CVE-2025-65881

CVE-2025-65881 项目 Zoo Management System v1.00 在 /zms/classes/Login.php?f=login 上存在跨站脚本攻击（XSS）漏洞，原因如下： 1. /zms/classes/Login.php?f=login 的 JSON 响应中使用了无效的 Content-type 2. 响应中的用户输入未进行转义处理 这使得未经身份验证的攻击者能够注入恶意的 HTML/JS，并在受害者浏览器中执行。 受影响的文件及漏洞代码 /zms/classes/Login.php root@kitploit: return jsonencodearr...

CVE-2022-28108

Selenium Chrome RCE Exploit Extendido Este repositorio contiene una versión modificada de un módulo de Metasploit que explota una vulnerabilidad de Ejecución Remota de Código en versiones antiguas de Selenium Server Grid. Por favor, lea este README atentamente antes de usar este código...

CheatSheetHost

CheatSheetHost 一个轻量级的、内容驱动的 Web 服务器，用于托管交互式速查表和参考资料。非常适合 CTF（夺旗赛）挑战、逆向工程和技术文档。当您希望在实验室环境中限制或避免外部流量，同时仍能访问有用资料时，这是最佳选择。 我已对脚本进行了一些加固，但您在使用前应进行审查，并/或在实验室环境中部署 特性 简单的 JSON 内容 ：使用易于编辑的 JSON 文件定义速查表 响应式设计 ：在桌面、平板和移动设备上均能工作 复古终端主题 ：怀旧的绿色文字黑色背景 CRT 显示器风格 局域网可访问 ：在本地网络内共享速查表 多种章节类型 ：表格、文本块、代码片段和 ASCII 表...

burp-jq

Burp JQ 这是应用于 HTTP 消息查看器中 jq 查询的 Burp 扩展， 用于处理 JSON 内容。 构建 root@kitploit: $ gradle fatJar 致谢 Burp JQ 依赖 jackson-jq，它是 jq 的 Java 实现。 jq jackson jackson-jq...

GHSA-PMV8-RQ9R-6J72 Axios: Deep formToJSON Key Recursion Can Cause Denial of Service

Summary Axios versions starting with 0.28.0 contain uncontrolled recursion in formDataToJSON, which is exposed as axios.formToJSON and used internally when axios serialises FormData with Content-Type: application/json. If an application passes attacker-controlled FormData field names to this...

SUSE CVE-2026-13218

A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and os.Chown without symlink protection. A user with access to the virt-launcher container can plant a symlink at the cache file path, causin...

EUVD-2026-39594

A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and os.Chown without symlink protection. A user with access to the virt-launcher container can plant a symlink at the cache file path, causin...

CVE-2026-13218

A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and os.Chown without symlink protection. A user with access to the virt-launcher container can plant a symlink at the cache file path, causin...

CVE-2026-7439

AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowing attackers to bypass trust-boundary enforcement on sensitive operations. Attackers can exploit this content-type validation...

CVE-2026-7439

AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowing attackers to bypass trust-boundary enforcement on sensitive operations. Attackers can exploit this content-type validation...

EUVD-2026-26278

AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowing attackers to bypass trust-boundary enforcement on sensitive operations. Attackers can exploit this content-type validation...

CVE-2026-7439 AgentFlow Local Web API Content-Type Validation Bypass

AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowing attackers to bypass trust-boundary enforcement on sensitive operations. Attackers can exploit this content-type validation...

PT-2026-35970

Name of the Vulnerable Software and Affected Versions AgentFlow affected versions not specified Description The local web API fails to enforce application/json validation for non-JSON content types on the 'POST /api/runs' and 'POST /api/runs/validate' endpoints. This allows attackers to bypass...

CVE-2026-33252 MCP Go SDK Allows Cross-Site Tool Execution for HTTP Servers without Authorizatrion

The Go MCP SDK used Go's standard encoding/json. Prior to version 1.4.1, the Go SDK's Streamable HTTP transport accepted browser-generated cross-site POST requests without validating the Origin header and without requiring Content-Type: application/json. In deployments without Authorization,...

EUVD-2025-198335

Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XSS attack to be possible for a logged in manager user...

CVE-2025-52667

Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XSS attack to be possible for a logged in manager user...

EUVD-2020-0240

Malware in sbrugna...

EUVD-2019-0779

Malware in sbrugna...

EUVD-2021-10146

Malware in sbrugna...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mod_security (UTSA-2025-180756)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-180756 advisory. ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to...