BreakEscape

BreakEscape Moteur Rails Jeu d'évasion d'entraînement en cybersécurité sous forme de moteur Rails montable. Fonctionnalités Plus de 24 scénarios d'évasion en cybersécurité Suivi de progression côté serveur avec un schéma de 2 tables Mots de passe aléatoires par instance de jeu via ERB Compilation...

readme2demo

readme2demo — tutoriels vérifiés et vidéos de démonstration à partir de votre README ▶ readme2demo générant son propre tutoriel : un agent IA exécute ce README dans un bac à sable, un nouveau conteneur rejoue chaque étape, puis la démo est rendue. Sortie complète de l'auto-exécution dans...

Barco Control Room Management Suite <=2.9 Build 0275 - Local File Inclusion

Barco Control Room Management through Suite 2.9 Build 0275 is vulnerable to local file inclusion that could allow attackers to access sensitive information and components. Requests must begin with the "GET /...." substring. id: CVE-2022-26233 info: name: Barco Control Room Management Suite =2.9...

CVE-2022-22909

CVE-2022-22909 Hotel Druid 3.0.3 - Удаленное выполнение кода RCE Эксплойт от kaal Эксплойты 1. HotelDruidExploit.py Этот эксплойт создаст новую комнату с PHP-полезной нагрузкой в качестве имени комнаты . Usage : $ ./HotelDruidExploit.py -h $ ./HotelDruidExploit.py -u http://127.0.0.1/hoteldruid 2...

CVE-2021-44228_PoC

POC для CVE-2021-44228 Этот скрипт на Python был создан во время работы над комнатой TryHackMe для Log4j. Хотя он был создан с переменными по умолчанию для этой комнаты, я использовал argparse, чтобы сделать скрипт универсальным для GET-запроса. Все необходимые переменные можно изменить с помощью...

CVE-2026-66751-Insufficient-Access-Controls-Allow-for-Unauthorized-Room-Deletion-Let-s-Chat-

Уведомление о безопасности: недостаточный контроль доступа позволяет несанкционированно удалять комнаты Let's Chat Присвоенный CVE ID: CVE-2026-66751 Краткое описание DELETE /rooms/:room не выполняет никакой проверки авторизации, кроме требования входа в систему. Любая учётная запись может...

CVE-2022-22909

CVE-2022-22909 Description Une vulnérabilité d'injection de code a été découverte dans l'application Hotel Druid v3.0.3, qu'un attaquant pourrait exploiter pour exécuter du code à distance sur le serveur. Pour une exploitation réussie, un attaquant doit avoir le privilège d'ajouter une nouvelle...

CVE-2023-33408

CVE-2023-33408 Minical 1.0.0 est vulnérable à une faille de type Cross-Site Scripting XSS stockée. Fournisseur : https://github.com/minical/minical Application de démonstration : https://demo.minical.io/ PoC Étape 1 : Connectez-vous à l'application Minical et naviguez jusqu'à Room - Room Status...

CVE-Research

TryHackMe Room - tryhackme.com/jr/cvechallenge Video -...

CPSC253_CybersecurityFinalProjectReports

Introduction Ces documents faisaient partie de mon projet final pour mon cours de cybersécurité : CPSC 253 - Cybersecurity Foundations and Principles. Le principe de mon projet final était que j'étais un consultant nouvellement embauché dans un centre de recherche et j'ai aidé à optimiser leur...

TryHackMe-Solar-exploiting-log4j-

В этом репозитории нет README...

EUVD-2026-90437

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor that fails to escape roomnum, floor, and comment field values in input attributes. Attackers can induce authenticated back-office users to submit crafted POST requests with malicious...

EUVD-2026-90438

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor's length of stay fields. Attackers can induce authenticated administrators to submit crafted POST requests with malicious payloads in restrictionminlos and restrictionmaxlos parameter...

CVE-2026-103589

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor that fails to escape roomnum, floor, and comment field values in input attributes. Attackers can induce authenticated back-office users to submit crafted POST requests with malicious...

CVE-2026-103590

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor's length of stay fields. Attackers can induce authenticated administrators to submit crafted POST requests with malicious payloads in restrictionminlos and restrictionmaxlos parameter...

CVE-2026-103590 QloApps through 1.7.0 Reflected XSS via Length of Stay Fields

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor's length of stay fields. Attackers can induce authenticated administrators to submit crafted POST requests with malicious payloads in restrictionminlos and restrictionmaxlos parameter...

CVE-2026-103590 QloApps through 1.7.0 Reflected XSS via Length of Stay Fields

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor's length of stay fields. Attackers can induce authenticated administrators to submit crafted POST requests with malicious payloads in restrictionminlos and restrictionmaxlos parameter...

CVE-2026-103590

QloApps versions through 1.7.0 are affected by a reflected cross-site scripting (XSS) vulnerability within the back-office room type editor. The flaw exists in the length of stay fields , where an attacker can craft POST requests containing malicious payloads in the restriction_min_los and restri...

CVE-2026-103590 QloApps through 1.7.0 Reflected XSS via Length of Stay Fields

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor's length of stay fields. Attackers can induce authenticated administrators to submit crafted POST requests with malicious payloads in restrictionminlos and restrictionmaxlos parameter...

CVE-2026-103589 QloApps through 1.7.0 Reflected XSS via Room Type Editor

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor that fails to escape roomnum, floor, and comment field values in input attributes. Attackers can induce authenticated back-office users to submit crafted POST requests with malicious...