that identified a presentation belonging to another meeting...