780275 matches found
SiYuan: Unauthenticated arbitrary SQL execution via searchEmbedBlock (publish mode) : reader-reachable raw statement on read-write handle, cross-notebook read/write
CVE: This vulnerability corresponds to CVE-2026-69084. Summary The /api/search/searchEmbedBlock endpoint passes a client-supplied SQL statement verbatim to the database with no validation. The endpoint is gated by CheckAuth only reachable by the publish RoleReader token, and by the anonymous...
GHSA-VH22-H7HF-WWW7 SiYuan: Unauthenticated arbitrary SQL execution via searchEmbedBlock (publish mode) : reader-reachable raw statement on read-write handle, cross-notebook read/write
CVE: This vulnerability corresponds to CVE-2026-69084. Summary The /api/search/searchEmbedBlock endpoint passes a client-supplied SQL statement verbatim to the database with no validation. The endpoint is gated by CheckAuth only reachable by the publish RoleReader token, and by the anonymous...
CVE-2026-85061
MapLibre GL JS (an interactive vector tile map library for web browsers) is vulnerable to an XSS sanitizer bypass in DOM.sanitize() (src/util/dom.ts). Prior to 6.4.1 , the function iterates elem.attributes as a live NamedNodeMap while removeAttributes() removes entries from the same collection, c...
CVE-2026-85061 MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip
MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize in src/util/dom.ts iterates elem.attributes as a live NamedNodeMap while removeAttributes removes attributes from the same collection, shifting indexes and skipping an adjacent dangerous...
CVE-2026-85061 MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip
MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize in src/util/dom.ts iterates elem.attributes as a live NamedNodeMap while removeAttributes removes attributes from the same collection, shifting indexes and skipping an adjacent dangerous...
EUVD-2026-70734
MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize in src/util/dom.ts iterates elem.attributes as a live NamedNodeMap while removeAttributes removes attributes from the same collection, shifting indexes and skipping an adjacent dangerous...
CVE-2026-85061 MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip
MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize in src/util/dom.ts iterates elem.attributes as a live NamedNodeMap while removeAttributes removes attributes from the same collection, shifting indexes and skipping an adjacent dangerous...
CVE-2026-71429 stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/filter-base.js recompute the full path string from the nesting stack for every checkable token...
CVE-2026-71429
stream-json , a micro-library for streaming JSON/JSONC processing, has a denial-of-service vulnerability in its path filters (pick, ignore, filter, replace) defined in src/core/filters/filter-base.js. Prior to 3.5.0 , these filters recompute the full path string from the nesting stack for every c...
EUVD-2026-70733
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/filter-base.js recompute the full path string from the nesting stack for every checkable token...
CVE-2026-71429 stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/filter-base.js recompute the full path string from the nesting stack for every checkable token...
CVE-2026-71429 stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/filter-base.js recompute the full path string from the nesting stack for every checkable token...
exchange-scanner
Escáner de Microsoft Exchange Server Descripción Esta herramienta escanea varios servicios públicos comunes en un host objetivo para detectar Microsoft Exchange Server e identificar su versión de software si es posible. Para ello, utiliza las siguientes técnicas: Fingerprinting de Outlook Web...
CVE-2023-45866_WIP
h0nkbtexploit Los dispositivos Samsung son vulnerables a una vulnerabilidad crítica de seguridad Bluetooth que permite a un atacante controlar el dispositivo objetivo como si estuviera conectado mediante un teclado Bluetooth, realizando diversas funciones de forma remota según el punto final. Est...
jsluice
jsluice jsluice 是一个 Go 包和命令行工具，用于从 JavaScript 源代码中提取 URL、路径、机密以及其他有趣的数据。 如果你想立即执行这些操作：请查看命令行工具。 如果你想将 jsluice 的功能集成到你自己的项目中：请查看示例，并阅读包文档。 安装 要安装命令行工具，请运行： root@kitploit: ▶ go install github.com/BishopFox/jsluice/cmd/jsluice@latest 要将该包添加到你的项目中，请运行： root@kitploit: ▶ go get...
CVE-2026-7867-disk2root
Filesystem.Mount → Suplantación de as-user → Omisión de Autorización → Montaje en contexto root → LPE Resumen CVE-2026-7867 es una vulnerabilidad de escalación de privilegios local en udisks2 que involucra el método D-Bus Filesystem.Mount, la opción as-user...
zeek-agenttesla-detector
AgentTesla Este es un detector de malware AgentTesla basado en Zeek. PCAPs de prueba: https://app.any.run/tasks/f9421792-7d2c-47d3-90e0-07eb54ae12fa/ https://app.any.run/tasks/db9f075c-7879-4957-923a-f79fac957a2d/ https://app.any.run/tasks/a30789ce-1e1c-4f96-a097-78c34b9fb612/...
CVE-2026-31431
Descripción: Cfail es mi implementación en C++ x86-64 Assembly de CVE-2026-31431 también conocido como Copyfail, sin ninguna dependencia, incluida libc. De hecho, se obtiene un ejecutable universal capaz de ejecutarse de forma independiente en cualquier distribución Linux x86-64, gracias a una...
CVE-2026-42945
Script de evaluación de riesgo real de CVE-2026-42945 Herramienta de evaluación de riesgo local para CVE-2026-42945 Nginx Rift. A diferencia de simplemente decir "la versión afectada es peligrosa", este script verifica capa por capa las tres condiciones que realmente determinan el riesgo, dando u...
CVE-2026-21012-Rust-serde-Deserialization-of-Untrusted-Enum-Variant-Injection-
CVE-2026-21012 – Rust serde Deserialización de Enum No Confiable Inyección de Variantes Código del Programa Rust root@kitploit: // serdevuln.rs - Deserializes an enum from user JSON without validation use serde::Deserialize, Serialize; use serdejson; deriveDeserialize, Debug enum AdminAction...