CVE-2026-60083 SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file tool

SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by the HTTP API. Authenticated administrators can read plaintext publish-mode passwords from data/.siyuan/publishAccess.json and access othe...

CVE-2026-60083 SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file tool

SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by the HTTP API. Authenticated administrators can read plaintext publish-mode passwords from data/.siyuan/publishAccess.json and access othe...

CVE-2026-60083

SiYuan versions before v3.8.0 have an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files normally protected by the HTTP API. An authenticated administrator can read plaintext publish-mode passwords from data/.siyuan/publishAccess.json and acc...

CVE-2026-59809 SiYuan before v3.8.0 Secret Exfiltration via http_request URL

SiYuan before v3.8.0 interpolates secret placeholders into the destination URL parameter of the httprequest MCP tool, allowing attackers to exfiltrate stored secrets. An MCP client can craft a request with an attacker-controlled URL containing secret placeholders to send plaintext secret values t...

CVE-2026-59809

SiYuan before v3.8.0 is affected by a secret exfiltration vulnerability in the http_request MCP tool . The tool interpolates secret placeholders into the destination URL parameter, meaning an MCP client can craft a request with an attacker-controlled URL containing secret placeholders to send pla...

CVE-2026-59809 SiYuan before v3.8.0 Secret Exfiltration via http_request URL

SiYuan before v3.8.0 interpolates secret placeholders into the destination URL parameter of the httprequest MCP tool, allowing attackers to exfiltrate stored secrets. An MCP client can craft a request with an attacker-controlled URL containing secret placeholders to send plaintext secret values t...

EUVD-2026-64267

SiYuan before v3.8.0 interpolates secret placeholders into the destination URL parameter of the httprequest MCP tool, allowing attackers to exfiltrate stored secrets. An MCP client can craft a request with an attacker-controlled URL containing secret placeholders to send plaintext secret values t...

CVE-2026-77988

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...

CVE-2026-77988

A command injection vulnerability exists in the TRENDnet TEW-823DRU (firmware 1.1.02b01), specifically in the nvram_get function of the CLI Configuration Tool . The flaw allows a remote attacker with high privileges to inject and execute arbitrary commands. A proof-of-concept exploit has been mad...

CVE-2026-77988 TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...

EUVD-2026-64252

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...

0dayex-checker

0dayex-checker Zero-Day-Checker für Microsoft Exchange Server Virtual-Patching-Checker...

s3cXSSer

s3cXSSer Questa estensione ti aiuterà a rilevare facilmente vulnerabilità XSS basate su GET/POST in qualsiasi sito web, S3C - XSSER - Estensione per Chrome Come aggiungerla a Chrome o Brave 1- Vai su brave://extensions/ o chrome://extensions/ 2- attiva la Modalità sviluppatore e clicca su Load...

BOF-pack-1

BOF-pack-1 Ein Paket mit nützlichen BOFs für Red-Team-Einsätze GetAppLockerPolicy Gibt die effektive AppLockerPolicy für die Domäne aus TokenElevate Erstellt einen Prozess mit dem Token von winlogonenthält standardmäßig die aktivierte Tcb-Privilege und andere winlogon-spezifische Privilegien...

wtfis

wtfis Passives Hostname-, Domain- und IP-Lookup-Tool für Nicht-Roboter WTF ist das? wtfis ist ein Kommandozeilen-Tool, das mithilfe verschiedener OSINT-Dienste Informationen über eine Domain, einen FQDN oder eine IP-Adresse sammelt. Anders als andere Tools dieser Art ist es speziell für den...

mi-x

Am I Exploitable? Autore: 2022 - Oggi, Rezilion Descrizione: Validazione delle vulnerabilità Sviluppo: Gennaio 2022 - Oggi Documentazione: Vedi sito web, README Introduzione Descrizione 'Am I Exploitable?' è un progetto open source in Python che risponde all'esigenza di verificare se il proprio...

CanaryHunter

Canary Hunter Riepilogo Mentre negli ultimi anni ho eseguito numerosi engagement di red team, mi sono imbattuto più volte nei Canary Tokens, che avrebbero potuto potenzialmente allertare il SOC sulle azioni intraprese. Per questo motivo ho dedicato del tempo ad addentrarmi nella tana del coniglio...

OWASSRF

Questo repository non contiene un README...

sterraxcyl

- S T E R R A - Uno strumento SOCMINT unico per ottenere informazioni su un account Instagram dai suoi following | followers...

InfraHunter

InfraHunter Caccia attivamente alle infrastrutture degli attaccanti filtrando i risultati di Shodan con i dati di URLScan. Requisiti Chiave API di Shodan Chiave API di URLScan python3 -m pip install -r requirements.txt Esempi di utilizzo python3 .\hunter.py -q "http.html:'titan stealer'" -s Shoda...