CVE-2018-0101-DOS-POC

CVE-2018-0101-DOS-POC DOS source : https://pastebin.com/YrBcG2Ln this POC is not released by me. use at your own risk...

CVE-2025-4102025

安全公告：CVE-2025-4102025 摘要 在 Copilot AI 中发现了一个严重漏洞，影响检索增强生成（RAG）操作后 Web 查询引用链接的渲染方式。当用户请求页面摘要或执行基于 Web 的查询时，所有后续引用链接 都被错误地链接到 https://www.collectingflags.com，无论信息的真实来源如何。 该缺陷损害了引用的完整性，误导了用户，并可能导致重定向到不受信任或恶意内容。 受影响产品 Copilot AI（所有支持 Web 连接的版本） 任何集成了 Copilot 且支持 RAG 引用功能的应用程序 漏洞详情 CVE ID：...

CVE-2022-35914

CVE-2022-35914 PoC 参考文献 https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr https://github.com/cosad3s/CVE-2022-35914-poc Sébastien Copin氏に謝意 – ここで適応したPoCについて 詳細な解説はこちら: https://link.medium.com/tBwDlpQl3Ib 使用方法 root@kitploit: pip install -r requirements.txt root@kitploit:...

PyHmmm

PyHmmm 这是什么？ 这是一个用 Python 编写的 Havoc C2 第三方代理（agent）。它旨在作为一个基础 PoC，用于学习如何编写自定义 Havoc 代理，配套博客文章：https://codex-7.gitbook.io/codexs-terminal-window/red-team/red-team-dev/extending-havoc-c2/third-party-agents 功能 目前仅支持 2 个命令： shell system command exit 它 并非 旨在做到 OPSEC 安全或可安全用于实际环境。它原本是用来学习 Havoc...

EUVD-2026-76744

When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party administrative interface directly to that interface without applying the gateway's own authentication requirement first. All access control for this administrative interface, which...

CVE-2026-90449

When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party administrative interface directly to that interface without applying the gateway's own authentication requirement first. All access control for this administrative interface, which...

CVE-2026-90449

CVE-2026-90449 affects a reverse proxy/gateway in an ICS/OT deployment (per the referenced CISA advisory icsa-26-254-01 ). When a particular authentication mode is configured, the reverse proxy forwards requests to a bundled third-party administrative interface without first applying the gateway'...

CookieViz

CookieViz（法语版） CookieViz 是一款可视化工具，可让您衡量自己在浏览时 cookie 所造成的影响。 Cookieviz 分析浏览器与远程网站和服务器之间的交互。您可以了解到，您所访问的网站向哪些其他参与者发送了信息。 使用方法 请确保您的系统上已安装软件平台 node.js 和 git。 1. 在终端中获取 CookieViz 的代码： git clone https://github.com/LINCnil/CookieViz 2. 配置并启动 CookieViz： npm install npm run start 您还可以使用 npm run dist 命令为...

CSPlugins

CSPlugins Recopilación de plugins útiles de terceros para Cobaltstrike, en constante actualización...

ctf-party

ctf-party What it is A library to enhance and speed up script/exploit writing for CTF players or security researchers, bug bounty hunters, pentesters but mostly focused on CTF by patching the String class to add a short syntax of usual code patterns. The philosophy is also to keep the library to ...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.

Summary Multiple vulnerabilities were identified in third-party components used by CICS Transaction Gateway for Multiplatforms, including IBM WebSphere Application Server, IBM WebSphere Application Server Liberty, Apache Tomcat Embed, Logback, Log4j, Jackson Databind, and various operating system...

CVE-2026-69713

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-73603

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

Windows Secure Boot Security Feature Bypass Vulnerability

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

Online dating app Grindr has opted to pay £26 million $35.1 million to settle a lawsuit in the U.K. over allegations that it shared users' personal information, including their HIV status, with third-parties. Grindr, which is the largest LGBTQ+ dating app, was sued in April 2024, accusing it of...

CVE-2026-84936

The EmbedPress WordPress plugin before 4.6.4 does not have proper authorization on a public review-loading action, allowing unauthenticated users to force the site to make repeated billable third-party API requests using the site's own configured API key, and to create an unbounded number of...

CVE-2026-15933

OptimiDoc Server On-Premise stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP for scan delivery, Active Directory for user list import, and SharePoint credentials, in cleartext via the web...

CVE-2026-18058

The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. When paired with a phishing attack, this manipulation could result in escalated privileges of an attacker within the system...

CVE-2026-18058

The mobile Smart Connect dashboard UI (referenced via Motorola support, with CNA from Lenovo PSIRT ) was vulnerable to manipulation by third-party apps . When combined with a phishing attack , this manipulation could lead to privilege escalation for an attacker within the system. The vulnerabilit...

EUVD-2026-70110

The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. When paired with a phishing attack, this manipulation could result in escalated privileges of an attacker within the system...