CVE-2026-104459 YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handle

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in WebfingerService that allows unauthenticated attackers to trigger HTTPS requests to internal hosts. Attackers can POST a crafted actorhandle with a numeric host and port to the abonnements view to probe internal HTTPS...

CVE-2026-104458

YesWiki versions prior to 4.6.7 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the validateKeyIdUrl() function. This flaw allows unauthenticated attackers to bypass the existing SSRF guard by utilizing 6to4, NAT64, or IPv4-compatible IPv6 addresses . By sending a craf...

EUVD-2026-91450

YesWiki before 4.6.7 contains a blind server-side request forgery vulnerability that allows unauthenticated attackers to make arbitrary server-side requests via the idtypeannonce parameter of /api/entries/bazarlist. Because isValidURL always returns true, attackers can supply internal URLs fetche...

CVE-2026-97876

A flaw was found in GRUB2. The bootloader insufficiently validates memory addresses passed to the serial configuration command, allowing arbitrary system memory to be targeted instead of a legitimate serial communication device. A local attacker with control over GRUB's boot configuration can...

SUSE-SU-2026:4417-1 Security update for helm

This update for helm fixes the following issues: - CVE-2026-85731: oras.land/oras-go/v2: arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction bsc1281104. - CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows...

httpd: httpd: Information disclosure via session cookie leakage during internal redirects

A flaw was found in Apache HTTP Server's modsessioncookie module. When internal redirects alter the SessionCookieRemove configuration, the server may fail to strip the session cookie as expected. This issue can lead to information disclosure by inadvertently forwarding sensitive user session toke...

httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects

A flaw was found in Apache HTTP Server. An attacker could achieve unintended code execution when an internal redirect generated by a Common Gateway Interface CGI program points to a non-executable file. If the target file resides in a directory configured for CGI execution and lacks a file...

ADFSDump

ADFSDump AD FSからあらゆる有用情報をダンプするためのCツールです。 Mandiant FireEyeに在籍中のDoug Bienstock @doughsecによって作成されました。 このツールはADFSpoofと併用して実行するように設計されています。ADFSdumpは、ADFSpoofを使ってセキュリティトークンを生成するために必要なすべての情報を出力します。 詳細説明 ADFSDumpは、偽造セキュリティトークンの生成に必要な情報をActive DirectoryとAD...

CVE-2024-12404

CVE-2024-12404 CF Internal Link Shortcode = 1.1.0 - 인증되지 않은 SQL 인젝션 설명 WordPress용 CF Internal Link Shortcode 플러그인은 1.1.0을 포함한 모든 버전에서 'posttitle' 매개변수를 통한 SQL 인젝션에 취약합니다. 사용자가 제공한 매개변수에 대한 이스케이프가 충분하지 않고 기존 SQL 쿼리에 대한 준비가 부족하기 때문입니다. 이로 인해 인증되지 않은 공격자가 기존 쿼리에 추가 SQL 쿼리를 덧붙일 수 있으며, 이를 통해 데이터베이스에서...

CVE-2024-54330

CVE-2024-54330 Hurrakify bfdibc85r04ky96cie05dfzjjgigz...

gladius

Gladius Easy mode from Responder to Credentials Author: Cory Duplantis @ctfhacker / blog Blog post on Gladius asciicast Gladius provides an automated method for cracking credentials from various sources during an engagement. We currently crack hashes from Responder, secretsdump.py, and...

portia

⚠️ 참고: 이 도구는 더 이상 적극적으로 유지보수되지 않습니다. portia Portia는 낮은 권한의 계정이 손상된 후에 내부 네트워크 침투 테스트에서 일반적으로 수행되는 여러 기술을 자동화하는 것을 목표로 합니다. 권한 상승 측면 이동 편의 모듈 Portia는 다른 거미를 잡아먹는 깡충거미의 한 속屬입니다. - 일반적으로 더 큰 동물에게서만 볼 수 있는 지능적인 사냥 행동과 문제 해결 능력으로 유명합니다. 새로운 기능이 추가되었습니다. 새 스크립트는 'hopandhack.py'입니다. 새 스크립트 ‘hopandhack‘은...

peeko

peeko バージョン: v1.1 peeko は、被害者のブラウザを内部ネットワーク内のステルスプロキシとして利用する、ブラウザベースの XSS を利用した C2（コマンドアンドコントロール）ツールです。 注入された XSS ペイロードを通じて、peeko は中央サーバーへの WebSocket 接続を確立し、攻撃者は被害者のブラウザをリモートで制御して、内部サービスへのリクエスト送信、ネットワークスキャン、データの外部送信、さらには任意の JavaScript の実行まで可能になります。バイナリを1つも配置することなく、すべてを実現します。 特徴 攻撃者と被害者の間の WebSock...

CVE-2026-47360

A flaw was found in Apache HTTP Server's modsessioncookie module. When internal redirects alter the SessionCookieRemove configuration, the server may fail to strip the session cookie as expected. This issue can lead to information disclosure by inadvertently forwarding sensitive user session toke...

CVE-2026-42356

A flaw was found in Apache HTTP Server. An attacker could achieve unintended code execution when an internal redirect generated by a Common Gateway Interface CGI program points to a non-executable file. If the target file resides in a directory configured for CGI execution and lacks a file...

Mlflow <2.9.2 - Path Traversal

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. id: CVE-2023-6909 info: name: Mlflow 2.9.2 - Path Traversal author: Hyunsoo-ds severity: high description: | Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. impact: | Successful...

CVE-2026-82044: Server-Side Request Forgery (SSRF)

UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal resources by supplying an unvalidated url parameter to the PdfService.downloadPdf method exposed via GET /api/generate-pdf-report. Attacke...

CVE-2026-82040: Server-Side Request Forgery (SSRF)

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadataUrl that allows authenticated attackers to make the server send requests to arbitrary internal or cloud metadata hosts by supplying a malicious metadata URL to the...

CVE-2026-103958: Server-Side Request Forgery (SSRF)

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafte...

Linux Distros Unpatched Vulnerability : CVE-2026-47360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's modsessioncookie module. When SessionCookieRemove changes acros...