google-ctf

Google CTF このリポジトリには、2017年以降のGoogle CTFで使用されたほとんどのチャレンジと、それらを実行するために使用できるほとんどのインフラストラクチャが掲載されています。重要 - 201xおよび202xフォルダ内のコードには、修正されていないセキュリティ脆弱性があります。これらは意図的に存在しており、実際の本番インフラストラクチャ上で実行することは安全ではありません。 Google CTFの詳細はこちら: https://security.googleblog.com/2017/06/announcing-google-capture-flag-2017.htm...

PT-2026-46379

Unauthenticated Local File Inclusion in ITactics = 1.0 versions...

PT-2026-46333

Unauthenticated Local File Inclusion in Iona = 1.0.8 versions...

PT-2026-46335

Unauthenticated Local File Inclusion in CopyPress = 1.4.5 versions...

PT-2026-46342

Unauthenticated Local File Inclusion in Fortius = 2.3.0 versions...

PT-2026-46353

Unauthenticated Local File Inclusion in Preservation = 1.10 versions...

PT-2026-46348

Subscriber Privilege Escalation in Genemy = 1.6.6 versions...

PT-2026-46345

Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin = 2.7.2 versions...

PT-2026-46347

Subscriber Broken Access Control in Genemy = 1.6.6 versions...

PT-2026-46387

Name of the Vulnerable Software and Affected Versions WP Meta Sort Posts versions prior to 1.0 Description The WP Meta Sort Posts plugin for WordPress is subject to Cross-Site Request Forgery CSRF, a type of attack where an unauthorized user tricks a victim into performing actions they did not...

PT-2026-46374

Unauthenticated Local File Inclusion in Orpheus = 1.3 versions...

GHSA-7MCQ-F592-PF7V Slice Ring Buffer and Slice Deque contains four unique double-free vulnerabilities triggered through safe APIs

The crate slice-ring-buffer was developed as a fork of slice-deque to continue maintenance and provide security patches, since the latter has been officially unmaintained RUSTSEC-2020-0158. While slice-ring-buffer has addressed some previously reported memory safety issues inherited from its fork...