@jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission

Alt Text Endpoint Authorization Bypass via Payload Local API overrideAccess Omission Summary @jhb.software/payload-alt-text-plugin v0.7.0 exposes custom Payload CMS endpoints POST /api/alt-text-plugin/generate and /bulk that call the Payload Local API findByID and update without setting...

GHSA-4QPV-39HG-F7FX @jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission

Alt Text Endpoint Authorization Bypass via Payload Local API overrideAccess Omission Summary @jhb.software/payload-alt-text-plugin v0.7.0 exposes custom Payload CMS endpoints POST /api/alt-text-plugin/generate and /bulk that call the Payload Local API findByID and update without setting...

CVE-2026-25513

CVE-2026-25513：FacturaScripts 在 API ORDER BY 子句中存在 SQL 注入漏洞 概述 字段| 详情 ---|--- CVE ID| CVE-2026-25513 严重等级| 高危 安全公告| 查看公告 发现者| Lukasz Rybak 受影响产品 facturascripts/facturascripts （版本：orderBy = $field . ' ' . $order; return $this; 该检查旨在允许 SQL 函数，但未能对其进行验证，从而允许任意 SQL 注入。 概念验证（PoC） 前提条件 有效的 API...

@argos-ci/core: CI Branch Name OS Command Injection

CI Branch Name OS Command Injection in @argos-ci/core Summary @argos-ci/[email protected] passes attacker-controlled CI branch/ref strings directly into an execSync template literal in packages/core/src/ci-environment/git.ts:89. When a CI project has hasRemoteContentAccess: false, the Argos upload flow...

GHSA-4X45-GXVP-6283 @argos-ci/core: CI Branch Name OS Command Injection

CI Branch Name OS Command Injection in @argos-ci/core Summary @argos-ci/[email protected] passes attacker-controlled CI branch/ref strings directly into an execSync template literal in packages/core/src/ci-environment/git.ts:89. When a CI project has hasRemoteContentAccess: false, the Argos upload flow...

CVE-2026-21858

🚨 CVE-2026-21858 — “Ni8mare” 一个无需认证的远程代码执行漏洞，影响开源工作流自动化平台。 📖 目录 概述 技术细节 严重等级与 CVSS 受影响版本 影响 利用 检测 修复 临时措施 总结 🔎 概述 CVE-2026-21858 ，代号 “Ni8mare” ，是 n8n 中的一个严重漏洞。n8n 是一个用于构建自动化工作流（例如自动化 API 调用、集成、SaaS 连接器）的流行平台。 该漏洞允许未经认证的远程攻击者 与未正确验证的 webhook/表单端点交互，从而未经授权访问文件及内部服务器资源。 成功利用该漏洞可能导致完全远程代码执行（RCE）...

gha-lab-ba8e0c4217

自动化研究产物 — 非上游项目。 本仓库是由自动化工具链构建的一次性实验环境，用于拉瓦尔大学（Université Laval）硕士论文中对已发表的 GitHub Actions 工作流漏洞的复现研究。它是 litestar-org/litestar 在提交 18d84d846b782ccaab06f550a4defce22b3082e8（2024-07-27）时的逐字快照，依据该项目自身的许可证重新分发，该许可证文件已原样包含在本快照中。 上游项目未 参与其中，也从未被作为攻击目标，此处研究的漏洞已是公开信息。本仓库中的每个密钥和变量均为随机生成的虚拟值——不包含任何真实凭据。Acti...

CVE-2025-15030

CVE-2025-15030 User Profile Builder 3.15.2 - 未認証の任意パスワードリセット CVE-2025-15030 User Profile Builder — 未認証のパスワードリセット → 管理者権限奪取 + シェルアップロード root@kitploit: / / \ |/ / / / / / \ / / / \ / \ | / | | //| \ / /| / | / /| \ | || | / | / || / | | | // | /\/ /| /|/ /\ |\| |\ || /| \ || /|...

mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS

Unbounded Remote Media Fetch and Video Frame Expansion DoS Summary The POST /v1/chat/completions endpoint in mistral.rs fetches attacker-supplied media URLs image, audio, video into server memory with no byte limit, and extracts every frame of a supplied video when numframes is None. An...

GHSA-M3WP-48JR-VR4G mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS

Unbounded Remote Media Fetch and Video Frame Expansion DoS Summary The POST /v1/chat/completions endpoint in mistral.rs fetches attacker-supplied media URLs image, audio, video into server memory with no byte limit, and extracts every frame of a supplied video when numframes is None. An...

Exploit for Stack-based Buffer Overflow in Microsoft

🛡️ AI Security Tool Module CVE-2026-4...

Berserko

Berserko - 适用于 Burp Suite 的 Kerberos 认证 由 NCC Group Plc 以开源形式发布 - http://www.nccgroup.trust/ 由 Richard Turnbull 开发，richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/Berserko 根据 AGPL 发布，更多信息请参阅 LICENSE。 ❗ 重要提示 ❗ Berserko 的后续开发将在 https://github.com/rteatea/Berserko 进行。 简介...

aws-inventory

简介 该工具旨在发现账户中创建的所有 AWS 资源。AWS 拥有许多产品（即服务），并且不断有新产品加入，现有产品也在不断扩展新功能。该生态系统允许用户将许多不同的服务组合起来，形成定制的云体验。即时按需大规模启动服务的能力会带来管理成本。要审计 AWS 账户中正在使用的资源很快就会变得困难。这不仅对计费很重要，对安全也很重要。休眠资源和未知资源更容易出现安全配置弱点。此外，具有意外依赖关系的资源会引发可用性、访问控制和授权问题。 它使用 botocore 来发现 AWS 服务 及其运行的区域，也用于调用服务 API。所调用的 API 是那些应列出或描述资源的 API。结果可以 JSON...

Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in bcprov-jdk18on-1.82 (CVE-2026-0636)

Summary IBM® Db2® federated server is affected by a vulnerability in bcprov-jdk18on-1.82 CVE-2026-0636 Vulnerability Details CVEID:CVE-2026-0636 DESCRIPTION: Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in Legion of the Bouncy Castle Inc. BC-JAV...

Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in fabric-sdk-java (CVE-2026-41586)

Summary IBM® Db2® federated server is affected by a vulnerability in fabric-sdk-java Vulnerability Details CVEID:CVE-2026-41586 DESCRIPTION: Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. From versions 1.0.0 to 2.2.26...

Security Bulletin: IBM® Db2® federated server is affected by multiple vulnerabilities in Netty open source libraries.

Summary IBM® Db2® federated server is affected by multiple vulnerabilities in Netty open source libraries. Vulnerability Details CVEID:CVE-2026-55831 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final,...

detaped

Detaped Introduction Detaped is a Python disassembler and decompiler for Duktape GitHub. The intended use is for source code review and analysis in situations where you only have the compiled Duktape bytecode binary, such as in a black-box assessment. Features Parses JSE file format Disassemble J...

K000163298: Linux kernel vulnerability CVE-2026-53397

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posixacl leak on SETACL decode failure nfsaclsvcdecodesetaclargs and nfs3svcdecodesetaclargs each call nfsstreamdecodeacl twice, first for NFSACL and then for NFSDFACL. Each successful call...

CVE-2025-65321

CVE-2025-65321 Language Sloth Discord 机器人的 gif 和 png 函数存在目录遍历漏洞。这些函数使用未经清理的用户输入构造文件路径，允许攻击者访问预期资源目录之外的文件。 files.py 文件中的 gif 和 png 函数存在目录遍历漏洞，因为它们使用 open 从托管机器人的服务器本地获取文件。以下负载允许 Discord 上的任何用户检索托管机器人服务器上的任意 .gif 和 .png 文件。 root@kitploit: async def gifself, ctx, name: str = None: ''' ADM 从机器人的 gif...

Security Bulletin: IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands under certain conditions (CVE-2026-86093)

Summary IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that improperly copies user-controlled data into a fixed-size stack buffer without bounds...