EUVD-2026-84183

Gladys Assistant before 5.1.0 contains a password reset link poisoning vulnerability that allows unauthenticated remote attackers to obtain valid password reset tokens for any account by exploiting the client-supplied origin parameter in the forgotpassword endpoint without server-side validation...

CVE-2026-93340

Gladys Assistant before 5.1.0 contains a password reset link poisoning vulnerability that allows unauthenticated remote attackers to obtain valid password reset tokens for any account by exploiting the client-supplied origin parameter in the forgotpassword endpoint without server-side validation...

CVE-2026-55210

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin returns an existing account matched by an IdP-asserted email without checking the account's isexternal flag. In deployments using mixed loca...

nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition

Summary POST /api/users/onboarding/finish is registered as anonymous unauthenticated and creates a user with full ReadWrite admin permissions. Because the handler uses a check-then-act TOCTOU pattern between the "onboarding already completed?" check and the user-creation write, with no atomic...

GHSA-PXCX-FV34-X9P5 nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition

Summary POST /api/users/onboarding/finish is registered as anonymous unauthenticated and creates a user with full ReadWrite admin permissions. Because the handler uses a check-then-act TOCTOU pattern between the "onboarding already completed?" check and the user-creation write, with no atomic...

CVE-2026-93340

Gladys Assistant before 5.1.0 contains a password reset link poisoning vulnerability that allows unauthenticated remote attackers to obtain valid password reset tokens for any account by exploiting the client-supplied origin parameter in the forgotpassword endpoint without server-side validation...

CVE-2026-93340 Gladys Assistant < 5.1.0 Password Reset Link Poisoning via forgot_password Endpoint

Gladys Assistant before 5.1.0 contains a password reset link poisoning vulnerability that allows unauthenticated remote attackers to obtain valid password reset tokens for any account by exploiting the client-supplied origin parameter in the forgotpassword endpoint without server-side validation...

CVE-2026-79317

A session invalidation flaw exists in x-ui 0.3.2. The full user object is stored in a client-side signed cookie, and authentication only checks that a user object can be retrieved from the cookie without re-validating against the database or any session version. When an administrator changes the...

CVE-2026-58272

Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Versions prior to 2.4.1 contain an observable timing discrepancy in the login endpoint because authentication attempts for nonexistent accounts return without performing the bcrypt comparison used for...

CVE-2026-55210

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin returns an existing account matched by an IdP-asserted email without checking the account's isexternal flag. In deployments using mixed loca...

CVE-2026-55210 Joplin: SAML SSO account takeover via email-based account linking (missing is_external check in ssoLogin)

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin returns an existing account matched by an IdP-asserted email without checking the account's isexternal flag. In deployments using mixed loca...

EUVD-2026-84176

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin returns an existing account matched by an IdP-asserted email without checking the account's isexternal flag. In deployments using mixed loca...

gohide

gohide 포트 간 트래픽을 AES-GCM 암호화를 사용한 난독화 채널을 통해 터널링합니다. 난독화 모드 세션 쿠키 HTTP GET http-client Set-Cookie 세션 쿠키 HTTP/2 200 OK http-server WebSocket 핸드셰이크 "Sec-WebSocket-Key" websocket-client WebSocket 핸드셰이크 "Sec-WebSocket-Accept" websocket-server 난독화 없음, AES-GCM 암호화 메시지만 사용 none AES-GCM은 위의 각 옵션에 대해 기본적으...

prismor

Prismor Claude Code, Codex, Langchain 및 기타 AI 에이전트 프레임워크/하네스를 위한 런타임 보안. Prismor는 사용자 자신의 정책에 따라 고도로 커스터마이즈할 수 있습니다. 관찰 또는 강제 모드를 통해 로컬 셀프서브 대시보드에서 에이전트 활동을 확인하세요 웹사이트 • Skill로 온보딩 !Trae / Trae CNhttps://d205xtizsu1yjh.cloudfront.net/icons/coding-agents/...

meterssh

도구 이름: MeterSSH 작성자: David Kennedy 회사: TrustedSec 웹사이트: https://www.trustedsec.com 트위터: @TrustedSec, @HackingDave MeterSSH는 셸코드를 가져와 메모리에 주입한 다음 원하는 포트를 SSH를 통해 터널링하여 모든 통신을 정상적인 SSH 연결로 위장하는 방법입니다. 작동 방식은 셸코드를 메모리에 주입한 후, 셸코드가 생성한 포트이 경우 meterpreter를 SSH를 통해 공격자의 머신으로 다시 터널링하는 것입니다. 그런 다음...

AddUser-SAMR

AddUser-SAMR 使用 SAMR API 创建本地管理员，其操作层级低于 net.exe、PowerShell 的 New-LocalUser 或 NetUserAdd API。 需要管理员权限，如果用户已存在，则将其添加到组中，但不会更新密码。 本仓库提供 4 种实现（C、Python、Rust 和 Crystal），但其他语言也有公开版本，例如 @M0nster3 的 C++ 或 @AgeloVito 的 BOF 文件。 此代码是 这篇博客文章 的补充，该文章介绍了创建本地帐户的不同技术。 用法 参数如下： -u, --username - 要创建的用户名（必填） -p,...

setup-ipsec-vpn

English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN Server Auto Setup Scripts Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. An IPsec VPN encrypts your network traffic, so that nobody between you and the VPN server can eavesdrop on your data as it...

emploleaks

EmploLeaks EmploLeaks는 CLI 인터페이스를 갖춘 OSINT오픈 소스 인텔리전스 도구로, 대상 회사 직원에 대한 정보를 발견하고 상호 연관시키기 위해 설계되었습니다. LinkedIn 프로필 수집, 잠재적인 회사 이메일 생성, 유출 데이터베이스내부적으로 ClickHouse 사용에서 유출된 자격 증명 검색, HaveIBeenPwned를 통한 알려진 침해 사항 확인, 회사 인프라 발견, 소셜 미디어에서 직원 프로파일링을 수행할 수 있습니다. 모든 정보는 후속 분석을 위해 로컬 SQLite에 저장됩니다. 기능...

Salsa-tools

root@kitploit: / / / / / / / / \ / / / / / / / / / / / / / / // / // / / / / // / // / //,///,/ // //// Salsa Tools - 벨로타 소스에 담긴 AV 안전 리버스 셸 Salsa Tools는 세 가지 도구를 조합하여, 실행에 PowerShell이 필요 없이 모든 Windows 환경에서 강력한 리버스 셸을 얻을 수 있게 해주는 컬렉션입니다. 최신 탐지 기술AMSI을 회피하기 위해 대부분의 구성 요소는 C으로 작성되었습니다. Salsa...

CVE-2018-6389

CVE-2018-6389 WordPress DoS 攻击 CVE-2018-6389 参考 https://baraktawily.blogspot.jp/2018/02/how-to-dos-29-of-world-wide-websites.html 如何实施 DoS 攻击 启动 WordPress root@kitploit: $ docker-compose up -d Pulling wordpress wordpress:4.9.3... 4.9.3: Pulling from library/wordpress e7bb522d92ff: Pull complete...