See-SURF

See-SURF 웹 애플리케이션에서 잠재적인 SSRFServer Side Request Forgery 파라미터를 찾는 보안 스캐너 이제 AI 🤖로 강화됨. See-SURF는 잠재적인 SSRF 파라미터를 탐지할 뿐만 아니라 검증까지 도와주어 시스템 및 사용자 데이터 침해로부터 애플리케이션을 보호합니다. 🎓 인용 연구 논문, 기사 등에서 이 소프트웨어를 사용하는 경우 인용해 주시기 바랍니다. root@kitploit: @softwareAgrawalSee-SURFDetectSSRF2019, author = Agrawal,...

CVE-2023-33246-mitigation

CVE-2023-33246-mitigation このプロジェクトは、Apache RocketMQ の脆弱性である CVE-2023-33246 を緩和するための Maven ベースのデモンストレーションです。 プロジェクト構成 org/example/Main.java：メインプログラムファイル。 org/apache/rocketmq/common/BrokerConfig.java：公式 RocketMQ 4.9.5 ソースコードの修正版。 主な機能 1. 攻撃テスト ：Main.java の updateConfig メソッドは攻撃テスト用に使用されます。 2. 検証の強化...

CVE-2026-3855

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with project-level permissions to access restricted file contents on the server or cau...

CVE-2026-3855 Improper Control of Resource Identifiers ('Resource Injection') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with project-level permissions to access restricted file contents on the server or cau...

CVE-2026-3855

CVE-2026-3855 is an improper control of resource identifiers (resource injection) vulnerability in GitLab CE/EE 's Terraform state upload functionality, caused by improper validation of parameters. An authenticated user with project-level permissions could, under certain conditions, access restri...

EUVD-2026-80121

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with project-level permissions to access restricted file contents on the server or cau...

roundcube-cve-2025-49113-lab

"免责声明：仅供教育用途" Roundcube Webmail 远程代码执行 – CVE-2025-49113 实验室 本仓库记录了我在受控实验室中逐步利用 Roundcube Webmail CVE-2025-49113 以获取存储在 /secret.txt 中秘密的过程。 ⚠️ 免责声明 所有工作均针对我拥有测试授权的实验室/训练环境进行。 请勿 将这些技术用于你不拥有或未管理权限的系统。 挑战 Roundcube Webmail 是一款基于浏览器、开源的 PHP 电子邮件客户端，通过 IMAP 连接邮箱并通过 SMTP 发送邮件。它通常运行在 Apache 或 Nginx 上，配合...

CVE-2026-91751 Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST API

Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and newid parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests to escape the project entries director...

EUVD-2026-78233

Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and newid parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests to escape the project entries director...

CVE-2026-91751 Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST API

Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and newid parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests to escape the project entries director...

PT-2026-91772

Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and new id parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests to escape the project entries directo...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/damon/lrusort: A divide-by-zero error was avoided in damonlrusortapplyparameters. The patch series “mm/damon: Avoid divide-by-zero in DAMON module’s parameter application”. The RECLAIM and LRUSORT modules of DAMON do not perfo...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdgpu: The parameters of bo mapping operations need to be clarified. The parameters of amdgpuvmbomap/replacemap/clearingmappings should be verified in a single common place...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobusgetPhy The caller may pass any value as addr, which could lead to an out-of-bounds access to the mdiomap array. One existing case is in stmmacinitPhy, where -1 may be passed as addr...

Astra Linux – Vulnerability in Zabbix

There is a vulnerability related to arbitrary file reading in the Zabbix Web Service Report Generation module, which listens on port 10053. The service does not perform proper validation on URL parameters before reading the files...

CVE-2026-18221

IBM i versions 7.3 through 7.6 are vulnerable to improper authentication (CWE-287) in Distributed Data Management (DDM) / Distributed Relational Database Architecture (DRDA) . A remote attacker with no privileges or user interaction can gain unauthorized access by supplying crafted authentication...

CVE-2026-85664

Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters maxneighbors, efconstruction, and efsearch in collection-create requests. Unauthenticated attackers can supply arbitrarily large parameter values to exhaust server memory and cause denial of service during index compaction...

CVE-2026-85664 Chroma 1.5.9 Unbounded HNSW Index Parameters Memory Exhaustion

Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters maxneighbors, efconstruction, and efsearch in collection-create requests. Unauthenticated attackers can supply arbitrarily large parameter values to exhaust server memory and cause denial of service during index compaction...

EUVD-2026-70742

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket ownership using the ExpectedBucketOwner parameter. This omission may allow a remote attacker to exploit misconfigurations or naming collisions to redirect application requests to an...

CVE-2026-76177

Server-Side Request Forgery SSRF vulnerability in the /ocsreports/?function=teleactivate endpoint due to insufficient validation of the HTTPSSERV and FILESERV parameters. An authenticated user with operator privileges can provide arbitrary values for these parameters, causing the OCS Inventory...