CVE-2022-44268-MagiLeak

ImageMagick 임의 파일 읽기 - CVE-2022-44268 이 저장소는 ImageMagick의 임의 파일 읽기 취약점CVE-2022-44268을 악용하기 위한 개념 증명PoC 코드를 포함합니다. 해당 PoC는 공격자가 취약점을 이용하여 시스템에서 임의의 파일을 읽을 수 있는 방법을 시연합니다. 사전 요구 사항 코드를 실행하려면 다음 종속성이 설치되어 있어야 합니다: Python 3.x Pillow Python Imaging Library 필요한 종속성은 pip를 사용하여 설치할 수 있습니다: root@kitploit:...

Twitter-Info

Twitter Info Twitter アカウント情報を取得するシンプルな Python スクリプトです。以下を取得できます: 名前 フォロー中 フォロワー いいね アカウント作成日 プロフィール画像 ユーザー名またはプロフィールリンクだけで取得できます。 使い方 root@kitploit: python3 twitterinfo.py or 例 入力 root@kitploit: python twitterinfo.py ngll 出力 root@kitploit: Name: Nigella Tweets: 30 Following: 8 Followers: 4 Likes:...

CVE-2026-77135

The extension's user detail view fails to verify that a requested user record matches the configured or logged-in target, allowing any visitor with access to the Detail or List plugin to retrieve another frontend user's profile data, including name, email, date of birth and address, by supplying ...

CVE-2026-77135 Information Disclosure in extension "femanager" (femanager)

The extension's user detail view fails to verify that a requested user record matches the configured or logged-in target, allowing any visitor with access to the Detail or List plugin to retrieve another frontend user's profile data, including name, email, date of birth and address, by supplying ...

EUVD-2026-65341

The extension's user detail view fails to verify that a requested user record matches the configured or logged-in target, allowing any visitor with access to the Detail or List plugin to retrieve another frontend user's profile data, including name, email, date of birth and address, by supplying ...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: protect device queue against concurrent access In dasdprofilestart the amount of requests on the device queue are counted. The access to the device queue is unprotected against concurrent access. With a lot of parallel...

CVE-2026-74869 stoatchat before 0.15.0 Missing Authorization via Subscribe

stoatchat before 0.15.0 contains a missing authorization vulnerability in the Subscribe message handler that allows authenticated attackers to enumerate members and monitor profile updates of private servers without membership. Attackers can subscribe to any server's member-update topic by sendin...

CVE-2026-74869

StoatChat before version 0.15.0 has a missing-authorization flaw in the Subscribe message handler: authenticated users can send a Subscribe message with any arbitrary server ID and receive live UserUpdate events (display names, avatars, status) for members of private servers they are not part of....

CVE-2026-73488

Flowise versions before 3.1.3 contain an insecure direct object reference vulnerability in the GET /api/v1/organization/customer-default-source endpoint that allows authenticated attackers to access other customers' payment and profile data by manipulating the customerId parameter. Attackers can...

CVE-2026-73488

Flowise CVE-2026-73488: An insecure direct object reference (IDOR) vulnerability in Flowise before 3.1.3 affects the GET /api/v1/organization/customer-default-source endpoint. Authenticated attackers can manipulate the customerId parameter to enumerate predictable customer IDs and access other cu...

EUVD-2026-57804

Flowise versions before 3.1.3 contain an insecure direct object reference vulnerability in the GET /api/v1/organization/customer-default-source endpoint that allows authenticated attackers to access other customers' payment and profile data by manipulating the customerId parameter. Attackers can...

CVE-2026-73488 Flowise before 3.1.3 IDOR via customer-default-source endpoint

Flowise versions before 3.1.3 contain an insecure direct object reference vulnerability in the GET /api/v1/organization/customer-default-source endpoint that allows authenticated attackers to access other customers' payment and profile data by manipulating the customerId parameter. Attackers can...

CVE-2026-73488 Flowise before 3.1.3 IDOR via customer-default-source endpoint

Flowise versions before 3.1.3 contain an insecure direct object reference vulnerability in the GET /api/v1/organization/customer-default-source endpoint that allows authenticated attackers to access other customers' payment and profile data by manipulating the customerId parameter. Attackers can...

CVE-2026-56720 CamaleonCMS 2.9.2 and earlier Missing Authorization via profile Action

CamaleonCMS version 2.9.2 and earlier contains a missing authorization vulnerability in the admin users controller that allows any authenticated user to access any other user's profile data by supplying an arbitrary user ID parameter. Attackers can send a GET request to the admin profile endpoint...

CVE-2026-56720

CVE-2026-56720 — CamaleonCMS

PT-2026-70263

CamaleonCMS version 2.9.2 and earlier contains a missing authorization vulnerability in the admin users controller that allows any authenticated user to access any other user's profile data by supplying an arbitrary user ID parameter. Attackers can send a GET request to the admin profile endpoint...

GHSA-2364-JH4Q-M9VM Flowise: IDOR vulnerability exists at the GET /api/v1/organization/customer-default-source endpoint

Summary An Insecure Direct Object Reference IDOR vulnerability exists at the GET /api/v1/organization/customer-default-source endpoint. This flaw allows an authenticated attacker to bypass authorization checks and retrieve sensitive payment and profile information of other customers by manipulati...

SUSE SLES12 Security Update : perl-DBI (SUSE-SU-2026:3461-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3461-1 advisory. - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. -...

CVE-2026-54768

WPGraphQL

CVE-2026-55496

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, GET /api/v4/user/search calls SearchActive without adding a StatusActive predicate and serializes matches at RedactLevelUser, allowing any logged-in user to enumerate email addresses and profile metadata for inactive ...