CVE-2026-47102-PoC

CVE-2026-47102 — LiteLLM Privilege Escalation via /user/update LiteLLM v1.83.7（v1.83.10 之前版本）的 /user/update 端点允许拥有该端点访问权限的 低权限用户在更新自己的账户时将 userrole 字段修改为 proxyadmin， 实现未授权的权限提升。 Field| Value ---|--- CVE| CVE-2026-47102 CVSS v3.1| 8.8 HIGH — AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE| CWE-863 Incorre...

ipfire-2-25-auth-rce

Ipfire 2-25 core update 156 rce autenticado el sistema ejecuta un comando al instalar cualquier paquete el sistema obtiene 7zip directamente desde el html y comprueba el directorio tmp versión 2.25 - core update 156 ipfire permite ejecutar comandos arbitrarios del sistema operativo como nobody...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.16 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.16 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

python-tuf

用于保护软件更新系统的框架 The Update Framework TUF 是一个用于安全内容交付和更新的框架。它能抵御多种类型的供应链攻击，并具备对妥协的恢复能力。本仓库是用 Python 编写的参考实现 ，旨在符合 TUF 规范 的 1.0 版本。 Python-TUF 提供了以下 API： tuf.api.metadata，一个“底层”API，旨在提供对 TUF 元数据的简便、安全访问，并处理从/到文件的（反）序列化。 tuf.ngclient，一个基于元数据 API 构建的客户端实现。 tuf.repository，一个同样基于元数据 API 构建的仓库库。该模块目前不被视为...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.40 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.40 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.35 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.35 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

vuln-list-update

vuln-list-update Recopila información de vulnerabilidades y guárdala en un formato analizable automáticamente Datos https://github.com/aquasecurity/vuln-list/ Uso $ vuln-list-update -h Usage of vuln-list-update: -target string update target nvd, alpine, alpine-unfixed, redhat, redhat-oval, debian...

shellsploit-framework

我们会在几年后回来。 更新。...

opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...

CVE-2019-0859-1day-Exploit

CVE-2019-0859-1day-Exploit CVE-2019-0859 1day Exploit Sistema operativo objetivo : Windows 7 x64 ServicePack1 7601 Este exploit necesita un entorno actualizado con la actualización de seguridad de marzo de 2019. La actualización anterior no comprobó actualmente. El exploit no es fiable al 100%. A...

CVE-2026-0023-Update-Ownership-PoC

CVE-2026-0023 - Android 更新所有权信任绕过 PoC 一个完整的 Android 实验室环境，用于重现和研究 CVE-2026-0023。 此仓库演示了 CVE-2026-0023 如何允许普通安装程序影响仅应由系统控制的内部 Android 安装标志，从而导致应用程序更新期间 Android 的“更新所有权”警告被抑制。 该项目包含三个 Android 应用程序，它们模拟了一个真实的更新所有权工作流程，并提供了一个可重现的环境来观察有漏洞的行为。 概述 Android 引入了更新所有权，以帮助应用程序、应用商店和企业环境维护可信的更新链。...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

PloitKit

PloitKit 黑客的工具箱 PloitKit 是一款基于 Python 的 GUI 工具，旨在成为所有其他软件的一站式解决方案。我曾面临这样的问题：当我需要切换到不同的系统，或者丢失了我的 U 盘时，不得不去谷歌搜索每个工具并下载它们。因此，我决定创建这样一个工具，只需点击再点击，工具就在眼前。 我已在此工具中添加了超过 900 个工具，但目前只有 400+ 个可用，以测试该工具是否有效。如果它运行良好，我将向所有人开放。 特性 1. 自动更新 — 无需每次手动到这里检查新版本。 2. 更好的错误处理 — 有些工具可能导致错误，因此我添加了此选项。 3. 图形界面 — 只需点击再点击...

bettercap

Join the project community on our server! bettercap is a powerful, easily extensible and portable framework written in Go which aims to offer to security res...

CVE-2026-35029-PoC

CVE-2026-35029 — LiteLLM /config/update 越权访问漏洞 Broken Access Control LiteLLM 的 /config/update 端点未检查调用者的角色权限 。任何持有有效 API Key 的已认证用户（无需管理员权限）均可修改代理配置，注册恶意 Pass-Through 端点以实现 环境变量窃取、任意文件读取、远程代码执行 等攻击。 Field| Value ---|--- CVE| CVE-2026-35029 CVSS v4.0| 8.7 HIGH —...

COMahawk

COMahawk 权限提升：利用 CVE-2019-1405 和 CVE-2019-1322 视频演示 https://vimeo.com/373051209 使用方法 编译或从 Release 下载 https://github.com/apt69/COMahawk/releases 1. 运行 COMahawk.exe 2. ??? 3. 希望成功 或者 1. COMahawk.exe "自定义要运行的命令" 例如：COMahawk.exe "net user /add test123 lol123 &" 2. ??? 3. 希望成功 注意事项 MSDN 提到只有 1803 到 19...

pwninit

pwninit A tool for automating starting binary exploit challenges Features Set challenge binary to be executable Download a linker ld-linux.so. that can segfaultlessly load the provided libc Download debug symbols and unstrip the libc Patch the binary with patchelf to use the correct RPATH and...

CVE-2026-102264

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

CVE-2026-102264

A cross-site scripting (XSS) vulnerability exists in the Edit Profile Feature of mwasikz robo-cafe-rms (affected up to commit 228c44a02823f04e85db32b7137809a2856148fc). The flaw is located within an unknown function in the frontend/update-account.php file, where manipulating the Name , Address , ...

EUVD-2026-88640

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...