86960 matches found
EUVD-2026-64848
The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL survive into the outgoing request. The payment get, capture, cancel, paymentRefund create, total, list, get, advancedPayment get,...
CVE-2026-78372 RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Data
RansomLook does not consistently enforce authorization checks when accessing groups, markets, and ransom notes marked as private. An unauthenticated or otherwise unauthorized remote attacker can access information associated with private entities through several web views and API endpoints. The...
CVE-2026-78369
RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint. Although this endpoint provides an administrative function for creating new crypto group entries, it was not protected by the application's authentication mechanism. An unauthenticated remote attac...
CVE-2026-78369 Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLook
RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint. While the endpoint provides an administrative function for creating new crypto group entries, it was not protected by the application's authentication mechanism. An unauthenticated remote attacker...
EUVD-2026-64841
RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint. While the endpoint provides an administrative function for creating new crypto group entries, it was not protected by the application's authentication mechanism. An unauthenticated remote attacker...
route-detect
route-detect Find authentication authn and authorization authz security bugs in web application routes: Routes fromkoel streaming server Web application HTTP route authn and authz bugs are some of the most common security issues found today. These industry standard resources highlight the severit...
RIUS
このリポジトリには README がありません。...
CVE-2026-0047-poc
CVE-2026-0047: ActivityManagerService의 누락된 권한 확인 실행 중인 모든 앱에서 탈취된 비트맵 더미 — 권한 0개, 사용자 상호작용 0회. ActivityManagerService.dumpBitmapsProto에서 enforceCallingOrSelfPermissionDUMP 확인이 누락되어, 설치된 모든 앱이 Android 16 QPR2 BetaBaklava에서 실행 중인 모든 프로세스의 UI 비트맵을 유출할 수 있습니다. 참고: 이 취약점은 저희가 발견한 것이 아닙니다. 발견 및 책임 있는 신...
CVE-2026-74733
A flaw was found in the Linux kernel's gpio: pca953x driver, which manages General Purpose Input/Output GPIO expanders. The driver uses its own locking mechanism, but the pca953xirqbussyncunlock function failed to acquire the necessary lock when performing register operations. This oversight coul...
CVE-2026-74646
A flaw was found in the Linux kernel's fastrpc subsystem. When an invoke operation is interrupted by a signal, the fastrpcinternalinvoke function moves memory mappings without properly holding the fl-lock. This missing lock during memory map manipulation creates a race condition, which could lead...
CVE-2025-6934
이 저장소에는 README가 없습니다...
CVE-2026-74649
A flaw was found in the Linux kernel's rtl8723bs driver. A remote attacker, by operating a malicious Access Point AP, could send a specially crafted Wi-Fi Protected Equivalent Privacy WEP shared-key authentication challenge. This could lead to an out-of-bounds write or information disclosure due ...
CVE-2026-6017 Missing Authentication for Critical Function in KAON PG5298
Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...
360WFP_Exploit
360WFPExploit 360 Security WFP 드라이버360netmonx64wfp.sys의 IOCTL 인터페이스가 호출자 인증 없이 타사 프로그램에 의해 악용될 수 있는 위험을 확인하기 위한 개념 증명PoC입니다. 이 프로젝트는 보안 연구 및 취약점 분석 목적으로만 사용되어야 합니다. 불법적인 목적으로 사용해서는 안 됩니다. 프로젝트 개요 360 Security 네트워크 모니터링 드라이버 360netmonx64wfp.sys의 리버스 엔지니어링 과정에서 다음 동작들이 발견되었습니다: 드라이버가 사용자 모드에 두 개의...
research
이 저장소에는 README가 없습니다...
cve-2020-0601-utils
В этом репозитории нет README...