CVE-2017-14263

HoneywellNVRvul CVE-2017-14263 xfuturesec 有限公司 首先，获取访客用户的 SessionID。 我们可以从任意 HTTP 请求中找到 SessionID。例如： POST https://192.168.1.104/RPC2 HTTP/1.1 Accept: text/javascript, text/html, application/xml, text/xml X-Requested-With: XMLHttpRequest X-Request: JSON Content-Type:...

awesome-list — Updated!

Awesome Cybersecurity List My personal collection of awesome blog posts, write-ups, and papers focusing on cybersecurity. For a deeper dive into cybersecurity-related tools, check out the dedicated Cybersecurity Tools list. Outline 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2014 2011...

SUSE CVE-2026-72154

In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jumplabel smp syncing The original commit 8c30b0018f9d "openrisc: Add jump label support" copies from arm64 and does not properly consider how icache invalidation on remote cores works in OpenRISC. On OpenRISC remot...

CVE-2023-38646

CVE-2023-38646 Metabase 事前認証RCE!! 手動エクスプロイトのPoCはこちら: https://youtu.be/b51LPjD-uTo...

shisoserial

shisoserial 英語ドキュメント これは何ですか？ Shiroのデシリアライゼーション脆弱性CVE-2016-4437に対する高速な悪用ツールです コントリビューター 4nth0ny @フライデーラボ Issues/PRをお気軽にどうぞ : 環境 Python 3.x JDK 1.8 インストール root@kitploit: python3 -m pip install -r requirements.txt AttributeError: module 'Crypto.Cipher.AES' has no attribute 'MODEGCM' または No module...

USN-8701-1 udisks2 vulnerability

It was discovered that UDisks did not correctly validate the caller identity when handling the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. A local attacker with an active console session could possibly use this issue to mount filesystems on behalf of arbitrary...

USN-8701-1: UDisks vulnerability

It was discovered that UDisks did not correctly validate the caller identity when handling the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. A local attacker with an active console session could possibly use this issue to mount filesystems on behalf of arbitrary...

CVE-2026-76983

Improper neutralization of input during web page generation in Apache Wicket. The tag is provided by org.apache.wicket.markup.html.form.AutoLabelTextResolver, which is registered by default in every WebApplication. The resolver writes the label it finds into the markup as it is, and reads no...

CVE-2026-75802

AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writes the display value obtained from that renderer into the label's markup without applying the HTML escaping Wicket performs by default for component model values. An attacker who can influence the...

CVE-2026-71378

ResourceIsolationRequestCycleListener protects a Wicket application against cross-site request forgery by rejecting requests that a resource isolation policy judges to come from another origin. Its default policy, FetchMetadataResourceIsolationPolicy, was derived from a reference implementation...

CVE-2025-57310

CVE-2025-57310 Salmen2/Simple-Faucet-Script v1.07 中存在一个跨站请求伪造（CSRF）漏洞，攻击者可通过向 admin.php?p=ads&c=1 发送特制的 POST 请求来执行任意代码。 CWE CWE-352：跨站请求伪造（CSRF） CVSS v3.1 基础评分：8.8（高危） root@kitploit: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 摘要 该产品在管理面板上存在跨站请求伪造（CSRF）漏洞。当已认证的管理员访问包含 PoC 的恶意页面时，CSRF...

CVE-2024-11467

CVE-2024-11467 The macOS operating system uses XPC services for basic inter-process communication between various processes, such as between the XPC Service daemon and third-party application privileged helper tools. The VMware Horizon Client, upon installation, registers the...

CVE-2026-76983 Apache Wicket: XSS in AutoLabelTextResolver via FormComponent.setLabel

Improper neutralization of input during web page generation in Apache Wicket. The tag is provided by org.apache.wicket.markup.html.form.AutoLabelTextResolver, which is registered by default in every WebApplication. The resolver writes the label it finds into the markup as it is, and reads no...

CVE-2026-76983

Apache Wicket's AutoLabelTextResolver (registered by default in every WebApplication) writes form-component labels into markup unescaped , never consulting the escape-model-strings setting. When a label is set via FormComponent#setLabel(IModel) with attacker-influenced data, the result is a store...

EUVD-2026-68491

Improper neutralization of input during web page generation in Apache Wicket. The tag is provided by org.apache.wicket.markup.html.form.AutoLabelTextResolver, which is registered by default in every WebApplication. The resolver writes the label it finds into the markup as it is, and reads no...

CVE-2026-76983 Apache Wicket: XSS in AutoLabelTextResolver via FormComponent.setLabel

Improper neutralization of input during web page generation in Apache Wicket. The tag is provided by org.apache.wicket.markup.html.form.AutoLabelTextResolver, which is registered by default in every WebApplication. The resolver writes the label it finds into the markup as it is, and reads no...

Ghostcat-CNVD-2020-10487

Ghostcat exp for CNVD-2020-10487CVE-2020-1938 Tomcat AJPプロトコルの任意の属性設定によるファイル読み取りとファイル実行。 脆弱性分析 コードはセキュリティテスト専用です。不正な目的で使用しないでください。生じた結果については使用者が責任を負い、筆者は一切関与しません！！！ root@kitploit: python3 ajpShooter.py -h /\ / \ | | | //\ | | ' \ \ | ' \ / \ / | / \ '| / | | | | \ \ | | | | | || / | / // | ./...

EUVD-2026-68488

AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writes the display value obtained from that renderer into the label's markup without applying the HTML escaping Wicket performs by default for component model values. An attacker who can influence the...

CVE-2026-75802

Apache Wicket (module wicket-extensions ) contains an XSS vulnerability in AjaxEditableLabel , AjaxEditableChoiceLabel , and AjaxEditableMultiLineLabel . The display value obtained from a non-null IChoiceRenderer, and the value returned by the overridden defaultNullLabel(), are written into the l...

CVE-2026-75802 Apache Wicket: XSS in AjaxEditableLabel and its subclasses via IChoiceRenderer and defaultNullLabel

AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writes the display value obtained from that renderer into the label's markup without applying the HTML escaping Wicket performs by default for component model values. An attacker who can influence the...