CVE-2025-53770

CVE-2025-53770 연구 랩 이 저장소는 통제된 랩 환경에서 SharePoint 스타일 역직렬화 및 도구 창ToolPane 처리 문제를 검증하기 위한 개념 증명PoC 연구 프로젝트입니다. Python 드라이버, 모의 취약 애플리케이션, 격리된 테스트를 위한 컨테이너 자산이 포함되어 있습니다. !WARNING 이 프로젝트는 반드시 귀하가 소유했거나 명시적으로 테스트 권한을 부여받은 시스템, 컨테이너 또는 네트워크에서만 사용해야 합니다. 서면 허가 없이 공용 인프라, 타사 서비스, 프로덕션 환경 또는 기타 대상을 대상으로 ...

CVE-2026-42540

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 allow a user to alter values in the database via manipulated API requests. Version 2.4.28 contains a patch...

PT-2026-46389

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 allow a user to alter values in the database via manipulated API requests. Version 2.4.28 contains a patch...

CVE-2026-4799 Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests

In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL...

PT-2026-5836

Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows remote attackers to access unauthorized file system paths without authentication. Attackers can exploit the vulnerability by manipulating path parameters in GET and POST requests to list or download...

Vimeo: A user can add videos to other user's private groups

It is possible for a user to add videos to other user's private groups. Steps to verify: 1. Log into vimeo.com as Alice. Create a new group lets say, AlicePrivateGroup with group id 301924 and choose 'Only members can see this group' setting. 2. Login as Bob and create a new group lets say,...