Malicious code in @hrmony/gutscheinverwaltung (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05705e4815a7ce926aad55136e379d3f901ad923a0fcb7f4002cf16e6cd78c56 On module load, the package performs top-level fetches against the AWS EC2 Instance Metadata Service using IMDSv2 requesting a token, then reading...

CVE-2026-71898

An incorrect authorization check in Apache DolphinScheduler allows an authenticated user with only read permission for a project to modify a workflow instance in that project through the PUT /projects/projectCode/workflow-instances/id endpoint. The endpoint does not enforce the write permission...

CVE-2026-71898 Apache DolphinScheduler: Improper Authorization Allows Project Read-Only Users to Execute Workflows and Tamper with Workflow Definitions

An incorrect authorization check in Apache DolphinScheduler allows an authenticated user with only read permission for a project to modify a workflow instance in that project through the PUT /projects/projectCode/workflow-instances/id endpoint. The endpoint does not enforce the write permission...

security-research

security-research Proof-of-concept code and technical write-ups for vulnerabilities I discovered and reported through coordinated disclosure. Every entry here is already public: the vendor advisory is published and a fixed release is available. Nothing under embargo or in draft is included. The...

CVE-2022-29221-PoC

CVE-2022-29221-PoC 私はもうGithubではホストしていません。代わりに自分のGitホスティングインスタンスでホストしています。 コードを見るにはこちらへ: https://git.sbani.net/sbani/CVE-2022-29221-PoC...

CVE-2025-31161_exploit

CVE-2025-31161 / CVE-2025-2825 Pythonエクスプロイト 単一のURLを処理するには、次のコマンドを使用します: python3 script.py -u http://example.com URLのリストを含むファイル（1行に1つのURL）を処理するには、次のコマンドを使用します: python3 script.py -l urls.txt スレッド数を指定するには、-tフラグを使用します。 スクリプトの結果（レスポンスに「crushadmin」という文字列を含むURL）は、output.txtファイルに書き込まれます。...

CVE-2020-0609

CVE-2020-609-POC UDPが開いたポート3391のRDGサーバーに対してPoCを実行すると、RDGインスタンスがクラッシュします。 開発中のスパーリングにご協力いただいた@Ollypwnに感謝します。...

CVE-2026-91006

A flaw was found in Apache Karaf. An attacker with access to instance-management commands or Java Management Extensions JMX interfaces can achieve arbitrary command execution on the underlying host system. This issue occurs because user-supplied Java options are spliced directly into child-instan...

CVE-2026-91006 Apache Karaf: OS Command Injection in Child-Instance Launch (instance:* / InstancesMBean)

Apache Karaf's instance-management service InstanceServiceImpl builds the command line used to launch a child Karaf JVM by string concatenation, then executes it through /bin/sh Unix or cscript Windows. The caller-supplied javaOpts value is spliced into that string unquoted. A javaOpts value...

CVE-2023-26258-ArcServe

TL; DR; ネットワーク内にいる場合、ArcServeRadar.py を使ってデフォルト設定のインスタンスをスキャンできます。C への移植を試みましたができませんでした。方法が分かる方はご自由にどうぞ : c:\Users\vagrant\Desktoppython ArcServeRadar.py "Ethernet 2" 6969 192.168.56.20 -= ArcServe Finder - @TheXC3LL - MDSec =- Starting to monitor Broadcasting WARNING: Mac address to reach...

CVE-2015-2166-EXPLOIT

CVE-2015-2166 - 爱立信Drutt移动服务交付平台（MSDP）中的目录遍历漏洞 CVE-2015-2166 是一个影响爱立信Drutt移动服务交付平台（MSDP）版本4、5和6中实例监控器的目录遍历漏洞。该漏洞允许远程攻击者通过在默认URI中利用“..%2f”（点-点编码斜杠）读取受影响系统上的任意文件。 受影响版本 - 爱立信Drutt移动服务交付平台（MSDP）版本4 - 爱立信Drutt移动服务交付平台（MSDP）版本5 - 爱立信Drutt移动服务交付平台（MSDP）版本6 影响与严重性 该漏洞的存在带来了严重的安全风险，因为它允许未经授权访问爱立信Drutt...

CVE-2026-97998 netfilter: nfnetlink_log: cope with concurrent instance destruction

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinklog: cope with concurrent instance destruction Instances are refcounted. However, only memory release happens on the 1 - 0 transition; the unlink from hashes can occur with any refcount. Uncooperative userspac...

CVE-2026-97998 netfilter: nfnetlink_log: cope with concurrent instance destruction

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinklog: cope with concurrent instance destruction Instances are refcounted. However, only memory release happens on the 1 - 0 transition; the unlink from hashes can occur with any refcount. Uncooperative userspac...

CVE-2026-97998

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinklog: cope with concurrent instance destruction Instances are refcounted. However, only memory release happens on the 1 - 0 transition; the unlink from hashes can occur with any refcount. Uncooperative userspac...

CVE-2026-97973 net: macb: destroy the phylink instance on the probe error path

In the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phylink instance on the probe error path macbmiiinit creates a phylink instance on both of its success paths, but the probe unwind frees the netdev without destroying it, so a failing macballoctieoff or...

CVE-2026-97973

In the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phylink instance on the probe error path macbmiiinit creates a phylink instance on both of its success paths, but the probe unwind frees the netdev without destroying it, so a failing macballoctieoff or...

PT-2026-98999

Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote instance is established, and explicitly allows local/private addresses for this request, bypassing Nextcloud's core SSRF protections. The public, unauthenticated endpoints POST...

How to Break the Miranda Signature Scheme over Matrix Gabidulin Codes

The Miranda signature scheme relies on masking a matrix code which disposes of a masked underlying structure, and the knowledge of which allows for efficient error decoding. We consider a Gabidulin code which is expanded into a matrix code, that is only \Fq-linear. An additional masking is then...

CVE-2026-86860

ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to extract instance data beyond what was intended, resulting in privilege escalation. ServiceNow...

CVE-2026-86858

ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue could enable an unauthenticated user, in certain circumstances, to create, modify, or delete instance data beyond what was intended. In August 2026, ServiceNo...