Find-AdminAccess

FindAdminAccess Un utilitaire en C qui énumère les ordinateurs du domaine et teste l'accès administratif à ceux-ci, incluant les vérifications de connectivité, la vérification des privilèges administrateur et le test d'écriture sur le partage C$. Fonctionnalités Énumérer tous les ordinateurs d'un...

CVE-2026-104026

In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/blame/annotate...

CVE-2026-104026

In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/blame/annotate...

CVE-2026-104026

In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/blame/annotate...

EUVD-2026-91648

In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/blame/annotate...

CVE-2026-104026

In Sapling SCM versions prior to v0.2.20260929-102736 , the software allows control characters to be embedded in Git subtree URLs . An attacker can exploit this by providing a maliciously constructed repository; if a target clones this repository, it can trigger code execution during otherwise re...

CVE-2023-33829-POC

CVE-2023-33829-POC SCM Manager XSS...

CVE-2023-33829

CVE-2023-33829: Stored-XSS-on-SCM-Manager-1.60 Résumé Une vulnérabilité a été découverte dans les versions SCM Manager 1.2 = 1.60 qui permet à un attaquant préalablement authentifié avec des permissions d'écriture d'exécuter du code JavaScript dans des champs spécifiques. Cette preuve de concept ...

jenkinsci__workflow-cps-global-lib-plugin_CVE-2022-25174_544-vff04fa68714d

Bibliothèques Partagées pour Pipeline Lorsque vous avez plusieurs jobs Pipeline, vous souhaitez souvent partager certaines parties des scripts Pipeline entre eux pour garder les scripts Pipeline DRY. Un cas d'utilisation très courant est que vous avez de nombreux projets construits de manière...

Blackhat-USA-2022-Materials

Материалы презентаций Black Hat USA 2022 Материалы презентаций для моих докладов на Black Hat USA 2022 Briefing и Arsenal Black Hat USA Briefing - Контроль над исходным кодом: злоупотребление системами управления исходным кодом Описание...

automation-controller: automation-controller: Project scm_branch/scm_refspec argument injection into git during project sync allows arbitrary file read on the sync host (control-plane ServiceAccount token, SECRET_KEY, and DB credentials on control-plane deployments) leading to full AAP and Kubernetes-namespace compromise

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. The Project SCM branch and SCM refspec fields are accepted without rejecting values that begin with a dash and are passed to the git module during project synchronization, where they reach a git checkout/git fetch...

automation-controller: automation-controller: Project scm_branch/scm_refspec argument injection into git during project sync allows arbitrary file read on the sync host (control-plane ServiceAccount token, SECRET_KEY, and DB credentials on control-plane deployments) leading to full AAP and Kubernetes-namespace compromise

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. The Project SCM branch and SCM refspec fields are accepted without rejecting values that begin with a dash and are passed to the git module during project synchronization, where they reach a git checkout/git fetch...

CVE-2026-84711

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. The Project SCM branch and SCM refspec fields are accepted without rejecting values that begin with a dash and are passed to the git module during project synchronization, where they reach a git checkout/git fetch...

EUVD-2026-85560

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The Project scmurl field is not validated against values that begin with a dash and is stored and passed verbatim to the git SCM module. Because the module runs git ls-remote with the URL as a positional argument an...

CVE-2026-84502

A vulnerability exists in the Red Hat Ansible Automation Platform automation-controller where the Project scm_url field lacks validation against values starting with a dash. Because the module passes this URL as a positional argument to the git ls-remote command without a "--" separator, an attac...

PT-2026-97498

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A validation gap exists in the LaunchConfigurationBaseSerializer.scm branch where the validate scm branch check for leading dashes is missing. This allows the sc...

CVE-2026-90397

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Fix NULL dereference in IRQ handler before scm is published In qcomscmprobe, devmrequestthreadedirq is called before smpstorerelease&scm, scm. Two paths can dereference scm before it is published, both causin...

CVE-2026-90397

CVE-2026-90397 affects the Qualcomm SCM (Secure Channel Manager) driver in the Linux kernel . The root cause is a race condition in qcom_scm_probe(): devm_request_threaded_irq() is called before __scm is published via smp_store_release(), allowing two code paths (the IRQ handler and non-atomic SM...

EUVD-2026-82058

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Fix NULL dereference in IRQ handler before scm is published In qcomscmprobe, devmrequestthreadedirq is called before smpstorerelease&scm, scm. Two paths can dereference scm before it is published, both causin...

CVE-2026-90397 firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Fix NULL dereference in IRQ handler before scm is published In qcomscmprobe, devmrequestthreadedirq is called before smpstorerelease&scm, scm. Two paths can dereference scm before it is published, both causin...