ptcpdump

ptcpdump %20e2e %20e2e Inglese | Cinese ptcpdump è un analizzatore di pacchetti compatibile con tcpdump basato su eBPF, che annota automaticamente i pacchetti con metadati di processo/contenitore/pod quando rilevabile. Ispirato da jschwinger233/skbdump. Indice dei contenuti Caratteristiche...

remove-ai-watermarks

Remove AI Watermarks Remove AI provenance marks from images and video you generated yourself: known visible labels such as the Gemini sparkle and vendor text marks; invisible pixel watermarks through diffusion regeneration; C2PA, EXIF, XMP, IPTC, and related AI metadata. Video support covers...

guac

GUAC: Grafo per la Comprensione della Composizione degli Artefatti Nota: GUAC è in fase di sviluppo attivo - se sei interessato a contribuire, consulta la guida per i contributori. GUAC è un progetto in incubazione di OpenSSF sotto il Supply Chain Integrity WG. Graph for Understanding Artifact...

guac

GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...

CVE-2026-54256

Winter CMS (v1.2.12 and earlier) contains an Insecure Direct Object Reference (IDOR) in the backend FileUpload form widget. The widget's getFileRecord() resolved a user-supplied file_id POST parameter against the global system_files table without scoping to the widget's own relation or parent rec...

CVE-2026-54256 Winter: Authenticated IDOR in backend FileUpload widget allows cross-user access to attachment metadata

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend FileUpload form widget trusted an attacker-controlled fileid POST parameter when resolving the attachment it operates on, allowing an authenticated backend user to rea...

CVE-2026-54256 Winter: Authenticated IDOR in backend FileUpload widget allows cross-user access to attachment metadata

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend FileUpload form widget trusted an attacker-controlled fileid POST parameter when resolving the attachment it operates on, allowing an authenticated backend user to rea...

username-anarchy

Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...

CVE-2026-80347

mcp-fetch (npm package @kazuph/mcp-fetch ) through version 1.6.3 contains a Server-Side Request Forgery (SSRF) flaw in its isSafeUrl guard. When a target URL uses an IPv6 literal such as http://[::1]/, the parsed hostname retains the surrounding brackets. The net.isIP check returns zero for the b...

CVE-2026-80347 mcp-fetch through 1.6.3 Server-Side Request Forgery via Unstripped IPv6 Literal Brackets

mcp-fetch checks a fetch target against its SSRF guard without removing the brackets that surround an IPv6 literal. isSafeUrl reads the hostname from the parsed URL, which for a literal such as http://::1/ yields the bracketed string, and then tests it with net.isIP. That call returns zero for a...

CVE-2026-80347 mcp-fetch through 1.6.3 Server-Side Request Forgery via Unstripped IPv6 Literal Brackets

mcp-fetch checks a fetch target against its SSRF guard without removing the brackets that surround an IPv6 literal. isSafeUrl reads the hostname from the parsed URL, which for a literal such as http://::1/ yields the bracketed string, and then tests it with net.isIP. That call returns zero for a...

CVE-2025-47917

Exploit CVE-2025-47917 Use-After-Free in mbedTLS Autore : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-47917 Vulnerabilità : Use-After-Free UAF nel parsing dei nomi di mbedTLS 3.6.4 Descrizione Questo repository contiene un exploit che mira a una vulnerabilità Use-After-Free nella funzione ...

CVE-2023-7231

CVE-2023-7231 – Catena SSRF critica → Memcached/Docker RCE tramite Audible fetchResource 🔥 Riepilogo Questa vulnerabilità abilita Server-Side Request Forgery SSRF nell'API fetchResource di Audible su .audible.com, consentendo a attaccanti non autenticati di spostarsi nell'infrastruttura interna...

POC_CVE-2026-42589

POCCVE-2026-42589 Laboratório de reprodução local e rascunho de template do nuclei para CVE-2026-42589 que afeta o Gotenberg. Resumo A CVE-2026-42589 é um problema de execução remota de código não autenticada no Gotenberg causado por injeção de nova linha na chave de metadados em: root@kitploit:...

CVE-2026-13404

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or ownership check relying only on a publicly-scrapeable nonce before writing like-count and visitor-tracking post meta keyed on an arbitrary post ID, allowing unauthenticated users to modify that...

Linux Distros Unpatched Vulnerability : CVE-2026-79783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set...

CVE-2026-75340

The device metadata import interface /device/instance/productId/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery SSRF...

CVE-2026-75340

The device metadata import interface at /device/instance/{productId}/property-metadata/import in jetlinks community 2.11 is vulnerable to Server-side Request Forgery (SSRF) , allowing an unauthenticated network attacker to forge server-side requests. The vulnerability is rated CVSS 3.1 9.1 (CRITI...

PT-2026-82339

The device metadata import interface /device/instance/productId/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery SSRF...

CVE-2026-52776 Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0

Compliance-trestle Trestle is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurityValidator that guards trestle's remote-fetch paths against server-side request forgery can be bypassed to reach loopback, link-local,...