project_mantis

مشروع مانتيس: اختراق الهاكر الذكي حقن التعليمات كدفاع ضد الهجمات الإلكترونية المعتمدة على نماذج اللغة الكبيرة LLM تثبيت مانتيس pip install -r requirements.txt تشغيل مانتيس بإعدادات مسبقة تتوفر إعدادات مسبقة متنوعة في مجلد ./confs. اختراق العودة يوجد مثال لملف تهيئة مانتيس في...

CVE-2008-4687-exploit

CVE-2008-4687-exploit استغلال بايثون سريع وقذر لـ CVE-2008-4687. الوصف من NIST: manageprojpage.php في Mantis قبل 1.1.4 يسمح للمستخدمين الموثقين عن بُعد بتنفيذ تعليمات برمجية عشوائية عبر معامل sort يحتوي على تسلسلات PHP، والتي تتم معالجتها بواسطة createfunction داخل دالة multisort في...

mantis_rce

mantisrce نص بايثون للحصول على RCE في Mantis Bug Tracker قبل الإصدار 1.2.x راجع CVE-2008-4687 لمزيد من المعلومات...

CVE-2020-28413_Mantis2.24.3-SQLi-SOAP

لا يحتوي هذا المستودع على ملف README...

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

The operators of the DevMan ransomware-as-a-service RaaS scheme are maintaining a dedicated web platform that offers affiliates the ability to build payloads, oversee earnings, and manage various aspects related to victims. Swiss cybersecurity company PRODAFT is tracking the centrally administere...

Remote Code Execution (RCE)

MantisBT is vulnerable to Remote Code Execution RCE. The vulnerability is due to the use of eval when processing non-string configuration values in the Manage Configuration feature, which allows an administrator to inject malicious class definitions that execute arbitrary code through PHP's...

Cross-site Scripting (XSS)

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the printallbugpageword.php process. An attacker can execute arbitrary JavaScript in the context of another user by uploading an image attachment with a specially...

MantisBT: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIs

Unvalidated notetype Parameter in mcissueupdate SOAP Endpoint Allows creation of TIMETRACKING and REMINDER Notes. The SOAP path passes the user-supplied notetype integer directly to bugnoteadd without validating that the user is authorized to create that type of note. If the user's access level i...

Cross-site Scripting (XSS)

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the install.php process. An attacker can execute arbitrary scripts in the context of the victim's browser by crafting a malicious URL containing user-supplied...

MantisBT: Reflected XSS in admin/install.php

MantisBT 2.28.3 and earlier contains six reflected XSS injection points in /admin/install.php. User-supplied parameters are echoed into HTML without escaping via printtestresult. No authentication is required. A Content Security Policy script-src 'self' prevents inline JavaScript execution, but t...

Cross-site Scripting (XSS)

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the printtestresult function in /admin/install.php. An attacker can inject malicious HTML or scripts by supplying crafted parameters, leading to credential phishing...

MantisBT: REST API unauthorized Issue status change

A MantisBT user having $gupdatebugthreshold UPDATER by default can change an Issue's Status via REST and SOAP API, even if the $gsetstatusthreshold config is set to a higher level DEVELOPER by default. Impact Unauthorized change in Issue workflow. Patches...

Eval Injection

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Eval Injection in the admconfigset.php process. An attacker can execute arbitrary code by submitting a specially crafted configuration value that defines a class, which is then hoisted and...

MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator

MantisBT 2.28.3 and earlier contains a critical authentication bypass in the SOAP API's mcichecklogin function. Any user knowing any valid cookiestring can authenticate as any other user knowing their username, including the administrator, without knowing the target's password. The vulnerability ...

SQL Injection

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to SQL Injection via the historyorder configuration value in the historyapi.php process. An attacker can execute arbitrary SQL commands by injecting malicious input into the configuration, which i...

PT-2026-60358

A MantisBT user having $g update bug threshold UPDATER by default can change an Issue's Status via REST and SOAP API, even if the $g set status threshold config is set to a higher level DEVELOPER by default. Impact Unauthorized change in Issue workflow. Patches...

PT-2026-60356

MantisBT 2.28.3 and earlier contains a critical authentication bypass in the SOAP API's mci check login function. Any user knowing any valid cookie string can authenticate as any other user knowing their username, including the administrator, without knowing the target's password. The vulnerabili...

Exploit for Authentication Bypass by Primary Weakness in Mantisbt

CVE-2026-30849.ts — usage This TypeScript script performs a c...

CVE-2026-34390

Mantis Bug Tracker MantisBT is an open source issue tracker. Versions 2.28.1 and prior have a Privilege Escalation vulnerability where insufficient access control checks in ProjectUsersAddCommand manageprojuseradd.php allow users having manageprojectthreshold access level manager by default to...

CVE-2026-34754

Mantis Bug Tracker MantisBT is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized to access. This issue has been fixed in version 2.28.2...