CVE-2023-2825-PoC

CVE-2023-2825-PoC 针对 CVE-2023-2825 的概念验证，这是 GitLab CE/EE 16.0.0 中的一个任意文件读取漏洞。 该脚本使用有效的 GitLab 账户登录，创建所需的公开嵌套组结构，创建一个公开项目，上传附件，并利用易受攻击的上传路径遍历行为从 GitLab 服务器读取目标文件。 它还支持复用现有上传路径，因此您无需为每次文件读取都创建新的组和项目。 功能说明 1. 向目标 GitLab 实例进行身份验证。 2. 使用短路径创建嵌套的公开组，以实现可靠的深层嵌套。 3. 在最深层的组内创建一个公开项目。 4. 向该项目上传一个小的附件。 5...

SharpPrivesc

SharpPrivesc 练习C并将Privesc攻击面整合在一起。仍然是新手内容。主要是Privesc检查之类的东西。 我更喜欢Spectreops的命令行解析类，因此决定使用它们，而不是其他像command line parser等.NET包。 待办事项： 菜单 更多的Privesc检查模块。 已完成 嵌套组 未引用的服务路径： DC同步：...

CVE-2023-2825-Gitlab

CVE-2023-2825 El 23 de mayo de 2023 GitLab lanzó la versión 16.0.1 que corrigió una vulnerabilidad crítica, CVE-2023-2825, que afecta a la Community Edition CE y Enterprise Edition EE versión 16.0.0. La vulnerabilidad permite a usuarios no autenticados leer archivos arbitrarios a través de un fal...

CVE-2023-2825

CVE-2023-2825 （未认证）目录遍历导致文件读取。 CVE 摘要 GitLab CE/EE 中发现了一个影响仅限于版本 16.0.0 的问题。当公共项目中存在附件且该项目嵌套在至少五个组内时，未认证的恶意用户可以利用路径遍历漏洞读取服务器上的任意文件。 受影响版本 GitLab GitLab 16.0.0 社区版 GitLab GitLab 16.0.0 企业版 异常情况 如果已存在一个包含嵌套组的仓库，则无需认证；否则需要拥有创建组权限的账户。 参考 GitHub POC - OccamSec, 2023年5月25日 GitLab 报告 - pwnie, 2023年5月20日...

CVE-2023-2825

CVE-2023-2825 - GitLab CE/EE 16.0.0 Lectura arbitraria de archivos mediante Path Traversal El 23 de mayo de 2023, GitLab lanzó la versión 16.0.1 que corrigió una vulnerabilidad crítica, CVE-2023-2825, que afecta a las ediciones Community Edition CE y Enterprise Edition EE versión 16.0.0. La...

Astra Linux – Vulnerability in protobuf

Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups/series of SGROUP tags can be corrupted due to exceeding the stack limit, i.e., StackOverflow. Parsing nested groups as unknown fields using the DiscardUnknownFieldsParser or the Java Protobuf...

protobuf: StackOverflow vulnerability in Protocol Buffers

A flaw was found in Protocol Buffers protobuf. This issue can allows an attacker to cause a StackOverflow via parsing untrusted Protocol Buffers data containing arbitrarily nested SGROUP tags, leading to unbounded recursion...

GHSA-RCMH-QJQH-P98V Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls

Summary A DoS can occur that immediately halts the system due to the use of an unsafe function. Details According to RFC 5322, nested group structures a group inside another group are not allowed. Therefore, in lib/addressparser/index.js, the email address parser performs flattening when nested...

Uncontrolled Recursion

Overview org.webjars.npm:nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Uncontrolled Recursion in the addressparser function. An attacker can cause the process to terminate immediately by sending an email address...

Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls

Summary A DoS can occur that immediately halts the system due to the use of an unsafe function. Details According to RFC 5322, nested group structures a group inside another group are not allowed. Therefore, in lib/addressparser/index.js, the email address parser performs flattening when nested...

TencentOS Server 4: protobuf (TSSA-2024:0556)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0556 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EUVD-2024-54086

Malicious code in bioql PyPI...

CVE-2025-10224

Improper Authentication CWE-287 in the LDAP authentication engine in AxxonSoft Axxon One C-Werk 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login...

CVE-2025-10224

Improper Authentication CWE-287 in the LDAP authentication engine in AxxonSoft Axxon One C-Werk 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login...

CVE-2025-10224

Improper Authentication CWE-287 in the LDAP authentication engine in AxxonSoft Axxon One C-Werk 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login...

CVE-2025-10224

The CVE-2025-10224 entry concerns AxxonSoft Axxon One (C-Werk) prior to or equal to 2.0.2 on Windows, where the LDAP authentication engine improperly evaluates nested LDAP group memberships. This allows a remote authenticated user to be denied access or receive misassigned roles during login. The...

CVE-2025-10224 Incorrect Evaluation of LDAP Nested Groups during Login in AxxonSoft Axxon One (C-Werk)

Improper Authentication CWE-287 in the LDAP authentication engine in AxxonSoft Axxon One C-Werk 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login...

CVE-2025-10224 Incorrect Evaluation of LDAP Nested Groups during Login in AxxonSoft Axxon One (C-Werk)

Improper Authentication CWE-287 in the LDAP authentication engine in AxxonSoft Axxon One C-Werk 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login...

PT-2025-37043

Name of the Vulnerable Software and Affected Versions: AxxonSoft Axxon One versions 2.0.2 and earlier Description: The LDAP authentication engine in AxxonSoft Axxon One has an improper authentication issue. A remote authenticated user may be denied access or misassigned roles due to incorrect...

Linux Distros Unpatched Vulnerability : CVE-2024-7254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the...