CVE-2026-62666 Grav API Plugin: non-super api.users.write manager -> super-admin via createApiKey (incomplete fix of CVE-2026-59190); + 2FA strip of super

Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.6, Grav API plugin UsersController::createApiKey, generate2fa, and disable2fa omit the accessGrantsSuper target check used by sibling user mutation endpoints. A non-super account...

CVE-2026-62666

Grav API Plugin (a RESTful API for Grav CMS) prior to 1.0.6 contains a privilege escalation flaw. The UsersController methods createApiKey(), generate2fa(), and disable2fa() omit the accessGrantsSuper() target check that sibling user mutation endpoints enforce. A non-super account holding api.use...

CVE-2026-62666 Grav API Plugin: non-super api.users.write manager -> super-admin via createApiKey (incomplete fix of CVE-2026-59190); + 2FA strip of super

Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.6, Grav API plugin UsersController::createApiKey, generate2fa, and disable2fa omit the accessGrantsSuper target check used by sibling user mutation endpoints. A non-super account...

CVE-2026-15065

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file...

CVE-2026-45272 MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config File

MyBooks is an enhanced and easy-to-use personal ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler in webserver/handlers/admin.py accepts SOCIALAUTH key names without validating quotes or newline characters, and SettingsLoader.dumpfile in...

EUVD-2026-62424

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file...

CVE-2026-15065 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file...

CVE-2026-15065

IBM AIX NIM (versions 7.2, 7.3) and PowerVM VIOS 4.1 expose intermediate CA private keys in publicly available update files (CWE-312), allowing unauthenticated remote attackers to bypass security restrictions. IBM has released Service Packs (SP13/SP5/SP3/SP2) and Fix Packs (4.1.2.20/4.1.1.30/4.1....

CVE-2026-76234 libcrux before 0.0.6 Cryptographic Implementation Bug Fixes

libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation and had a broken clamping check for imported X25519 secret keys; libcrux-ed25519 performe...

MINI-MQV9-RMJ2-85J2

Bulletin has no description...

CVE-2022-40769

CVE-2022-40769 profanity 1.60 之前版本只有四十亿种可能的 RNG 初始化。因此，攻击者可以从以太坊虚荣地址恢复私钥并窃取加密货币，该漏洞已于 2022 年 6 月被在野利用。 authentication| complexity| vector ---|---|--- not available| not available| not available...

BIT-GOLANG-2026-56862 Limit handshake messages we are willing to accept post-handshake in crypto/tls

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...

VULNERABLE-CVE-2024-45337

VULNERABLE-CVE-2024-45337 一个示例项目，展示了易受 CVE-2024-45337 影响的 golang 代码。 这是以下项目的配套项目：https://github.com/NHAS/CVE-2024-45337-POC 这样你就有可以攻击的目标了。 用法 root@kitploit: go run solver.go -authorised-pubkey ided25519.pub -allowed...

CVE-2024-31497-POC

CVE-2024-31497 POC 此漏洞利用了 ecc-ssh.c 文件中偏置的 ECDSA nonce 生成。Nonce 通过 $sha512ID\ ||\ sha512privKey\ ||\ sha1data\ mod\ q$ 生成，导致最高 9 位为零。要恢复私钥，我们需要 60 个签名，但拥有 58 个时仍有 50% 的成功概率。 漏洞由 Bäumer 和 Marcus Brinkmann 发现。 依赖 要使用此漏洞利用，您必须安装 sagemath 和 requirements.txt 中列出的 Python 依赖项。 攻击面 1. 从 60 个使用 PuTTy 或...

Fix-WinVerifyTrustSignatureValidationVuln

修复WinVerifyTrust签名验证漏洞 修复WinVerifyTrust签名验证漏洞，CVE-2013-39001，QID-3783322 此修复适用于64位Windows计算机 此PowerShell代码是修复该漏洞的一种方式——除了创建.reg文件并使用reg import 导入新注册表项之外。 完整打包脚本： 如果 HKLM:\Software\Microsoft\Cryptography\Wintrust\Config 路径不存在，则创建路径和项。 如果找到该注册表项，则显示该项的结果——不做任何操作等。 预期的新的注册表项类型为：REGSZ 以下内容摘自MSRC -...

CVE-2026-18051 W3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key

The W3 Total Cache WordPress plugin before 2.10.5 does not properly validate the request path it uses to build cache file names, allowing unauthenticated attackers to write a file into any existing directory on the server, inside or outside the web root, overwriting whatever occupies the target...

CVE-2026-18051

The W3 Total Cache WordPress plugin before 2.10.5 fails to validate the page cache key request path, enabling unauthenticated attackers to perform path traversal and write or overwrite arbitrary files anywhere on the server, including .htaccess on Apache. CVSS 10.0 (Critical) reflects no auth, no...

CVE-2026-16979

The SmartCrawl WordPress plugin (versions before 3.16.3) lacks capability checks on two AJAX actions, letting any Subscriber read private/draft post titles by ID and enumerate stored post-meta key names. CISA SSVC assesses partial technical impact with no known exploitation. No in-the-wild exploi...

Malicious code in api-rs-tuils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e65df9ad10889610f658c482041bdcf8c06d3c147da5cec709f246a1fa363c4 [email protected] runs a malicious postinstall hook node test.js that executes obfuscated code in index.js against the installer's machine. The code...

fortipwn

fortipwn 基于Rust构建的Forti CVE-2022-40684枚举脚本。 将SSH公钥上传至authorizedkeys，允许攻击者以admin身份通过SSH登录运行FortiOS的服务器。 使用方法 root@kitploit: $ ./fortipwn 构建 root@kitploit: $ git clone https://github.com/Grapphy/fortipwn/ $ cd fortipwn $ cargo build --release $ cd target/release/ $ ./fortipwn 输出示例 root@kitploit: $...