readable-thrift

Readable Thrift Readable Thriftは、バイナリ形式のThriftプロトコルメッセージを人間にわかりやすい形式に変換（およびその逆も）することで、扱いやすくします。これにより、バイナリ形式のThriftメッセージの手動分析や改ざんが、HTTPのようなプレーンテキストプロトコルを扱うのと同じくらい簡単になります。 このライブラリはJavaで実装されており、JVM上で動作するBurpやZAPなどの一般的なWebアプリケーションテストツール向け拡張機能との統合が可能です。分析ツールや改ざんツールを立ち上げて稼働させるには、適切なバイトを抽出してコーデックに渡すだけです...

LDAP-Password-Hunter

LDAP Password Hunter Es kommt vor, dass aufgrund von Anforderungen an veraltete Dienste oder einfach aus schlechten Sicherheitspraktiken Passwörter für jeden authentifizierten Benutzer weltweit lesbar in der LDAP-Datenbank gespeichert sind. LDAP Password Hunter ist ein Tool, das Funktionen von...

CVE-2020-10977

Exploit Python per lettura arbitraria di file in istanza privata di GitLab Alla data del 23/03/2020, un report di vulnerabilità con il suo PoC è stato rilasciato su HackerOne da William Bowling Con questa vulnerabilità possiamo leggere qualsiasi file leggibile da tutti con permesso 444 o superior...

CVE-2026-79788

In Dradis Community Edition, the ProvidersController and AgentsController gate their adminrequired beforeaction on defined?Dradis::Pro, a constant that is never defined in CE, so the authorization check is never applied. As a result, any authenticated non-admin user can create an AI provider...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

log4shell

log4shell पायथन स्क्रिप्ट जो सर्वर फ़ाइल सिस्टम को log4j जार के लिए स्कैन करती है जो CVE-2021-44228 और CVE-2021-45046 के प्रति संवेदनशील हैं। स्क्रिप्ट फ़ाइल सिस्टम zip, ear, war सहित में पुनरावर्ती रूप से जाती है और log4j संस्करण 2. से 2.15 को org/apache/logging/log4j/core/lookup/JndiLookup.clas...

socid-extractor

socidextractor Turn any public profile page into a structured account record — usernames, display names, bios, avatars, locations, joined-at dates, follower counts, external links, and the stable internal identifiers that uniquely pin an account across renames, redesigns, and deletions...

CVE-2026-59292

CVE-2026-59292...

CVE-2026-48790

Turso CLI is the command line interface CLI to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to settings.json using Viper's default configPermissions of 0o644, leaving the credential file world-readable on standard Linux and macOS systems. Any othe...

EUVD-2026-56787

Turso CLI is the command line interface CLI to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to settings.json using Viper's default configPermissions of 0o644, leaving the credential file world-readable on standard Linux and macOS systems. Any othe...

CVE-2026-48790 turso-cli persists Turso platform JWT with world-readable (0o644) file permissions

Turso CLI is the command line interface CLI to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to settings.json using Viper's default configPermissions of 0o644, leaving the credential file world-readable on standard Linux and macOS systems. Any othe...

CVE-2026-48790

CVE-2026-48790 (turso-cli) : Versions prior to 1.0.26 store the Turso platform JWT in settings.json with world-readable permissions (0o644) due to Viper’s default configPermissions, enabling any local user on the host to read the file and exfiltrate the JWT, which grants full Turso platform acces...

CVE-2026-48790 turso-cli persists Turso platform JWT with world-readable (0o644) file permissions

Turso CLI is the command line interface CLI to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to settings.json using Viper's default configPermissions of 0o644, leaving the credential file world-readable on standard Linux and macOS systems. Any othe...

CVE-2026-63623

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the qemu-img utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents...

DEBIAN-CVE-2026-63623

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the qemu-img utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents...

CVE-2026-63623

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the qemu-img utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents...

CVE-2026-63623 Libvirt: information disclosure via world-readable storage volume images during clone/convert

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the qemu-img utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents...

CVE-2026-63623

CVE-2026-63623 affects libvirt during storage volume clone or convert operations, where qemu-img creates new volume images with overly permissive file permissions, temporarily making them world-readable and allowing local users to read the full guest disk contents. This could lead to sensitive in...

CVE-2026-63623

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the qemu-img utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents...

Linux Distros Unpatched Vulnerability : CVE-2026-63623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by...