CVE-2026-105049

Zilliz Attu versions prior to 3.0.0 are vulnerable to a missing authentication flaw in the Playground feature. This vulnerability allows unauthenticated attackers to proxy arbitrary HTTP and HTTPS requests to URLs on the public internet. No specific exploit details or remediation steps are provid...

CVE-2026-105049

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet...

CVE-2026-105049

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet...

zoshrinkC2

MeliziaC2 DNS over HTTPS を使用した標的型マルウェア（一度だけ実行される） ! 一部の機能はまだ利用できません ! ! WIP、本番環境では使用しないでください ! 主な機能 失敗時にマルウェアを自動削除 完全暗号化（被害者ごとのRSA鍵）DoH（DNS-over-HTTPS）通信 マルウェアは一度だけ実行される！ 図 画像 必要要件 https://github.com/demon-i386/throatcut 使用手順 0 - contractgenerator.py ファイルを編集 modify C2ServerIP variable: C2ServerIP...

CVE-2026-104459

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in WebfingerService that allows unauthenticated attackers to trigger HTTPS requests to internal hosts. Attackers can POST a crafted actorhandle with a numeric host and port to the abonnements view to probe internal HTTPS...

Lack of vulnerability protection in Fortinet FortiMail

Fortinet has identified a vulnerability in FortiMail. FortiMail contains a critical vulnerability CVE-2026-104286 in the processing of file paths, caused by a combination of Path Traversal CWE-22 and insufficient neutralization of NULL bytes CWE-158. An unauthorized attacker can use specially...

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

The U.S. Cybersecurity and Infrastructure Security Agency CISA, on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-104286 CVSS score: 9.8,...

https-everywhere

Actualización sobre HTTPS Everywhere ⚠️Este proyecto ya no recibe mantenimiento ni actualizaciones. Por favor, desinstálalo y dirige a los usuarios al consejo de abajo para cambiar a HTTPS por defecto de forma nativa. ¡Ya no necesitas HTTPS Everywhere para configurar HTTPS por defecto! Los...

mitmengine

MITMEngine AVISO DE OBSOLESCENCIA: Este software ya no recibe mantenimiento. El objetivo de este proyecto es permitir la detección precisa de la interceptación HTTPS y la robusta toma de huellas dactilares TLS. Este proyecto se basa en The Security Impact of HTTPS Interception, y comenzó como un...

NSEC3-X

DISCLAIMER: This project was generated by Artificial Intelligence AI but has undergone a rigorous "Human-in-the-Loop" HITL process. This means the code has been reviewed and refactored by a human software engineer, the architectural design was human-directed, and a basic security audit was...

PT-2026-104452

Name of the Vulnerable Software and Affected Versions Zilliz Attu versions prior to 3.0.0 Description The Playground feature allows the proxying of arbitrary HTTP and HTTPS requests to URLs on the public internet without requiring authentication. This leads to a Server-Side Request Forgery SSRF, ...

CVE-2026-104286

An improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on th...

ca-clone

CA Cloning Scripts Scripts to clone CA certificates for use in HTTPS client attacks. Currently includes scripts to clone a root Comodo CA, and a Digicert CA, both of which are fairly widely trusted in IoT devices. Usage Run either script in place to automatically generate a key and certificate. I...

CVE-2026-104286

An improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on th...

EUVD-2026-91042

An improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on th...

CVE-2026-104286

An improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on th...

ip-https-tools

ip-https-tools A collection of tools for the IP over HTTPS IP-HTTPS Tunneling Protocol used by Microsoft DirectAccess to send Teredo related IPv6 packets over an IPv4-based HTTPS session. MS-IPHTTPS protocol pecification DirectAccess Technical Overview DirectAccess Requirements DirectAccess...

DoHC2

⚠️ NOTE: This tool is no longer under active maintenance. DoHC2 DoHC2 allows the ExternalC2 library from Ryan Hanson https://github.com/ryhanson/ExternalC2 to be leveraged for command and control C2 via DNS over HTTPS DoH. This is built for the popular Adversary Simulation and Red Team Operations...

CVE-2026-9032

Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without authentication after initial setup and does not validate that a password field is present for certain authentication and encryption parameter combinations...

CVE-2026-78578

Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setup. An unauthenticated adjacent attacker can submit unauthorized wireless configuration parameters, causing the camera to attempt connection to a different network. Successful...