6060 matches found
gitrob
Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...
Gitmails
Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...
CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation
CVE-2026-1529 Keycloak 漏洞利用工具 Keycloak：因不正确的邀请令牌验证导致未经授权的组织注册 免责声明 此工具仅供教育和安全测试使用。 仅可在获得明确授权的系统上使用。未经授权访问计算机系统是违法且不道德的。本工具的作者不对因使用本软件而导致的任何误用或损害承担责任。 创建者： f3ds cr3w est, 2002 概述 CVE-2026-1529 是 Keycloak 中的一个严重漏洞，允许通过不正确的邀请令牌验证进行未经授权的组织注册。此利用工具通过操纵 JWT 令牌，在未经授权的组织中注册用户，从而演示该漏洞。 技术细节 CVE ID：...
EUVD-2026-75440
OpenPanel through commit cd24bb8 contains an SQL injection vulnerability in the analytics filter builder that fails to validate profile. filter column identifiers before interpolating them into ClickHouse WHERE clauses. An authenticated attacker with project-scoped read or root export credentials...
CVE-2026-88888 Renovate before 44.14.7 Command Injection via Mix organization
Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inject shell metacharacters through malicious package names to execute arbitrary commands as the Renovate user in...
CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation
Herramienta de Explotación CVE-2026-1529 para Keycloak Keycloak: Registro no autorizado de organizaciones mediante validación incorrecta de tokens de invitación Aviso Legal Esta herramienta es solo para fines educativos y de pruebas de seguridad. Úsela únicamente en sistemas para los que tenga...
CVE-2026-26012
CVE-2026-26012 — PoC de Enumeración de Cifrados en Vaultwarden Enumeración Completa de Cifrados Ignorando los Permisos de Colección de la Organización Un exploit de prueba de concepto para CVE-2026-26012, una vulnerabilidad de control de acceso roto en Vaultwarden = 1.35.2 que permite a cualquier...
CVE-2026-1529
Herramienta de Explotación CVE-2026-1529 Keycloak CVE-2026-1529 : Keycloak - Registro de organización no autorizado mediante validación incorrecta del token de invitación ⚠️ ADVERTENCIA : Esta herramienta es solo para fines educativos y de pruebas de seguridad autorizadas. El acceso no autorizado ...
PT-2026-89374
capgo.app npm package capgo through version 12.207.1 does not compare the caller's role rank against the requested role in the validateInvite function of supabase/functions/ backend/private/invite new user to org.ts. The POST /private/invite new user to org endpoint only requires the org.update...
CVE-2026-50165 alf.io has Improper Access Control for Organization Owners that Exposes System Secrets
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...
CVE-2026-50165
alf.io , an open-source ticket reservation system, contains an Improper Access Control flaw in its organization and event "single configuration" endpoints. These endpoints require only organization or event ownership but accept an arbitrary configuration key, performing a lookup that includes sys...
EUVD-2026-75140
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...
CVE-2026-50165 alf.io has Improper Access Control for Organization Owners that Exposes System Secrets
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...
CVE-2026-26012
CVE-2026-26012 - Prueba de Concepto Omisión de Permisos de Colección para Miembros Autenticados y Enumeración de Cifrados Vaultwarden Referencia NVD: CVE-2026-26012...
grafana: Grafana: Unauthorized public dashboard deletion across organizations
A flaw in Grafana's public dashboard deletion endpoint lacks organization isolation, allowing an Organization Administrator to delete public dashboards in other organizations using the target dashboard's ID...
CVE-2026-86491
In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads...
CVE-2026-86489
In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations...
CVE-2026-86489
JetBrains YouTrack before version 2026.2.18634 contains an IDOR (Insecure Direct Object Reference) vulnerability in the user profile API , allowing an attacker with low-level privileges to disclose private issues and starred folders across organizations via the network. The CVSS 3.1 score is 6.5 ...