CVE-2026-77239

WACRM (a self-hostable CRM template for WhatsApp) versions 0.7.0 and earlier have an authorization flaw in flow and automation write routes. The routes authenticate account viewers but fail to enforce the agent role before invoking a service-role database client that bypasses row-level security. ...

pybatfish

Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...

cve-2025-29927

CVE-2025-29927-PoC-Exploit Next.js ミドルウェアの認証バイパスに関する概念実証 脆弱なバージョンに対しては、こちらで実行できます: https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927 実行方法 実行は簡単です。 1. Python3 CVE-2025-29927-PoC-Exploit.py 実行すると、ドメイン名の入力を求められます。（2つのオプションがあります: 1つ目はドメイン名のみを入力、2つ目はドメイン名とパスを入力）...

trappsec

trappsec trappsec은 개발자가 API 비즈니스 로직을 탐지하는 공격자를 식별할 수 있도록 도와주는 오픈소스 프레임워크입니다. 실제 API 구조와 구분하기 어려운 현실적인 유인 경로와 허니 필드를 내장함으로써, 공격자가 인증을 거치도록 유도하여 정찰 행위를 실행 가능한 보안 원격 분석 데이터로 전환합니다. 실제로 보안 알림을 확인하는 1%의 사람들을 위해 만들어졌으며, 그리고 단지 알림이 있다는 사실 자체를 좋아하는 99%의 사람들을 위해서도 만들어졌습니다. 문서 보기 • 초간단 시작하기 핵심 개념 유인 경로 Dec...

LFI-aiohttp-CVE-2024-23334-PoC

LFI-aiohttp-CVE-2024-23334-PoC 脆弱なaiohttpサーバーに対するLocal File Inclusion（LFI）攻撃を自動化するBashスクリプト。CVE-2024-23334を標的にしています。このエクスプロイトは、静的ルートの設定が不適切な影響を受けるバージョンのaiohttpを実行しているシステム上の任意のファイルへの不正アクセスを可能にします。 CVE-2024-23334 脆弱性...

grafana-unauth-file-read

grafana-unauth-file-read : CVE-2021-43798 Grafana におけるファイルの不正読み取り（0day） grafana-clock-panel プラグインにより、Grafana に新しい 0day LFI が存在するようです。次の形式の GET リクエストを送信するだけで十分です： GET /public/plugins/grafana-clock-panel/../../../../../../../etc/passwd プラグインの一覧 root@kitploit:...

SNet

SNet 일본어 버전 AI를 사용하여 플래그를 탈취하는 CTF입니다. 침투 테스트 경험이 없으신가요? 문제 없습니다. Claude Code가 개인 트레이너 역할을 합니다 — 환경을 설정하고, 도구 사용법을 알려주며, 실제 공격 기술을 단계별로 안내합니다. 모든 명령어는 직접 입력합니다. SNet이란? SNet은 실제 운영 중이던 서버를 기반으로 구축된 취약한 가상 머신입니다. 교과서적인 연습 문제가 아닙니다 — 실제 시스템 관리자들이 남긴 설정 파일, 잊혀진 스크립트, 방치된 자격 증명, 그리고 잘못된 결정들이 겹겹이 쌓여 있...

CVE-2022-22947_EXP

一、Spring Cloud Gateway リモートコード実行脆弱性 危険度：高 POC/EXP状況：公開済み CNVD番号：CNNVD-2022-16402 ​ CVE番号：CVE-2022-22947 二、影響範囲： VMWare Spring Cloud GateWay 3.1.0 VMWare Spring Cloud GateWay =3.0.0，python cve-2022-22947.py 単一ターゲット検証： 1、python cve-2022-22947.py...

route-detect

route-detect Webアプリケーションのルートにおける認証（authn）と認可（authz）のセキュリティバグを見つけます： koel ストリーミングサーバーからのルート WebアプリケーションのHTTPルートにおけるauthnおよびauthzのバグは、今日見られる最も一般的なセキュリティ問題の一部です。以下の業界標準のリソースは、その問題の深刻さを強調しています： 2021 OWASP Top 10 1 - アクセス制御の不備 2021 OWASP Top 10 7 - 識別と認証の失敗 2023 OWASP API Top 10 1 - オブジェクトレベルの認可の不備 20...

aiohttp - Directory Traversal

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...

MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes

A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled --app-name basic-auth and served via uvicorn ASGI. The FastAPI permission middleware only enforces authentication on /gateway/...

CVE-2026-92778

CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle to HTML form routes, allowing attackers to bypass the feature gate. Attackers can access the form endpoints to start and stop the recurring election scheduler, disrupting leadership across managed Kafka clusters...

EUVD-2026-81041

CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle to HTML form routes, allowing attackers to bypass the feature gate. Attackers can access the form endpoints to start and stop the recurring election scheduler, disrupting leadership across managed Kafka clusters...

CVE-2026-92778 CMAK through 3.0.0.6 Feature Gate Bypass via HTML Form Routes

CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle to HTML form routes, allowing attackers to bypass the feature gate. Attackers can access the form endpoints to start and stop the recurring election scheduler, disrupting leadership across managed Kafka clusters...

CVE-2026-92778

CMAK (Yahoo's Cloud Management for Apache Kafka) through 3.0.0.6 contains a feature gate bypass in its HTML form routes. The scheduled leader election feature toggle is not applied to these routes, allowing an authenticated low-privilege attacker to access form endpoints and start or stop the rec...

CVE-2026-92778 CMAK through 3.0.0.6 Feature Gate Bypass via HTML Form Routes

CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle to HTML form routes, allowing attackers to bypass the feature gate. Attackers can access the form endpoints to start and stop the recurring election scheduler, disrupting leadership across managed Kafka clusters...

CVE-2026-87907

CVE-2026-87907 affects the Rox Appointment Booking WordPress plugin in versions prior to 1.2.8 . The root cause is a missing authorization check on the REST endpoints that return booking service and category records. This allows unauthenticated attackers to read private internal notes stored on e...

cve-2014-0130

== CVE-2014-0130 テストケース ペイロード : http://site/api/%5C../%5C../%5C../%5C../%5C../CATDIR === Netsparker 検出 : https://i.imgur.com/s1vahmj.png == HackerOne 1 - newrelic.com rails ディレクトリトラバーサル脆弱性 droidsec による - https://hackerone.com/reports/134032 == 参照 1...

CVE-2025-29927

CVE-2025-29927 - Next.js ミドルウェア認可バイパス PoC これは Capture The Flag CTF 形式の Proof of Concept であり、Next.js ミドルウェア認可バイパス の脆弱性 CVE-2025-29927 を対象としています。目的は、認証ミドルウェアをバイパスして /protected ルートからフラグを取得することです。 脆弱性の概要 CVE : CVE-2025-29927 タイプ : 認可バイパス コンポーネント : Next.js ミドルウェア 影響 : 保護されたルートへの不正アクセス PoC 対象ルート :...

CVE-2026-47101-PoC

CVE-2026-47101 — LiteLLM Privilege Escalation via /key/generate + /user/update LiteLLM v1.82.6（v1.83.14 より前のバージョン）の /key/generate エンドポイントは、低権限の internaluser がワイルドカードルート "/" を持つ API キーをリクエストでき、続いて /user/update エンドポイント経由で自身のロールを proxyadmin に昇格させ、認可されていない権限昇格を実現できます。 Field| Value ---|--- CVE|...