CVE-2026-82222

CVE-2026-82222 — GiveWP 作者： Rx019 CVSS： 10.0（严重） 类型： 未认证 PHP 对象注入 → 远程代码执行 插件： GiveWP give — 捐赠插件与筹款平台 受影响版本： 已修复版本： 4.16.8 描述 GiveWP 将捐赠者的 lastname 未经清理地存储在 PHP 会话中。当提交捐赠时未包含 givelast 字段，GiveWP 会直接将数据库中的原始值反序列化到会话中。这使得未认证攻击者能够通过捐赠者资料端点将 PHP 序列化对象注入 lastname，然后通过提交精心构造的捐赠来触发反序列化——从而利用 GiveWP...

gha-lab-fb32aba4a3

Cocos Creator 引擎 Cocos Engine 是 Cocos Creator 编辑器的运行时框架。Cocos Creator 是 Cocos 家族的下一代游戏开发工具，为开发者集成了完整的 3D 能力，并且提供了直观、高效、便于协作的工作流。 Cocos Creator 继承了其以前版本的许多优良品质和酷炫功能，如强大的跨平台支持、资产管理、强大的动画编辑等。此外，Cocos Creator 还将我们的技术推到了一个全新的水平。我们的 GFX 实现是为了适应最新的图形后端 API，支持 WebGL 2 并且可以无缝 fallback 到 WebGL 1，在原生构建中支持...

proxy v0.7.0

git-pkgs proxy A caching proxy for package registries. Speeds up package downloads by caching artifacts locally, reducing bandwidth usage and improving reliability. Version Cooldown Most supply chain attacks rely on speed: a malicious version gets published and consumed by automated pipelines...

gradient-untangler

gradient-untangler A local research harness that searches for the exact tokens that make an open-weight language model start its answer the way you specify. Open-weight models ship as ordinary files: config.json, a tokenizer, and one or more .safetensors or .bin shards. A Hugging Face id is only ...

impersonate-proxy

impersonate-proxy English | 日本語 | 简体中文 一个本地 MITM 代理,可通过单个 YAML 配置文件控制 TLS 指纹JA3/JA4、HTTP/2 指纹、HTTP 请求头顺序、User-Agent 以及源 IP 请求头。 项目内置了一个 Chrome 扩展 ,可以直接在浏览器工具栏上切换代理开关和指纹配置,无需重启代理。 本工具用于对 WAF 机器人检测系统进行授权的安全测试 。将 curl、浏览器或 Playwright 的流量路由到该代理,即可观察不同指纹组合会被如何判定。 工作原理 root@kitploit: curl / browser /...

seccomp-tools v1.7.1

Seccomp Tools Powerful tools for seccomp analysis. This project is aimed primarily but not exclusively at analyzing seccomp sandboxes in CTF pwn challenges. Some features are CTF-specific, but they're just as useful for analyzing real-world seccomp filters. Features Dump - Automatically dumps...

EUVD-2026-66216

Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route reportprojectviewexport. The authorization guards are attached to the sibling invoke method rather than at the class level, so the export route inherits no authorization checks. Any...

EUVD-2026-66223

Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call getApiToken and getPlainApiToken methods. Attackers with template creation permissions can embed these method calls in invoice templates to leak hashed API tokens in rendered...

CVE-2026-54179

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/SingleBase64Image.php methods SingleBase64Image::uploadFiles and...

cmcp v0.4.0

cMCP: Confidential MCP Runtime Enforce MCP tool policy inside a TEE, where the agent it governs cannot reach it Quick Start · Architecture · Configuration · CLI · Changelog Developer Preview - launched at the Confidential Computing Summit, June 23 2026. May have breaking changes before v1.0. See...

CVE-2025-60876

CVE-2025-60876：busybox wget リクエストターゲットインジェクション修正 CVE-2025-60876（BusyBox wget における HTTP ヘッダインジェクション脆弱性）に対する動作を維持する修正、それを実証する概念実証、および修正を BusyBox にアップストリーム提出するための成果物です。 脆弱性 BusyBox wget は、URL のパスとクエリを HTTP リクエスト行にそのままコピーします。生の CR 0x0D、LF 0x0A、またはその他の制御バイトを含む URL...

invisible_playwright v0.7.2

Free antidetect browser stealth for Playwright: undetected Firefox fingerprint, headless or headed. Python web scraping and captcha bypass. Open source, and it passes every bot detection test. How it works Anti-bots ask two questions, and reCAPTCHA, hCaptcha and Cloudflare Turnstile score the...

CVE-2026-54179 backpack/crud: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/SingleBase64Image.php methods SingleBase64Image::uploadFiles and...

EUVD-2026-68764

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/SingleBase64Image.php methods SingleBase64Image::uploadFiles and...

CVE-2026-54179 backpack/crud: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/SingleBase64Image.php methods SingleBase64Image::uploadFiles and...

CVE-2026-54179

CVE-2026-54179 affects backpack/crud , a Laravel package for building admin panels. The SingleBase64Image uploader, bound to image-typed fields via withFiles(), accepts any data URI beginning with data:image without validating the declared MIME subtype or decoded bytes. A related flaw in FileName...

CVE-2026-54179 backpack/crud: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/SingleBase64Image.php methods SingleBase64Image::uploadFiles and...

e-cology

泛微e-cology OA Beanshellコンポーネントのリモートコード実行 Windows Linux 追記 root@kitploit: ターゲットシステムのos.nameを検出する（ターゲットがWindowsの場合、setなどのコマンドを実行するには、手動でcmd.exe /c setと入力する必要がある） Unicodeを使用してexecフィルタをバイパスする（一部のサイト） Payload root@kitploit: bsh.script=exec'whoami'; unicode bypass...

CVE-2026-16658

A flaw was found in the community.proxmox Ansible collection's proxmoxpctremote connection plugin. The buildpctcommand method constructs a pct exec command string using unquoted string concatenation and passes it to the Proxmox host's shell via Paramiko. Shell metacharacters in the command such a...

Locksmith

Locksmith root@kitploit: | | | | |/ | | | | | | || | || | | \ | | | | | | | | .--. .--. .--. /.-. '----------. /.-. '----------. /.-. '----------. '-' .---'-''-'-' '-' .--'--''-'-' '-' .--'--'-''-' '--' '--' '--' Active Directory Certificate Services（AD CS）における一般的な設定ミスを発見・修正するために作られた小規模なツールです。...