774803 matches found
the-book-of-secret-knowledge
"La conoscenza è potente, fai attenzione a come la usi! " Una raccolta di liste stimolanti, manuali, cheat sheet, blog, trucchi, one-liner, strumenti CLI/web e molto altro. 📔 Cos'è? Questo repository è una raccolta di vari materiali e strumenti che utilizzo quotidianamente nel mio lavoro. Contien...
CVE-2026-11115-Database-Connection-String-Injection-via-Env-Variable
CVE-2026-11115 – Datenbank-Verbindungsstring-Injection über Umgebungsvariable Programmcode Python root@kitploit: dbconnector.py - Constructs DB connection string from environment import os, psycopg2 def connect: Reads DBURL; attacker can override via environment injection if they control an env v...
GraphQLmap
GraphQLmap GraphQLmap è un motore di scripting per interagire con un endpoint GraphQL a fini di penetration test. Installazione Funzionalità ed esempi Scaricare uno schema GraphQL Interagire con un endpoint GraphQL Eseguire query GraphQL Query di completamento automatico Fuzzing dei campi GraphQL...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
CVE-2026-81028
ZLMediaKit 's downloadFile API in server/WebApi.cpp suffers a root-directory confinement bypass caused by a string prefix comparison that does not enforce directory boundaries. The loader builds each configured root via File::absolutePath("", item, true), which omits the trailing separator; the h...
EUVD-2026-66604
ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not account for directory boundaries. The configuration loader in server/WebApi.cpp builds each root with File::absolutePath"", item, true; because the relative-path argument is emp...
CVE-2026-81028 ZLMediaKit downloadFile Root-Directory Confinement Bypass via Prefix Collision
ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not account for directory boundaries. The configuration loader in server/WebApi.cpp builds each root with File::absolutePath"", item, true; because the relative-path argument is emp...
CVE-2026-80427 bestzip before 2.2.6 and 3.0.x before 3.0.2 Argument Injection via Missing Option Delimiter
bestzip builds the argument list for the system zip utility without separating options from operands. The destination archive path and the caller-supplied source paths are passed to the child process with no -- delimiter between them, so any source entry beginning with a hyphen is interpreted by...
CVE-2026-80427
bestzip (npm package node-bestzip) builds the argument list for the system zip utility without a -- delimiter between options and operands. Any caller-supplied source path beginning with a hyphen is interpreted by zip as an option rather than a file name. Because zip supports -T (test archive) an...
CVE-2026-80427 bestzip before 2.2.6 and 3.0.x before 3.0.2 Argument Injection via Missing Option Delimiter
bestzip builds the argument list for the system zip utility without separating options from operands. The destination archive path and the caller-supplied source paths are passed to the child process with no -- delimiter between them, so any source entry beginning with a hyphen is interpreted by...
EUVD-2026-66601
bestzip builds the argument list for the system zip utility without separating options from operands. The destination archive path and the caller-supplied source paths are passed to the child process with no -- delimiter between them, so any source entry beginning with a hyphen is interpreted by...
CVE-2026-80426
FiftyOne (Voxel51) is vulnerable to stored cross-site scripting in versions before 1.21.0 . The sidebar field-information component at FieldLabelAndInfo/index.tsx passes a dataset field's description to React's dangerouslySetInnerHTML without escaping or sanitizing, making it the only raw render ...
EUVD-2026-66600
FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/src/components/FieldLabelAndInfo/index.tsx passes the description string to React's dangerouslySetInnerHTML, and no layer between storage and render escapes or sanitises it; the...
CVE-2026-80426 FiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field Description
FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/src/components/FieldLabelAndInfo/index.tsx passes the description string to React's dangerouslySetInnerHTML, and no layer between storage and render escapes or sanitises it; the...
CVE-2026-80426 FiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field Description
FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/src/components/FieldLabelAndInfo/index.tsx passes the description string to React's dangerouslySetInnerHTML, and no layer between storage and render escapes or sanitises it; the...
asyncssh has SCP Path Traversal to Arbitrary File Write
| | | |---|---| | Product | asyncssh all versions through 2.23.0 | | Related | CVE-2019-6111 same class in OpenSSH | | Fix | AsyncSSH 2.23.1 | A malicious SSH server can write arbitrary files on the asyncssh SCP client's filesystem by sending filenames containing ../ traversal sequences. The SCP...
GHSA-2WXC-X7RJ-HG8F asyncssh has SCP Path Traversal to Arbitrary File Write
| | | |---|---| | Product | asyncssh all versions through 2.23.0 | | Related | CVE-2019-6111 same class in OpenSSH | | Fix | AsyncSSH 2.23.1 | A malicious SSH server can write arbitrary files on the asyncssh SCP client's filesystem by sending filenames containing ../ traversal sequences. The SCP...
GHSA-JRW6-7X4Q-W25J senaite.core Vulnerable to Eval Injection and Missing Authorization
Summary An unauthenticated remote code execution vulnerability in the SENAITE JSON API allows any network-reachable attacker to execute arbitrary Python on the Zope worker process via a two-request anonymous chain. The /@@API/update route is reachable to anonymous callers and runs eval on...
senaite.core Vulnerable to Eval Injection and Missing Authorization
Summary An unauthenticated remote code execution vulnerability in the SENAITE JSON API allows any network-reachable attacker to execute arbitrary Python on the Zope worker process via a two-request anonymous chain. The /@@API/update route is reachable to anonymous callers and runs eval on...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...