rakkess

rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...

neko

n.eko Neko에 오신 것을 환영합니다. Neko는 Docker에서 실행되며 WebRTC 기술을 사용하는 자체 호스팅 가상 브라우저입니다. Neko는 완전한 기능의 브라우저를 가상 환경에서 실행 할 수 있게 해주는 강력한 도구로, 어디서나 안전하고 비공개로 인터넷에 접속 할 수 있는 능력을 제공합니다. Neko를 사용하면 웹을 탐색하고, 애플리케이션을 실행 하며, 일반 브라우저에서와 마찬가지로 다른 작업을 수행할 수 있습니다. 이 모든 것이 안전하고 격리된 환경 에서 이루어집니다. 웹 애플리케이션을 테스트하려는 개발자, 안...

WordPress Restrict User Access <= 2.5 - Cross-Site Scripting

WordPress Restrict User Access – Membership Plugin with Force versions before 2.6 is vulnerable to Reflected Cross-Site Scripting via the 'ruasection' parameter in the admin level edit page. id: CVE-2024-29138 info: name: WordPress Restrict User Access = 2.5 - Cross-Site Scripting author: Shivam...

Debian dla-4813 : iscsiuio - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4813 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4813-1 [email protected]...

CVE-2025-46818

CVE-2025-46818 – Redis Lua サンドボックスのクロスユーザーエスケープ 非推奨のLua APIと変更可能なメタテーブルを介した、Redis 8.2.1におけるサンドボックスエスケープ。 概要 Redis 8.2.1は、非推奨のLua組み込み関数（getfenv、setfenv、newproxy）をスクリプトに公開したままにしており、基本型のメタテーブルをロックできていません。攻撃者は共有メタテーブルにメソッドを注入し、特権環境を取得して、別のユーザーの権限でコマンドを実行できます。 環境 Redisサーバー 8.2.1（または8.2.2より前の脆弱性のあるリリース...

CVE-2026-74864

sogoyhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a verified user without performing password validation. Since Nginx does not strip this header, any client can supply it arbitrarily and gain access as any user,...

CVE-2026-54519

CVE-2026-54519 ai-agent-automation에서 메모리 API에 소유권 검사가 누락되어 교차 사용자 메모리 읽기 및 삭제가 가능했습니다. 기본 권고: GHSA-qv97-83w4-ff86 연구자 크레딧: @chaitanyagarware 한눈에 보기 필드| 값 ---|--- CVE| CVE-2026-54519 GHSA| GHSA-qv97-83w4-ff86 프로젝트| vmDeshpande/ai-agent-automation 패키지| backend 생태계| npm 심각도| 높음 CVSS| 8.8,...

Cacti 1.2.24 - SQL Injection

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graphview.php. Since guest users can access graphview.php without authentication by default, if guest users are being utilized in an enabled state, there...

MCP Atlassian: Insecure File Permissions on OAuth Token Storage

Summary The OAuth token fallback file storage in OAuthConfig.savetokenstofile creates token files containing access tokens, refresh tokens, and cloud IDs with default filesystem permissions typically 0644 on Linux, world-readable. Any local user on a shared system can read these files to obtain...

Linux Distros Unpatched Vulnerability : CVE-2026-90462

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. When configured with the LDAP access provider and ldapaccessorder including ppolicy or lockout, a fail-open condition in the LDAP...

CVE-2026-77520 MaxKB: Homepage ranking leaks application IDs that workflow application-nodes can use to invoke another user's application

MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal user in the same workspace can obtain another user's applicationid from the homepage application question-ranking endpoint when the published victim application has ranking activity in the selected date range...

CVE-2026-94497

jshERP through 3.6 fails to validate object ownership in by-id info, update, and delete endpoints across multiple resource types. Authenticated users can read, modify, and delete other users' business objects by submitting direct object identifiers without authorization checks...

CVE-2026-92918

admin3 through 3.0.0 discloses user session tokens in the audit log event body when publishing UserLoggedIn domain events. The root cause is that DefaultSessionService persists the session token into the log entry, making it retrievable via the GET /logs endpoint by any user with log:view permiss...

CVE-2026-92918 admin3 through 3.0.0 Session Token Disclosure via Audit Log

admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events. Attackers with log:view permission can read the JSON response from the GET /logs endpoint to harvest session tokens and replay them as bearer credentials for full user access...

CVE-2026-92918 admin3 through 3.0.0 Session Token Disclosure via Audit Log

admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events. Attackers with log:view permission can read the JSON response from the GET /logs endpoint to harvest session tokens and replay them as bearer credentials for full user access...

CVE-2024-11222

GitLab CE/EE is affected by a Time-of-check Time-of-use (TOCTOU) race condition in pipeline creation, impacting versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 . Under certain conditions, a developer user could perform actions in the context of another user's merge re...

CVE-2026-76855 Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the audit endpoints handled by l7webauthlogdumpcgi.c, auditgetcgi.c, and moddispatchauth/plan.json. Attackers can query these audit components to obtain other users' session and browsing history data...

CVE-2026-65359

An out-of-bounds read vulnerability exists in several Apple products, including iOS , iPadOS , macOS , tvOS , visionOS , and watchOS . The root cause was addressed through improved bounds checking. A local user may be able to exploit this issue to cause unexpected system termination or read kerne...

CVE-2026-12763

IBM Langflow OSS (versions 1.0.0 through 1.11.5) is affected by improper cache key isolation in the MCP Tools component . The component caches discovered MCP tools in a shared process-local cache keyed only by the MCP server display name, without incorporating the user, session, flow, or resolved...

CVE-2026-54447 garminconnect: Insecure Permission Assignment for Garmin OAuth Token Store

garminconnect is a Python 3 API wrapper for Garmin Connect that retrieves statistics and manages activities. Prior to 0.3.5, garminconnect/client.py Client.dump creates the OAuth token directory and garmintokens.json without explicit owner-only modes, so a permissive umask such as 022 can leave t...