CVE-2026-88877

Traefik is a HTTP reverse proxy and load balancer. In versions = v3.7.0 and = v3.7.11, the Kubernetes ingress-nginx provider mishandles Ingresses that carry both an authentication annotation and the nginx.ingress.kubernetes.io/from-to-www-redirect annotation. For such Ingresses the provider creat...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to cert-manager ( CVE-2026-25518 )

Summary Potential vulnerabilities in cert-manager package CVE-2026-25518 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-25518 DESCRIPTION: cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service, improper input validation, and race condition due to Kubernetes (CVE-2025-0426, CVE-2025-1767, CVE-2024-7598)

Summary Potential vulnerabilities in kubernetes package CVE-2025-0426, CVE-2025-1767, CVE-2024-7598 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2025-0426 DESCRIPTION: A security issue was discovered in Kubernetes where a large number of container...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to weak randomness due to undici (CVE-2025-22150)

Summary Potential vulnerabilities in undici package CVE-2025-22150 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2025-22150 DESCRIPTION: Undici is an HTTP/1.1 client. Starting in version 4.5.0 and prior to versions 5.28.5, 6.21.1, and 7.2.3, undici us...

CVE-2026-52680_exploit

CVE-2026-52680 — Apache Kyuubi REST 배치 경로 탐색 임의 파일 쓰기 Apache Kyuubi의 REST API에서 multipart 배치 제출 엔드포인트를 통해 발생하는 인증되지 않은 임의 파일 쓰기 취약점입니다. POST /api/v1/batches multipart/form-data는 resourceFile 파트를 클라이언트가 제공한 파일명 을 사용해 경로 탐색 검사 없이 $KYUUBIHOME/work/upload//에 기록합니다 kyuubi-common의 Utils.writeToTempFile...

CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction

CVE-2026-22020 – 양자 키 분배 오류 정정의 약한 시드 프로그램 코드Python root@kitploit: qkdweakseed.py - Simulated QKD privacy amplification with weak seed import hashlib, os, time def privacyamplificationsiftedkey, seed: Weak: seed derived from current time, predictable if seed is None: seed = strtime.time.encode...

CVE-2026-88877

This CRITICAL (CVSS 3.1: 9.8) vulnerability affects Traefik v3.7.0 through v3.7.11, specifically its Kubernetes ingress-nginx provider . When an Ingress carries both an authentication annotation and the from-to-www-redirect annotation, the provider creates a "sibling" router that matches on host ...

EUVD-2026-75427

Traefik is a HTTP reverse proxy and load balancer. In versions = v3.7.0 and = v3.7.11, the Kubernetes ingress-nginx provider mishandles Ingresses that carry both an authentication annotation and the nginx.ingress.kubernetes.io/from-to-www-redirect annotation. For such Ingresses the provider creat...

CVE-2026-88877 Traefik v3.7.0 Authentication Bypass via from-to-www-redirect

Traefik is a HTTP reverse proxy and load balancer. In versions = v3.7.0 and = v3.7.11, the Kubernetes ingress-nginx provider mishandles Ingresses that carry both an authentication annotation and the nginx.ingress.kubernetes.io/from-to-www-redirect annotation. For such Ingresses the provider creat...

CVE-2026-88877 Traefik v3.7.0 Authentication Bypass via from-to-www-redirect

Traefik is a HTTP reverse proxy and load balancer. In versions = v3.7.0 and = v3.7.11, the Kubernetes ingress-nginx provider mishandles Ingresses that carry both an authentication annotation and the nginx.ingress.kubernetes.io/from-to-www-redirect annotation. For such Ingresses the provider creat...

CVE-2026-88877 Traefik v3.7.0 Authentication Bypass via from-to-www-redirect

Traefik is a HTTP reverse proxy and load balancer. In versions = v3.7.0 and = v3.7.11, the Kubernetes ingress-nginx provider mishandles Ingresses that carry both an authentication annotation and the nginx.ingress.kubernetes.io/from-to-www-redirect annotation. For such Ingresses the provider creat...

ClaimJumper

root@kitploit: / | | | | | | | | | | | | | |/ | | ' \ | | | | | ' | ' \ / \ '| | || | | | | | | | | || | || | | | | | | | | / | ||,||| || ||/ |,|| || || ./ || |/ | | || v0.1.0 전문 JWT 보안 테스트 툴킷. JSON 웹 토큰을 분석, 크래킹, 위조 및 악용하며 15개 이상의 취약점 점검, 10만 개의 시크릿 워드리스트, CVE 특화 공격을 지원합니다. 기능 핵심 분석 JWT 디코딩 및...

CVE-2021-44228

🛡️ CVE-2021-44228: Log4Shell分析 - Javaセキュリティに革命をもたらした脆弱性 重大な影響（CVSS 10.0） | 2021年に発見されたApache Log4jのこの欠陥は、リモートコード実行（RCE）を可能にし、世界中の何百万ものシステムに影響を与えました。今日でも、サイバーセキュリティにおける重要な教訓です！ 🔍 Log4Shellとは？ CVE-2021-44228 は、Log4Shell として知られる、Apache Log4j...

dtls-fuzzer

dtls-fuzzer 는 DTLS 서버의 프로토콜 상태 퍼징을 수행하는 Java 도구입니다. 구체적으로 다음과 같은 기능을 지원합니다: 1. 알파벳이 주어지면 로컬 DTLS 서버 구현의 모델을 자동으로 생성할 수 있습니다. 2. 테스트입력 시퀀스와 알파벳이 주어지면 DTLS 서버 구현에서 테스트를 실행할 수 있습니다. 3. 여러 학습 실행을 포함하는 배치 학습 작업을 실행할 수 있습니다. dtls-fuzzer 는 DTLS 메시지를 생성/구문 분석하고 상태를 유지하기 위해 TLS-Attacker를 사용합니다. 이를 위해...

CVE-2023-45612-PoC

CVE-2023-45612 https://nvd.nist.gov/vuln/detail/CVE-2023-45612 CVE描述 在JetBrains Ktor 2.3.5之前，ContentNegotiation的默认配置与XML格式存在XXE漏洞。 该漏洞由@marychatte于2023年9月29日修复（https://github.com/ktorio/ktor/pull/3770），漏洞是由于外部库xmlutil version 0.86.1中的配置错误导致的供应链攻击。...

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager(CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)

Summary There are multiple vulnerabilities in the Apache CXF library that affect IBM WebSphere Application Server, which is used by IBM Tivoli System Automation Application Manager. Required fixes for the affected WebSphere Application Server have been published in the security bulletin links...

Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks

The Gigabud banking trojan now installs a second Android app that creates a work profile on an infected phone and drops a tampered banking app inside it, security firm Group-IB said in a report published on September 9. A work profile is a separate space that Android typically reserves for employ...

clawdguard

🦞 ClawdGuard Clawdbot/Moltbot 설치의 보안 강화. 노출된 게이트웨이를 탐지하고 수정합니다. 노출된 Clawdbot/Moltbot 게이트웨이를 탐지하고 수정합니다 문제 • 기능 • 빠른 시작 • Docker • CLI • 수정되는 항목 • 개발 문제 900개 이상의 Clawdbot/Moltbot 인스턴스가 현재 인터넷에 노출되어 있습니다 Shodan에서 포트 18789로 확인 가능. 인증 없이 누구나 다음을 수행할 수 있습니다: 이 문제는 버그가 아니라 잘못된 설정 입니다. 사용자가 gateway.bind...

Security Bulletin: Multiple vulnerabilities affects IBM Db2 Big SQL on IBM Software Hub

Summary Multiple vulnerabilities affects IBM Db2 Big SQL on IBM Software Hub 5.4 and earlier. Vulnerability Details CVEID:CVE-2026-53655 DESCRIPTION: node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to...

Security Bulletin: SQL injection vulnerability in IBM Cloud Pak for Business Automation Operational Decision Manager component - CVE-2026-18658

Summary IBM Operational Decision Manager in IBM Cloud Pak for Business Automation is vulnerable to a SQL injection attack. Vulnerability Details CVEID:CVE-2026-18658 DESCRIPTION: IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to...