452 matches found
CVE-2023-7028
CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...
can-i-take-over-xyz
å č“£å£°ę ā ļø ę¬ęę”£ēä½č åƹå 容ēę£ē”®ę§äøęæę ä»»ä½č“£ä»»ćę¬é”¹ē®ä» ēØäŗåø®å©å®å Øē ē©¶äŗŗåå¤ęęčµęŗęÆå¦ååØę¼ę“ļ¼ä½äøäæčÆåē”®ę§ćę¬é”¹ē®äø„éä¾čµē¤¾åŗč“”ē®ļ¼å ę¤ļ¼čÆęęčµęŗååØę¼ę“ęē»ē±å®å Øē ē©¶äŗŗååę¼ę“čµéč®”åčŖč”å³å®ć ę¤å¤ļ¼éč¦ęē”®ēęÆļ¼ę¬é”¹ē®ēē®ē并éčÆå«ęę«é²éåƹåē§ęå”å®å ØęŖę½ēē»čæę¹ę³ćēøåļ¼ę¤ē±»ē»čæę¹ę³åŗē“ę„ę„åē»åå½±åēęå”ļ¼ä»„ä¾æéåéå½ęŖę½ć ęåļ¼å¼å¾ę³ØęēęÆļ¼ęäŗę¼ę“čµéč®”ååÆč½ē“ę„ę„åę¬ē©ŗDNSč®°å½ę„åļ¼čäøč¦ę±ęä¾č¢«å©ēØēčÆę®ć ä»ä¹ęÆåååę„ē®”ļ¼ åååę„ē®”ę¼ę“ęÆęå½ęäøŖåååļ¼subdomain.example.comļ¼ęåäøäøŖå·²č¢«å é¤ęē§»é¤ēęå”ļ¼ä¾å¦...
CVE-2023-7028
CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...
POC_CVE-2024-40492
CVE-2024-40492: Stored XSS to ATO Description Stored Cross-Site Scripting XSS is a type of security vulnerability typically found in web applications. It occurs when an attacker is able to inject malicious scripts into a web application, and those scripts are stored on the server. When other user...
AZL-100892 CVE-2026-89576 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadatatakesnap bumps the live superblock refcount and then dmtmshadowblock allocates a new block for the metadata snapshot. If the subsequent dmsmincblock of...
CVE-2026-89576
In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadatatakesnap bumps the live superblock refcount and then dmtmshadowblock allocates a new block for the metadata snapshot. If the subsequent dmsmincblock of...
DEBIAN-CVE-2026-89576
In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadatatakesnap bumps the live superblock refcount and then dmtmshadowblock allocates a new block for the metadata snapshot. If the subsequent dmsmincblock of...
EUVD-2026-76488
In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadatatakesnap bumps the live superblock refcount and then dmtmshadowblock allocates a new block for the metadata snapshot. If the subsequent dmsmincblock of...
CVE-2026-89576
In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadatatakesnap bumps the live superblock refcount and then dmtmshadowblock allocates a new block for the metadata snapshot. If the subsequent dmsmincblock of...
CVE-2026-89576 dm-era: fix shadowed superblock leak on take-snap failure
In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadatatakesnap bumps the live superblock refcount and then dmtmshadowblock allocates a new block for the metadata snapshot. If the subsequent dmsmincblock of...
CVE-2026-89576 dm-era: fix shadowed superblock leak on take-snap failure
In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadatatakesnap bumps the live superblock refcount and then dmtmshadowblock allocates a new block for the metadata snapshot. If the subsequent dmsmincblock of...
CVE-2026-89576
In the Linux kernel 's dm-era (device mapper era) target, metadata_take_snap() can permanently leak a metadata block on each failed snapshot operation. When dm_tm_shadow_block() allocates a new shadow block for the metadata snapshot, a subsequent failure in dm_sm_inc_block() for either writeset_t...
subzy
Subzy Subdomain takeover tool which works based on matching response fingerprints from can-i-take-over-xyz Installation root@kitploit: go install -v github.com/PentestPad/subzy@latest If $GOBIN and $GOPATH are properly set, execute the program as: root@kitploit: $ subzy --help Subdomain takeover...
s3-bucket-take-0v3r
s3-bucket-take-0v3r S3 Bucket Takeover Scanner & Claim Tool š Description S3 Bucket Takeover Scanner & Claim Tool is a Python 2.7-based utility that: 1. Scans domain names to identify potential Amazon S3 bucket takeover vulnerabilities. 2. Automatically claims unregistered S3 buckets and uploads ...
PT-2026-90292
In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadata take snap bumps the live superblock refcount and then dm tm shadow block allocates a new block for the metadata snapshot. If the subsequent dm sm inc block of...
CVE-2023-7028-Account-Take-Over-Gitlab
CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...
CVE-2026-63421
Keystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in packages/core/src/lib/core/queries/resolvers.ts compares the signed take argument directly with graphql.maxTake, allowing a remote unauthenticated GraphQL client to provide a negative take value whose...
GHSA-CQMQ-8755-7XVH Keystone vulnerable to `graphql.maxTake` bypass with negative `take`
Summary The value of graphql.maxTake can be bypassed by providing a negative input. This can be used to exceed the developer's intended graphql.maxTake value, allowing queries to return results in excess of the graphql.maxTake value set. Impact This affects any project relying on graphql.maxTake ...
Keystone vulnerable to `graphql.maxTake` bypass with negative `take`
Summary The value of graphql.maxTake can be bypassed by providing a negative input. This can be used to exceed the developer's intended graphql.maxTake value, allowing queries to return results in excess of the graphql.maxTake value set. Impact This affects any project relying on graphql.maxTake ...
EUVD-2026-64134
Keystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in packages/core/src/lib/core/queries/resolvers.ts compares the signed take argument directly with graphql.maxTake, allowing a remote unauthenticated GraphQL client to provide a negative take value whose...