zeek-quic

Zeek 用 Google QUIC アナライザ/ディテクタ このアナライザは、以下で説明されているワイヤーフォーマットを使用して、Google による QUIC の実装ここでは簡単のため GQUIC と呼びますを解析および検出できます: https://www.chromium.org/quic. このアナライザを作成した時点で Chrome が使用していた GQUIC のバージョンは Q039 であり、一部の Google サーバーおよびおそらく Chrome カナリアビルドも Q043 を使用できました。テスト中、このアナライザはこれらの両バージョンを検出できました。...

WordPress_Backup_Migration-RCE_Unauthenticated

CVE-2023-6553 — Плагин Backup Migration для WordPress - Обратная оболочка Расширенная версия эксплойта Chocapikk для CVE-2023-6553, которая добавляет режим однокомандной обратной оболочки поверх исходной интерактивной веб-оболочки. Уязвимость CVE-2023-6553 — неаутентифицированное удалённое...

CVE-2026-43500

Этот проект перемещён на https://github.com/First-John/cve2026fragfamilyfix...

CVE-2026-82556

A flaw was found in Forgejo. A remote attacker could exploit a server-side request forgery SSRF vulnerability by manipulating the net.LookupIP function within the Repository Migration Handler. This could allow the attacker to force the server to make requests to arbitrary network resources,...

kernel: ip6_gre: Use cached t->net in ip6erspan_changelink()

A flaw was found in the Linux kernel's ip6gre module. An unprivileged user could exploit this vulnerability by migrating a network device, causing the ip6erspanchangelink function to incorrectly handle network namespace references. This error leads to a use-after-free condition when the original...

Linux Distros Unpatched Vulnerability : CVE-2026-82556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/ismigrateallowed.go of...

CVE-2026-54598

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, endpoints/db/migrate.php executes database schema migrations when called over HTTP with zero authentication. Any unauthenticated attacker can trigger pending migration files against the live SQLite...

CVE-2026-54598 Missing Authentication for Critical Function in wallos

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, endpoints/db/migrate.php executes database schema migrations when called over HTTP with zero authentication. Any unauthenticated attacker can trigger pending migration files against the live SQLite...

CVE-2026-54598 Missing Authentication for Critical Function in wallos

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, endpoints/db/migrate.php executes database schema migrations when called over HTTP with zero authentication. Any unauthenticated attacker can trigger pending migration files against the live SQLite...

CVE-2026-54598

Wallos , an open-source self-hostable personal subscription tracker, is affected by a missing authentication flaw in endpoints/db/migrate.php. Prior to version 4.9.4 , this endpoint executes database schema migrations over HTTP with zero authentication , allowing any unauthenticated attacker to t...

cve-2025-23266-migration-bypass

cve-2025-23266-migration-bypass cve-2025-23266-migration-bypass フラグの内容を取得する方法は2つあります: 1. ホストからコンテナのマウントディレクトリにコピーする; 2. リバースシェルを使用して取得する;...

CVE-2023-6553-PoC

CVE-2023-6553 PoC LFI to RCE Backup Migration 워드프레스 플러그인에서의 인증되지 않은 원격 코드 실행. 실행 root@kitploit: $ python exploit.py 다음 PHP 스크립트가 실행됩니다. root@kitploit: out.txt; ? 참고 자료 Backup Migration 플러그인에서 발견된 심각한 인증되지 않은 원격 코드 실행 취약점...

pev

readpe pev는 @mentebinaria/readpe로 이동했으며 새로운 관리자가 있습니다. :...

cve-2026-22874-gitea-ssrf-allowlist

CVE-2026-22874 — Gitea 웹훅 및 마이그레이션 허용 목록의 불완전한 SSRF 보호 CVE-2026-22874 GHSA-2r5c-gw76-rh3w에 대한 기술적 분석 및 참고 자료: Gitea의 웹훅 전달 및 저장소 마이그레이션에서 불완전한 SSRF 허용 목록, Gitea 1.26.3 에서 수정됨. 저는 이 SSRF 클래스를 Gitea 유지관리자에게 독립적으로 보고했으며, 공개된 권고에서 기여자other로 인정받았습니다. 권고의 주요 보고자는 J. Leitschuh입니다. 이 저장소는 공개 권고에 대한 방어적이고...

zend-crypt

zend-crypt 저장소 중단됨 2019-12-31 이 저장소는 laminas/laminas-crypt로 이동했습니다. Zend\Crypt는 몇 가지 암호화 도구에 대한 지원을 제공합니다. 사용 가능한 기능 중 일부는 다음과 같습니다: 대칭 암호화를 사용한 encrypt-then-authenticate인증 단계는 HMAC으로 제공됩니다; 대칭 키 및 공개 키 알고리즘을 사용한 암호화/복호화예: RSA 알고리즘; 하이브리드 모드를 사용한 암호화/복호화OpenPGP 유사; 공개 키 알고리즘을 사용한 디지털 서명 생성예: RSA...

CVE-2026-82556

A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/ismigrateallowed.go of the component Repository Migration Handler. Performing a manipulation results in server-side request forgery. The attack can be initiate...

CVE-2026-82556

Forgejo up to 15.0.4 is affected by a server-side request forgery (SSRF) vulnerability in the Repository Migration Handler . The root cause is the use of net.LookupIP in services/migrations/allowlist/is_migrate_allowed.go, where a remote attacker with low privileges can perform a manipulation to ...

EUVD-2026-68278

A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/ismigrateallowed.go of the component Repository Migration Handler. Performing a manipulation results in server-side request forgery. The attack can be initiate...

CVE-2026-82556 Forgejo Repository Migration is_migrate_allowed.go net.LookupIP server-side request forgery

A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/ismigrateallowed.go of the component Repository Migration Handler. Performing a manipulation results in server-side request forgery. The attack can be initiate...

WordPress WPvivid — Backup, Migration & Staging plugin < 0.9.133 - Admin+ Arbitrary File Write vulnerability

Admin+ Arbitrary File Write vulnerability discovered by Nir Yehoshua in WordPress Plugin WPvivid Backup and Migration versions 0.9.133...