24983 matches found
GO-2026-6571 Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode in github.com/projectdiscovery/nuclei...
Apache-Solr-RCE-via-Velocity-template
Apache-Solr-RCE-via-Velocity-template 参考链接 漏洞产生原因： 1. 当攻击者可以直接访问Solr控制台时，可以通过发送类似/节点名/config的POST请求对该节点的配置文件做更改。 2. Apache...
security checks
🔍 矿工猎手 针对 Linux 服务器的加密货币挖矿程序检测、清除与加固工具包。 基于真实事件响应构建——可检测使用 Rootkit 技术隐藏于 ps、top、htop 和 btop 之外的挖矿程序。 📦 安装 git clone https://gitlab.com/abdom.seada/security-checks.git cd security-checks sudo bash setup.sh 🔀 分支： master — 本工具包位于 master 分支。其他安全脚本未来可能添加在单独的分支上。 ⚙️ 设置 ⚠️ 克隆后立即运行setup.sh —...
soc-analyst-hub
🛡️ SOC分析师中心 — 一级工具包 一款免费、完全离线的交互式工具包，专为一级SOC分析师打造 — 涵盖事件响应、告警分类、威胁狩猎及分析师入职培训。零依赖。单个HTML文件。可在任意浏览器中打开。 🚀 在线演示 → 📦 内含内容 ⚡ 事件响应检查清单 针对最常见事件类型的逐步交互式检查清单。边工作边勾选步骤 — 进度自动保存。 钓鱼邮件调查（12步） 恶意软件/端点失陷（12步） 暴力破解/凭据攻击（12步） 数据泄露告警（12步） 可疑PowerShell活动（12步） 🔍 告警分类手册 决策树流程，用于评估、分类和升级告警 — 包含是/否分支逻辑和清晰的升级阈值。 大量登录失败...
cups-script-final-project
功能说明 針對CVE-2025-58060的兩階段檢測工具，Common UNIX Printing System CUPS中的認證繞過漏洞。該工具不僅依賴版本號，還將基於Banner的版本檢查與主動認證繞過探測相結合。即使Server頭部截斷了修補版本，也能幫助確認真實的漏洞狀態。 第一階段 — 版本檢查 讀取CUPS Web介面（埠631）的Server: HTTP頭部，並將檢測到的版本與修補版本閾值2, 4, 13進行比較。如果Banner只報告CUPS/2.4（被截斷），工具會標記此情況並轉至第二階段。 第二階段 — 主動認證繞過探測 向/admin/發送精心構造的HTTP...
teamcity-cve-2026-63077-remediation
Suite Empresarial de Remediación de Seguridad Una suite de ingeniería de seguridad de nivel de producción que contiene cuatro paquetes especializados de respuesta a incidentes y endurecimiento. 📁 Arquitectura de Módulos del Repositorio . ├── README.md Índice de la Suite Empresarial y Guía de Inic...
CVE-2024-49138-SOC-Investigation
Investigación de Explotación de CVE-2024-49138 Plataforma: Entorno de Entrenamiento SOC de LetsDefend Alerta: SOC335 - Detección de Explotación de CVE-2024-49138 Categoría: Escalada de Privilegios | Análisis de Malware | Respuesta a Incidentes Estado: Investigación Completada ✅ Resumen En esta...
CVE-2026-104056
Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or issuer-origin binding. This allows a poisoned discovery response to replace all endpoint values with attacker-controlled values rather than endpoint URLs that share the origin of...
UBUNTU-CVE-2026-104056
Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or issuer-origin binding. This allows a poisoned discovery response to replace all endpoint values with attacker-controlled values rather than endpoint URLs that share the origin of...
CVE-2026-104056 CVE-2026-104056
Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or issuer-origin binding. This allows a poisoned discovery response to replace all endpoint values with attacker-controlled values rather than endpoint URLs that share the origin of...
EUVD-2026-91003
Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or issuer-origin binding. This allows a poisoned discovery response to replace all endpoint values with attacker-controlled values rather than endpoint URLs that share the origin of...
ALPINE-CVE-2026-63718
Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP Server via modproxyuwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68...
DEBIAN-CVE-2026-63718
Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP Server via modproxyuwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68...
CVE-2026-63718
Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP Server via modproxyuwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68...
ALPINE-CVE-2026-63686
A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...
CVE-2026-63686
A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...
ALPINE-CVE-2026-56449
Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...
DEBIAN-CVE-2026-56449
Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...
CVE-2026-56449
Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...
UBUNTU-CVE-2026-63718
Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP Server via modproxyuwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68...