merge-authz-test

merge-authz-test authz 测试（CVE-2026-1999 关联漏洞）...

CVE-2026-60004-gitea-0day

CVE-2026-60004 - Gitea = 1.27.0 事前認証RCE これは、Gitea バージョン 1.17 から 1.27.0 における重大なリモートコード実行脆弱性である CVE-2026-60004 の概念実証エクスプロイトです。このスクリプトは、ユーザー登録からターゲットサーバー上での安定した対話型シェルの確立まで、エクスプロイトチェーン全体を自動化します。 背景 脆弱性は /diffpatch APIエンドポイントに存在します。悪意のあるパッチを2回送信すると、add/add の衝突により、--cached...

CVE-2020-8158

CVE-2020-8158: Vulnerabilidade de Poluição de Protótipo no TypeORM Visão Geral Esta é uma prova de conceito demonstrando a CVE-2020-8158, uma vulnerabilidade crítica de poluição de protótipo no TypeORM versões 0.2.25. Detalhes da Vulnerabilidade ID CVE : CVE-2020-8158 Pontuação CVSS : 9.8 CRÍTICA...

CVE-2026-60004

CVE-2026-60004 — Gitea diffpatch RCE Gitea diffpatch エンドポイントのリモートコード実行 PoC。リポジトリへの書き込み権限を持つアカウントオープン登録インスタンスでは登録するだけがあれば、サーバー上で Gitea サービスアカウント として任意のシェルコマンドを実行できます。 脆弱性の概要 POST /api/v1/repos/owner/repo/diffpatch は、共有の ベア一時クローンリポジトリ に攻撃者が制御するパッチを適用します: root@kitploit: git apply --index --recount...

CVE-2020-8554

Creare un cluster Kubernetes root@kitploit: kind create cluster --config ./kind.yaml Il cluster deve avere certmanager: https://cert-manager.io/docs/installation/kubernetes/ Testare la vulnerabilità root@kitploit: kubectl apply -f - 'EOF' apiVersion: v1 kind: Namespace metadata: name:...

anteater

Anteater - CI/CD Gate-Check-Framework Beschreibung Anteater ist ein offenes Framework, um das unerwünschte Zusammenführen von bestimmten Zeichenfolgen, Dateinamen, Binärdateien, veralteten Funktionen, Code/Anmeldeinformationen aus der Staging-Umgebung usw. zu verhindern. Alles, was mit regulären...

CVE-2026-7487

GitLab has remediated an issue in GitLab EE affecting all versions from 13.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with reporter-role permissions who authored a merge request could have reset merge request approval rules du...

CVE-2026-7487 Access Control Check Implemented After Asset is Accessed in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 13.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with reporter-role permissions who authored a merge request could have reset merge request approval rules du...

EUVD-2026-66430

GitLab has remediated an issue in GitLab EE affecting all versions from 13.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with reporter-role permissions who authored a merge request could have reset merge request approval rules du...

CVE-2026-7487

GitLab EE is affected by an improper authorization check where the access control check is implemented after the asset is accessed . An authenticated user with reporter-role permissions who authored a merge request could reset merge request approval rules under certain conditions. The vulnerabili...

EUVD-2026-37013

gRPC Erlang package's path bindings are overridable by query string and request body...

SealSecurity_Exam

SealSecurityExam Prototype Pollution ist eine JavaScript-Sicherheitslücke, die es einem Angreifer ermöglicht, beliebige Eigenschaften zu globalen Objektprototypen hinzuzufügen, die dann von benutzerdefinierten Objekten geerbt werden können. Eine Prototype-Pollution-Quelle ist jede...

revng-c

Este repositório foi mesclado ao repositório principal do rev.ng...

CVE-2026-3030-Prototype-Pollution-in-JSON-Merge-Patch

CVE-2026-3030 – JSON मर्ज पैच में प्रोटोटाइप प्रदूषण प्रोग्राम कोड Node.js root@kitploit: // server.js - Vulnerable REST API with deep merge const express = require'express'; const app = express; app.useexpress.json; let config = role: 'user', settings: ; // Insecure deep merge function pollutabl...

golismero

What's GoLismero? GoLismero is an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans. The most interesting features of the framework are: Real platform independence. Tested on Windows, Linux, BSD and OS X. ...

CVE-2026-23416-POC

CVE-2026-23416 — PoC mm/mseal: VMA-Ende bei Zusammenführung korrekt aktualisieren Schwachstelle entdeckt von Antonius / Blue Dragon Security Übersicht...

CVE-2026-71204-PoC

CVE-2026-71204 — changedetection.io: Ausgelassenes Kontrollkästchen beim Speichern in /settings deaktiviert stillschweigend die Durchsetzung der API-Schlüssel-Anforderung Produkt: dgtlmoon/changedetection.io — v0.55.7 Dateien: changedetectionio/blueprint/settings/init.py, changedetectionio/forms....

CVE-2026-50813

A flaw was found in SQLite. A local attacker can exploit this vulnerability by manipulating the Session Extension changeset concat/changegroup merge path. This allows the attacker to obtain sensitive information, leading to information disclosure. Mitigation Restrict processing of SQLite Session...

CVE-2026-62941

Incus is a system container and virtual machine manager. Prior to version 7.3.0, when copying an instance across projects, the project restriction check AllowInstanceCreation runs BEFORE the source instance's configuration is merged into the request. Dangerous configuration keys including...

CVE-2026-62941 Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge

Incus is a system container and virtual machine manager. Prior to version 7.3.0, when copying an instance across projects, the project restriction check AllowInstanceCreation runs BEFORE the source instance's configuration is merged into the request. Dangerous configuration keys including...