CVE-2026-85022 langgenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scripting

A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/shareLayout/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirecturl leads to cross...

EUVD-2026-70298

A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/shareLayout/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirecturl leads to cross...

CVE-2026-85022 langgenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scripting

A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/shareLayout/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirecturl leads to cross...

CVE-2026-85022 langgenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scripting

A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/shareLayout/webapp-signin/components/mail-and-password-auth.tsx of the component WebApp Sign-In. Such manipulation of the argument redirecturl leads to cross...

CVE-2026-85022

A cross-site scripting (XSS) vulnerability affects the WebApp Sign-In component of langgenius dify 1.13.0 , specifically in the router.replace function within web/app/(shareLayout)/webapp-signin/components/mail-and-password-auth.tsx. Manipulating the redirect_url argument enables remote attackers...

CVE-2023-48022

CVE-2023-48022 CVE-2023-48022 exploit modified from Bishop Fox work How to use set ip and port in jobs.py set payload in malicious.py $ pip install ray $ python3 jobs.py...

log4j-polkit-poc

log4j CVE-2021-44228 + polkit CVE-2021-4034 Vulnerable instance for the log4j apache exploit and privilege escalation using polkit The vulnable spring-boot-application.jar was extracted from this docker image The malicious JNDI server was downloaded from here and referenced in this article. PoC...

CVE-2026-1529

CVE-2026-1529 Keycloak Exploit Tool CVE-2026-1529 : Keycloak - Unauthorized organization registration via improper invitation token validation ⚠️ WARNING : This tool is for educational and authorized security testing purposes only. Unauthorized access to computer systems is illegal. 📋 Table of...

cve-2021-43858

Exploit CVE-2021-43858 Exp de escalada de privilegios de usuario en MinIO Forma de ejecución: go run exp.go...

CVE-2017-1000112-PoC

CVE-2017-1000112（缓冲区溢出） 从 https://old-releases.ubuntu.com/releases/16.10/ubuntu-16.10-server-amd64.iso 下载ISO镜像 root@kitploit: gcc exploit.c -o exploit 获得root权限...

CVE-2024-34102

CVE-2024-34102 - Exploit XXE CosmicSting Exploit para CVE-2024-34102 CosmicSting - Vulnerabilidad de XXE XML External Entity en Adobe Commerce y Magento. 📋 Acerca de la vulnerabilidad CVE-2024-34102 es una vulnerabilidad crítica de XXE XML External Entity que afecta a: Adobe Commerce versiones...

Simple-CTF-Writeup

Simple-CTF-Writeup Guía profesional del laboratorio Simple CTF de TryHackMe que cubre enumeración, inyección SQL en CMS Made Simple CVE-2019-9053, recuperación de credenciales, acceso por SSH, escalada de privilegios mediante Vim y compromiso total del sistema root. TryHackMe - Writeup de Simple...

CVE-2025-62878

CVE-2025-62878: 本地路径供应器路径遍历漏洞 概述 项目| 值 ---|--- CVE ID| CVE-2025-62878 GHSA ID| GHSA-jr3w-9vfr-c746 严重性| 严重 CVSS 10.0 CWE| CWE-23 相对路径遍历 受影响组件| rancher/local-path-provisioner 受影响版本| v0.0.27 v0.0.32 已修复版本| v0.0.33+ 漏洞描述 StorageClass 的 pathPattern 参数存在路径遍历漏洞。恶意用户可以通过使用相对路径元素（例如 ../）来操纵...

Terrminus-CVE-2026-2406

Terminus - Escáner y Marco de Explotación CVE-2026-24061 Un motor de análisis de seguridad para la vulnerabilidad de omisión de autenticación y escalada de privilegios Telnet NEWENVIRON CVE-2026-24061. Resumen Terminus es una herramienta profesional de investigación de seguridad diseñada para...

CVE-2025-58434-Unauthenticated-Password-Reset-Flowwise

Flowise Password Reset Account Takeover ATO For research and testing purposes only! I am not responsible for any damages to live infrastructure if this tool is not used as intended. Only use on systems you own or have permission to be testing! Usage root@kitploit: usage:...

CVE-2025-21756

CVE-2025-21756 — Laboratorio de explotación Solo para fines educativos y de investigación de seguridad autorizada. Descripción CVE-2025-21756 es una vulnerabilidad de use-after-free UAF en el subsistema vsock Virtual Socket del kernel de Linux, divulgada el 26 de febrero de 2025. Permite a un...

CVE-2022-25012-dvr4-weak-password-encryption — Updated!

This is an improved version of the exploit by deathflash1411 Original exploit: https://www.exploit-db.com/exploits/50130 Improved Features Cracked password is now output as reconstructed password string instead of only output character by character The encrypted password string is now entered as ...

CVE-2025-60787-MotionEye-RCE

CVE-2025-60787: Motioneye 远程代码执行 RCE CVE-2025-60787 的专业概念验证 PoC，这是 MotionEye（版本 ≤ 0.43.1b4）中的一个严重远程代码执行 RCE 漏洞。 技术概述 该漏洞源于 configUiValid JavaScript 函数中的客户端验证绕过。虽然 UI 验证了文件名字段，但服务器端在将这些输入写入 camera-N.conf 文件之前未能正确清理它们。攻击者可以通过 imagefilename 参数注入任意 shell 命令，导致在服务重新加载或重启时完全控制系统。 安装 按照以下步骤设置环境和漏洞利用工具：...

RAMnesia-Attack

This research presents a comprehensive analysis of two critical classes of attacks on the hardware memory of modern computer systems using DDR5 memory: Phoenix Rowhammer Attack CVE-2025-6202 and RAMnesia Attack CVE-2023-39910 . Both attacks demonstrate fundamental vulnerabilities in the processin...

CVE-2026-85021 langgenius dify Splash Layout splash.tsx router.replace cross site scripting

A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/shareLayout/components/splash.tsx of the component Splash Layout. This manipulation of the argument redirecturl causes cross site scripting. The attack is possible to be carried o...