CVE-2026-104893 Plane: Improper validation allows arbitrary modification of API token rate limits

Plane is an open-source project management tool. Prior to 1.4.0, GET /api/users/api-tokens/ allows an authenticated user to retrieve API-token records, while PATCH /api/users/api-tokens/tokenid/ allows the user to modify the token's allowedratelimit field without server-side validation or a maxim...

CVE-2026-104893 Plane: Improper validation allows arbitrary modification of API token rate limits

Plane is an open-source project management tool. Prior to 1.4.0, GET /api/users/api-tokens/ allows an authenticated user to retrieve API-token records, while PATCH /api/users/api-tokens/tokenid/ allows the user to modify the token's allowedratelimit field without server-side validation or a maxim...

NotCVE-2026-0010

요약 취약점: Barrier 데몬 TCP 포트 24801을 통한 인증되지 않은 IPC 로컬 권한 상승으로 SYSTEM 권한 획득 공급업체: debauchee Barrier 프로젝트 제품: Barrier 2.4.0 최종 릴리스, 2021-11-01 CWE: CWE-306: 중요 기능에 대한 인증 누락 설명 Barrier의 Windows 서비스barrierd.exe는 LocalSystem으로 설치되어 실행되며, 127.0.0.1:24801에 인증, 클라이언트 신원 검증, 접근 제어 없이 TCP IPC 제어 서버를 바인딩합니다. 권...

CVE-2026-86671

In Eclipse Che versions 7.29.0 and later , the GET /api/scm/resolve and POST /api/factory/resolver endpoints are vulnerable to Server-Side Request Forgery (SSRF) . The application passes attacker-controlled URLs to URLFetcher.fetch() without an allow-list for schemes or hosts. Consequently, an au...

CVE-2026-86671

In Eclipse Che versions 7.29.0 and later, the GET /api/scm/resolve and POST /api/factory/resolver endpoints pass an attacker-controlled URL to URLFetcher.fetch, which calls new URLurl.openConnection with no scheme or host allow-list and returns the response body to the caller. Any authenticated C...

CVE-2026-4444-JWT-Algorithm-Confusion-via-kid-Injection

CVE-2026-4444 – kid 주입을 통한 JWT 알고리즘 혼동 프로그램 코드 Node.js 서버 + Python 익스플로잇 // jwtserver.js - Vulnerable JWT verification server const express = require'express'; const jwt = require'jsonwebtoken'; const jwksClient = require'jwks-rsa'; const axios = require'axios'; const app = express;...

CVE-2026-102777

The Joomla Extension - svenbluege.de Event Gallery extension (versions

CVE-2026-102777 Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos...

CVE-2026-102777 Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos...

EUVD-2026-92472

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos...

[SECURITY] [DLA 4822-1] ruby-oauth2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4822-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley October 05, 2026 https://wiki.debian.org/LTS -...

CVE-2025-5777-Exploit

CVE-2025-5777 익스플로잇 툴 🔥 Citrix NetScaler VPN에 영향을 미치는 취약점 CVE-2025-5777 을 시연하고 분석하기 위해 설계된 강력한 교육용 도구 입니다. 이 프로젝트는 GO-TO CVE 이니셔티브의 일부입니다. ⚠️ 교육 목적으로만 사용하세요. 소유하지 않았거나 테스트 허가를 받지 않은 시스템에서는 사용하지 마세요. 📌 소개 이 스크립트는 취약한 Citrix VPN 엔드포인트에 의해 노출된 민감한 내부 토큰, 내부 IP 및 숨겨진 엔드포인트 경로를 탐지하고 추출하려고 시도합니다. 학생, 보안...

CVE-2025-29824-Exploit

🚨 CVE-2025-29824 Эксплойт: Цепочка программы-вымогателя PipeMagic 📌 Обзор критической уязвимости Уязвимость повышения привилегий в Windows CLFS → Перехват привилегий SYSTEM Эксплуатируется в активных атаках программ-вымогателей группой Storm-2460 🖥️ Затронутые системы Развернуть список систем 🧩...

recipe-blog-encoding

recipe-blog-encoding !WARNING Этот проект полностью создан с помощью vibe-coding вероятно, частично плагиачен из этого репозитория, и автор — дурачок , которому просто показалась забавной эта идея Используйте SEO-игривые преамбулы рецептов как средство для кодирования секретных сообщений хотя...

MetabaseRceTools

MetabaseRceTools CVE-2023-38646 Metabase RCE инструмент CVE-2023-38646 Графический инструмент для эксплуатации RCE Модуль проверки Введите указанный URL для получения неавторизованного токена Выполнение команд Этот модуль сначала требует выполнения модуля проверки для получения токена JarLocation...

f5_rce_poc

Использование python3 f5rce.py -u указать целевой URL -f массовая проверка файлов -c выполнить команду -s/--ssrf получить токен через SSRF для выполнения команды Результат показан ниже: python3 f5rce.py -u 127.0.0.1 --ssrf После выполнения команды введите exit для выхода PS: Вывод недостаточно...

CVE-2023-48084

CVE-2023-48084 POC의 잘못된 구문을 수정합니다. 주로 잘못된 import와 잘못된 API 함수 참조를 수정합니다. APIToken 검색을 자동화하고, 토큰을 변수에 저장한 후 수정된 POC로 파이프합니다. https://github.com/Hamibubu/CVE-2023-48084 어떤 이유로 작동하지 않으면 위에 링크된 의존성의 소스를 diffcheck하고 내 변경 사항을 되돌리십시오. 설치 git clone https://github.com/bucketcat/CVE-2023-48084 cd...

CVE-2020-17103

🛡️ MiniPlasma — CVE-2020-17103 Zero-Day локального повышения привилегий в Windows Превращение файлов-заглушек в доступ SYSTEM 📋 Обзор MiniPlasma — мощный эксплойт локального повышения привилегий , нацеленный на CVE-2020-17103 в драйвере мини-фильтра облачных файлов Windows cldflt.sys. Он позволяет...

FOSKiller

███████╗ ██████╗ ███████╗██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██╔════╝██╔═══██╗██╔════╝██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ █████╗ ██║ ██║███████╗█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██╔══╝ ██║ ██║╚════██║██╔═██╗ ██║██║ ██║ ██╔══╝ ██╔══██╗ ██║ ╚██████╔╝███████║██║ ██╗██║███████╗███████╗███████╗██║ ██║...

CVE-2026-105396

Heym before v0.0.112 contains a token leakage vulnerability in buildpublicbaseurl that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to...