CVE-2026-104459 YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handle

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in WebfingerService that allows unauthenticated attackers to trigger HTTPS requests to internal hosts. Attackers can POST a crafted actorhandle with a numeric host and port to the abonnements view to probe internal HTTPS...

CVE-2026-104458

YesWiki versions prior to 4.6.7 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the validateKeyIdUrl() function. This flaw allows unauthenticated attackers to bypass the existing SSRF guard by utilizing 6to4, NAT64, or IPv4-compatible IPv6 addresses . By sending a craf...

EUVD-2026-91450

YesWiki before 4.6.7 contains a blind server-side request forgery vulnerability that allows unauthenticated attackers to make arbitrary server-side requests via the idtypeannonce parameter of /api/entries/bazarlist. Because isValidURL always returns true, attackers can supply internal URLs fetche...

CVE-2026-97876

A flaw was found in GRUB2. The bootloader insufficiently validates memory addresses passed to the serial configuration command, allowing arbitrary system memory to be targeted instead of a legitimate serial communication device. A local attacker with control over GRUB's boot configuration can...

SUSE-SU-2026:4417-1 Security update for helm

This update for helm fixes the following issues: - CVE-2026-85731: oras.land/oras-go/v2: arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction bsc1281104. - CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows...

httpd: httpd: Information disclosure via session cookie leakage during internal redirects

A flaw was found in Apache HTTP Server's modsessioncookie module. When internal redirects alter the SessionCookieRemove configuration, the server may fail to strip the session cookie as expected. This issue can lead to information disclosure by inadvertently forwarding sensitive user session toke...

httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects

A flaw was found in Apache HTTP Server. An attacker could achieve unintended code execution when an internal redirect generated by a Common Gateway Interface CGI program points to a non-executable file. If the target file resides in a directory configured for CGI execution and lacks a file...

ADFSDump

ADFSDump AD FS에서 모든 종류의 유용한 정보를 덤프하는 C 도구입니다. Mandiant FireEye 재직 시절 Doug Bienstock @doughsec이 만들었습니다. 이 도구는 ADFSpoof와 함께 실행되도록 설계되었습니다. ADFSdump는 ADFSpoof를 사용하여 보안 토큰을 생성하는 데 필요한 모든 정보를 출력합니다. 상세 설명 ADFSDump는 Active Directory 및 AD FS 구성 데이터베이스에서 위조 보안 토큰을 생성하는 데 필요한 정보를 읽는 도구입니다. 이 정보는 ADFSpoof에...

CVE-2024-12404

CVE-2024-12404 CF Internal Link Shortcode = 1.1.0 - 인증되지 않은 SQL 인젝션 설명 WordPress용 CF Internal Link Shortcode 플러그인은 1.1.0을 포함한 모든 버전에서 'posttitle' 매개변수를 통한 SQL 인젝션에 취약합니다. 사용자가 제공한 매개변수에 대한 이스케이프가 충분하지 않고 기존 SQL 쿼리에 대한 준비가 부족하기 때문입니다. 이로 인해 인증되지 않은 공격자가 기존 쿼리에 추가 SQL 쿼리를 덧붙일 수 있으며, 이를 통해 데이터베이스에서...

CVE-2024-54330

CVE-2024-54330 Hurrakify bfdibc85r04ky96cie05dfzjjgigz...

gladius

Gladius Easy mode from Responder to Credentials Author: Cory Duplantis @ctfhacker / blog Blog post on Gladius asciicast Gladius provides an automated method for cracking credentials from various sources during an engagement. We currently crack hashes from Responder, secretsdump.py, and...

portia

⚠️ 참고: 이 도구는 더 이상 적극적으로 유지보수되지 않습니다. portia Portia는 낮은 권한의 계정이 손상된 후에 내부 네트워크 침투 테스트에서 일반적으로 수행되는 여러 기술을 자동화하는 것을 목표로 합니다. 권한 상승 측면 이동 편의 모듈 Portia는 다른 거미를 잡아먹는 깡충거미의 한 속屬입니다. - 일반적으로 더 큰 동물에게서만 볼 수 있는 지능적인 사냥 행동과 문제 해결 능력으로 유명합니다. 새로운 기능이 추가되었습니다. 새 스크립트는 'hopandhack.py'입니다. 새 스크립트 ‘hopandhack‘은...

peeko

peeko 버전: v1.1 peeko는 XSS를 활용한 브라우저 기반 C2Command and Control 도구로, 피해자의 브라우저를 내부 네트워크의 은밀한 프록시로 사용합니다. 주입된 XSS 페이로드를 통해 peeko는 중앙 서버에 WebSocket 연결을 설정하여, 공격자가 피해자의 브라우저를 원격으로 제어해 내부 서비스에 요청을 보내고, 네트워크를 스캔하고, 데이터를 유출하거나 임의의 JavaScript를 실행할 수 있게 합니다 — 단일 바이너리를 드롭하지 않고도 가능합니다. 기능 공격자와 피해자 간 WebSocket...

CVE-2026-47360

A flaw was found in Apache HTTP Server's modsessioncookie module. When internal redirects alter the SessionCookieRemove configuration, the server may fail to strip the session cookie as expected. This issue can lead to information disclosure by inadvertently forwarding sensitive user session toke...

CVE-2026-42356

A flaw was found in Apache HTTP Server. An attacker could achieve unintended code execution when an internal redirect generated by a Common Gateway Interface CGI program points to a non-executable file. If the target file resides in a directory configured for CGI execution and lacks a file...

Mlflow <2.9.2 - Path Traversal

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. id: CVE-2023-6909 info: name: Mlflow 2.9.2 - Path Traversal author: Hyunsoo-ds severity: high description: | Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. impact: | Successful...

CVE-2026-82044: Server-Side Request Forgery (SSRF)

UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal resources by supplying an unvalidated url parameter to the PdfService.downloadPdf method exposed via GET /api/generate-pdf-report. Attacke...

CVE-2026-82040: Server-Side Request Forgery (SSRF)

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadataUrl that allows authenticated attackers to make the server send requests to arbitrary internal or cloud metadata hosts by supplying a malicious metadata URL to the...

CVE-2026-103958: Server-Side Request Forgery (SSRF)

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafte...

Linux Distros Unpatched Vulnerability : CVE-2026-47360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's modsessioncookie module. When SessionCookieRemove changes acros...