CVE-2025-63666

CVE-2025-63666 — Tenda AC15 Краткое описание Прошивка Tenda AC15 версии V15.03.05.18multi выдает аутентификационный cookie в форме password= и возвращает его без флагов HttpOnly, Secure или SameSite, что приводит к раскрытию хеша пароля на стороне клиента. Суффикс с низкой энтропией выступает в...

CVE-2023-49103

CVE-2023-49103 PoC para o CVE-2023-49103 Visão geral Este script Python foi projetado para processar eficientemente uma grande lista de URLs para verificar a presença da saída do phpinfo. Ele usa multi-threading para lidar com um grande número de URLs simultaneamente, acelerando significativament...

CreateHiddenAccount

CreateHiddenAccount 创建隐藏账号 中文 | EN Tool Introduction There are two common ways to create a hidden account. One is to add the $ sign directly after the user name to create it, and the other is to use the registry to clone the user to create. . So I wondered if I could implement the process of...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

CVE-2025-46080

बग लेखक: yggcwhat प्रभावित संस्करण: Huocms विक्रेता: https://huocms.com/ स्रोत कोड पता: https://gitee.com/digital-flag/huocms भेद्यता फ़ाइल: AttachmentController.php प्रभावित संस्करण： HuoCMS - controller -backend - AttachmentController.php:editFileUrl "editFileUrl" विधि में कॉल किए गए "copy"...

m4ngl3m3

m4ngl3m3! Quick Installation: root@kitploit: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py Basic Help: root@kitploit: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE...

gradient-untangler

gradient-untangler Ataques de sufixo white-box locais em modelos de pesos abertos que você mantém em disco. | ---|--- Importação| gradjail CLI| gradient-untangler O que é| Gradientes reais em pesos locais. GCG, PEZ e busca de sufixo discreta/contínua relacionada. Registro de pesos brutos e...

Exponentiated-Gradient-Descent-LLM-Attack

Modifica il file Readme. Questo è un progetto che esplora il metodo di ottimizzazione Exponentiated Gradient Descent per produrre suffissi avversari con cui attaccare modelli linguistici di grandi dimensioni allineati. Il metodo si è dimostrato efficace sul modello chat Llama-2 con 7 miliardi di...

CVE-2026-54433

CVE-2026-54433: XSS memorizzato nelle email in testo semplice di Roundcube Questo repository contiene una prova di concetto Python configurabile per CVE-2026-54433 , una vulnerabilità di cross-site scripting memorizzato nel renderer di email in testo semplice di Roundcube. Un mittente non...

CVE-2026-75830

grav-plugin-api getgrav/grav-plugin-api versions = 1.0.0-beta.10 and = 1.0.14 contain a path traversal vulnerability in the PagesController::batchCopy method. An incomplete fix for GHSA-qjq4-jp55-4mx2 left the user-controlled 'suffix' parameter via POST /api/v1/pages/batch unvalidated. An...

EUVD-2026-60594

grav-plugin-api getgrav/grav-plugin-api versions = 1.0.0-beta.10 and = 1.0.14 contain a path traversal vulnerability in the PagesController::batchCopy method. An incomplete fix for GHSA-qjq4-jp55-4mx2 left the user-controlled 'suffix' parameter via POST /api/v1/pages/batch unvalidated. An...

CVE-2026-75830 grav-plugin-api before 1.0.15 Path Traversal via batchCopy

grav-plugin-api getgrav/grav-plugin-api versions = 1.0.0-beta.10 and = 1.0.14 contain a path traversal vulnerability in the PagesController::batchCopy method. An incomplete fix for GHSA-qjq4-jp55-4mx2 left the user-controlled 'suffix' parameter via POST /api/v1/pages/batch unvalidated. An...

CVE-2026-74443

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: bound DMA command body size against suffix pointer vmwcmddma locates the DMA suffix at unsigned long &cmd-body + header-size - sizeofsuffix without checking that header-size is large enough to contain both cmd-body an...

UBUNTU-CVE-2026-74443

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: bound DMA command body size against suffix pointer vmwcmddma locates the DMA suffix at unsigned long &cmd-body + header-size - sizeofsuffix without checking that header-size is large enough to contain both cmd-body an...

CVE-2026-74443 drm/vmwgfx: bound DMA command body size against suffix pointer

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: bound DMA command body size against suffix pointer vmwcmddma locates the DMA suffix at unsigned long &cmd-body + header-size - sizeofsuffix without checking that header-size is large enough to contain both cmd-body an...

CVE-2026-73845

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckangetmqaquality and ckangetmqaqualitydetails tools in src/tools/quality.ts use isValidMqaServer to validate the serverurl parameter with a prefix-only regular expression for dati.gov.it, allowing suffix-host an...

CVE-2026-73845

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckangetmqaquality and ckangetmqaqualitydetails tools in src/tools/quality.ts use isValidMqaServer to validate the serverurl parameter with a prefix-only regular expression for dati.gov.it, allowing suffix-host an...

EUVD-2026-58725

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckangetmqaquality and ckangetmqaqualitydetails tools in src/tools/quality.ts use isValidMqaServer to validate the serverurl parameter with a prefix-only regular expression for dati.gov.it, allowing suffix-host an...

GHSA-47PJ-3JCM-6WHG LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores

Summary The Postgres and SQLite stores persist hierarchical namespaces as a dot-joined string "memories", "alice" becomes memories.alice and scoped reads by matching that string with LIKE '%'. Because LIKE has no notion of the . separator, a scoped search or listnamespaces also matched sibling...

CVE-2026-69198

A flaw was found in ip-address, a JavaScript library for parsing and manipulating IP addresses. By appending a Classless Inter-Domain Routing CIDR suffix to an IP address, an attacker can bypass the library's special-use classification methods. This misclassification can lead applications, such a...