CVE-2026-105686

The open-source design and prototyping platform Penpot is vulnerable to temporary-storage amplification in versions prior to 2.18.0 . The issue exists within the chunked media upload RPC , which fails to reject or replace previously stored chunk indexes. An authenticated user can repeatedly uploa...

CVE-2026-105645

Ghost is a Node.js content management system. From 5.37.0 until 6.67.0, a crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access. This issue is fixed in version 6.67.0...

CVE-2026-105649

The Ghost Node.js content management system is vulnerable to Stored Cross-Site Scripting (XSS) in versions 4.22.0 through 6.65.0 . The root cause is a lack of sanitization for SVG media thumbnails and SVG images uploaded using non-SVG file extensions. This flaw allows any staff user, including Co...

CVE-2026-105645 Ghost: Regular Expression Denial of Service in External Media Inliner

Ghost is a Node.js content management system. From 5.37.0 until 6.67.0, a crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access. This issue is fixed in version 6.67.0...

CVE-2026-105645

The Ghost Node.js content management system is vulnerable to a Regular Expression Denial of Service (ReDoS) in its external media inliner component. Versions from 5.37.0 until 6.67.0 are affected, where a crafted request can trigger excessive CPU usage, leading to server unresponsiveness. Exploit...

EUVD-2026-92635

Ghost is a Node.js content management system. From 5.37.0 until 6.67.0, a crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access. This issue is fixed in version 6.67.0...

instaloader

.. image:: https://raw.githubusercontent.com/instaloader/instaloader/master/docs/logoheading.png .. badges-start |pypi| |pyversion| |license| |aur| |contributors| |downloads| .. |pypi| image:: https://img.shields.io/pypi/v/instaloader.svg :alt: Instaloader PyPI Project Page :target:...

Social-media-c2

ソーシャルメディアにおけるコマンド&コントロールサーバー このスクリプトは、ソーシャルメディアプラットフォームを使ってマシンを制御する方法の概念実証です。 説明と使用方法 スクリプトには以下の機能があります： history - history をリツイートする、説明に 'history' を含むInstagramの写真に「いいね」する、またはTelegramボットに 'history' と送信すると、ブラウザ履歴を削除します（Firefoxのみ対応）。 mac - mac をリツイートする、説明に 'mac'...

EagleEye

$$$$$$$$\ $$\ $$$$$$$$\ $$ | $$ | $$ | $$ | $$$$$$\ $$$$$$\ $$ | $$$$$$\ $$ | $$\ $$\ $$$$$$\ $$$$$\ $$\ $$ $$\ $$ |$$ $$\ $$$$$\ $$ | $$ |$$ $$\ $$ | $$$$$$$ |$$ / $$ |$$ |$$$$$$$$ | $$ | $$ | $$ |$$$$$$$$ | $$ | $$ $$ |$$ | $$ |$$ |$$ | $$ | $$ | $$ |$$ | $$$$$$$$\$$$$$$$ |$$$$$$$ |$$...

awesome-osint

Awesome OSINT A curated list of amazingly awesome open source intelligence tools and resources. Open-source intelligence OSINT is intelligence collected from publicly available sources. In the intelligence community IC, the term "open" refers to overt, publicly available sources as opposed to...

CVE-2009-1330

CVE-2009-1330 Easy RM to MP3 Converter 2.7.3.700 CVE-2009-1330 のバッファオーバーフローエクスプロイト 使用ツール: pwntools msfvenom / reversetcp payload ropper x64dbg Easy RM to MP3 Converter 2.7.3.700 脆弱なアプリは以下から入手可能: https://www.exploit-db.com/exploits/10374...

CVE-2021-33959

CVE-2021-33959 Plexサービスが4つのUDPポート32410、32412、32413、32414をリッスンしていることがわかります。攻撃ペイロードの分析と、デバイスクエリ要求のメッセージ形式を参考に、M-SEARCH HTTP/1.1の攻撃ペイロードを持つUDPパケットをこれらのポートに送信し、反射元IPのパケットをキャプチャするソフトウェアを作成しました。最終的に、32410と32414の両方が応答することがわかりました。再現攻撃を次の図に示します。 リクエストを送信 echo "M-SEARCH HTTP/1.1" | nc -4u 32410 例 影響を受けるバージ...

emploleaks

EmploLeaks EmploLeaks는 CLI 인터페이스를 갖춘 OSINT오픈 소스 인텔리전스 도구로, 대상 회사 직원에 대한 정보를 발견하고 상호 연관시키기 위해 설계되었습니다. LinkedIn 프로필 수집, 잠재적인 회사 이메일 생성, 유출 데이터베이스내부적으로 ClickHouse 사용에서 유출된 자격 증명 검색, HaveIBeenPwned를 통한 알려진 침해 사항 확인, 회사 인프라 발견, 소셜 미디어에서 직원 프로파일링을 수행할 수 있습니다. 모든 정보는 후속 분석을 위해 로컬 SQLite에 저장됩니다. 기능...

Ultimate-Social-Scrapers

Cyfy Labs의 궁극적인 소셜 스크래퍼 📢 중요 업데이트 📢 Cyfy Labs는 더 이상 운영되지 않습니다. 이 여정에 함께해 주셔서 감사합니다! 🫶 Cyfy Labs 는 현대적인 소셜 미디어 스크래핑 도구 를 제공합니다. 당사의 제품을 통해 기업과 연구자는 리드 생성, 감정 분석, 시장 조사 등 다양한 활용 사례를 위해 수백 개의 공개 데이터 포인트 를 수집할 수 있습니다. 🌐 전 세계적으로 신뢰받는 당사의 스크래퍼는 모든 주요 플랫폼에서 가장 포괄적인 소셜 미디어 데이터 커버리지 를 제공하여, 실행 가능한 데이터 기반...

cve-2015-1538-1

PLEASE DO NOT SHARE THIS WITH ANYONE. THIS CODE IS BEING PROVIDED TO YOU UNDER FrienNDA. PEOPLE VIOLATING THIS WILL NO LONGER BE CONSIDERED FRIENDS...

CVE-2017-16567

CVE-2017-16567 1. Exploit Title: Logitech Media Server : 持続型クロスサイトスクリプティングXSS 2. Shodan Dork: Logitech Media Server を検索 3. Date: 11/03/2017 4. Exploit Author: Dewank Pant 5. Vendor Homepage: www.logitech.com 6. Version: 7.9.0 7. Tested on: Windows 10、Linux POC: 1. お気に入りタブにアクセスし、新しいお気に入りを追加します。 2...

CVE-2008-4654

CVE-2008-4654 VideoLAN VLC 미디어 플레이어 0.9.4 Media Player ty.c 버퍼 오버플로우 차이...

CVE-2017-16568

CVE-2017-16568 1. 익스플로잇 제목: Logitech Media Server : HTML 코드 삽입 및 실행. 2. Shodan Dork: Logitech Media Server 검색 3. 날짜: 11/03/2017 4. 익스플로잇 작성자: Dewank Pant 5. 벤더 홈페이지: www.logitech.com 6. 버전: 7.9.0 7. 테스트 환경: Windows 10, Linux POC: 1. 접속하여 Radio URL 탭으로 이동한 후 새 URL을 추가합니다. 2. 필드 값으로 스크립트를 추가합니다. 3...

CVE-2021-29447-PoC

CVE-2021-29447 개념 증명 ╔═╗╦ ╦╔═╗ ║ ╚╗╔╝║╣────2021-29447 ╚═╝ ╚╝ ╚═╝ Written By Isa Ebrahim - 0xRar on January, 2023 ═══════════════════════════════════════════════════════════════════════════ Title: Wordpress XML parsing issue in the Media Library leading to XXE Affected versions: Wordpress 5.6 - 5....

CVE-2024-50395

CVE-2024-50395 CVE 情報 ユーザーが制御するキーによる認証バイパスの脆弱性が、Media Streaming アドオンに影響を与えることが報告されています。この脆弱性が悪用されると、ローカルネットワークの攻撃者が権限を昇格させる可能性があります。この脆弱性は、以下のバージョンですでに修正されています: Media Streaming アドオン 500.1.1.6 2024/08/02 以降 PoC GIF 根本原因 GET メソッドによる認証バイパス Ghidra の関数 FUN001293f0 元のソースコードでは ParseHttpHeaders...