607355 matches found
CVE-2026-90503 Chengdu Qilu Technology Ludashi ComputerZ_x64.sys sub_11008 information disclosure
A flaw has been found in Chengdu Qilu Technology Ludashi 6.1026.4715.714. The affected element is the function sub11008 in the library ComputerZx64.sys. Executing a manipulation of the argument PhysicalAddress can lead to information disclosure. The attack needs to be launched locally. The exploi...
Mimic
Mimic Navegador‑en‑el‑navegador BitB sin marcos: sin iframes, sin problemas de frame‑busting. Una librería de un solo script basada en Shadow DOM / MutationObserver para simulaciones de phishing realistas, fácilmente inyectable mediante proxy inverso. ⚠️ Advertencia : Utilice este software...
CVE-2026-90501
A security vulnerability has been detected in lenve vhr 1.0-SNAPSHOT. This issue affects the function HrInfoController.updateHr of the file HrMapper.xml. Such manipulation of the argument Password leads to improper privilege management. The attack may be performed from remote. The exploit has bee...
CVE-2026-90500
A weakness has been identified in lenve vhr 1.0-SNAPSHOT. This vulnerability affects the function FastDFSUtils.upload of the file /hr/userface of the component Avatar Upload. This manipulation of the argument File causes unrestricted upload. The attack is possible to be carried out remotely. The...
CVE-2026-90502 stilleshan ServerStatus Stats Generation main.cpp cross site scripting
A vulnerability was detected in stilleshan ServerStatus 1.0/2.0. Impacted is an unknown function of the file server/src/main.cpp of the component Stats Generation. Performing a manipulation of the argument custom results in cross site scripting. It is possible to initiate the attack remotely. The...
CVE-2026-90502 stilleshan ServerStatus Stats Generation main.cpp cross site scripting
A vulnerability was detected in stilleshan ServerStatus 1.0/2.0. Impacted is an unknown function of the file server/src/main.cpp of the component Stats Generation. Performing a manipulation of the argument custom results in cross site scripting. It is possible to initiate the attack remotely. The...
CVE-2026-90502
A stored cross-site scripting (XSS) vulnerability was identified in stilleshan ServerStatus 1.0 and 2.0 . The flaw exists in the Stats Generation component (file server/src/main.cpp) and is triggered by manipulating the custom argument . The attack can be initiated remotely , requires low privile...
EUVD-2026-76975
A vulnerability was detected in stilleshan ServerStatus 1.0/2.0. Impacted is an unknown function of the file server/src/main.cpp of the component Stats Generation. Performing a manipulation of the argument custom results in cross site scripting. It is possible to initiate the attack remotely. The...
cve-2025-55182-node
CVE-2025-55182 Next.js RCE 漏洞利用工具 English | 漏洞原理分析 !CAUTION ⚠️ 免责声明 - 使用前必读 本工具仅供以下用途使用： 安全研究人员进行漏洞验证 获得明确授权的渗透测试 教育和学习目的 未经授权访问计算机系统是违法行为！ 使用本工具即表示您同意： 1. 在测试任何系统之前已获得适当授权 2. 不会将本工具用于恶意目的 3. 您对自己的行为及其后果承担全部责任 作者对本工具的滥用不承担任何法律责任。 Next.js 服务端原型污染导致的远程代码执行漏洞利用工具。 漏洞概述 CVE-2025-55182 是一个影响 Next.js...
CVE-2026-90501 lenve vhr HrMapper.xml HrInfoController.updateHr privileges management
A security vulnerability has been detected in lenve vhr 1.0-SNAPSHOT. This issue affects the function HrInfoController.updateHr of the file HrMapper.xml. Such manipulation of the argument Password leads to improper privilege management. The attack may be performed from remote. The exploit has bee...
CVE-2026-90501 lenve vhr HrMapper.xml HrInfoController.updateHr privileges management
A security vulnerability has been detected in lenve vhr 1.0-SNAPSHOT. This issue affects the function HrInfoController.updateHr of the file HrMapper.xml. Such manipulation of the argument Password leads to improper privilege management. The attack may be performed from remote. The exploit has bee...
EUVD-2026-76974
A security vulnerability has been detected in lenve vhr 1.0-SNAPSHOT. This issue affects the function HrInfoController.updateHr of the file HrMapper.xml. Such manipulation of the argument Password leads to improper privilege management. The attack may be performed from remote. The exploit has bee...
CVE-2026-90501
CVE-2026-90501 affects the lenve vhr application (version 1.0-SNAPSHOT ). The vulnerability resides in the HrInfoController.updateHr function within HrMapper.xml , where manipulation of the Password argument leads to improper privilege management (mass assignment privilege escalation, per the ass...
StegoLab
🕵️ StegoLab – Kit de esteganografía de imágenes todo-en-uno StegoLab es una suite de análisis de esteganografía de imágenes ligera y todo-en-uno, creada para CTFs, retos de ciberseguridad y análisis forense digital. Automatiza el uso de herramientas populares como binwalk, steghide, stegseek,...
EUVD-2026-76973
A weakness has been identified in lenve vhr 1.0-SNAPSHOT. This vulnerability affects the function FastDFSUtils.upload of the file /hr/userface of the component Avatar Upload. This manipulation of the argument File causes unrestricted upload. The attack is possible to be carried out remotely. The...
CVE-2026-90500 lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload
A weakness has been identified in lenve vhr 1.0-SNAPSHOT. This vulnerability affects the function FastDFSUtils.upload of the file /hr/userface of the component Avatar Upload. This manipulation of the argument File causes unrestricted upload. The attack is possible to be carried out remotely. The...
CVE-2026-90500 lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload
A weakness has been identified in lenve vhr 1.0-SNAPSHOT. This vulnerability affects the function FastDFSUtils.upload of the file /hr/userface of the component Avatar Upload. This manipulation of the argument File causes unrestricted upload. The attack is possible to be carried out remotely. The...
CVE-2026-90500
lenve vhr 1.0-SNAPSHOT is affected by an unrestricted file upload vulnerability in the Avatar Upload component, specifically in the function FastDFSUtils.upload within the file /hr/userface . The root cause is improper validation of the File argument, allowing remote attackers with low privileges...
agentic-dm-gateway
Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...
awesome-ai-security
awesome-ai-security A curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers. root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the...