7442 matches found
CVE-2026-11107-Insecure-Direct-Object-Reference-with-Predictable-UUIDv1
CVE-2026-11107 – 可预测 UUIDv1 导致的不安全的直接对象引用 程序代码（Python Flask） root@kitploit: idorserver.py - API with UUIDv1 user IDs import uuid, time from flask import Flask, request, jsonify app = Flaskname Generate predictable UUIDv1 based on timestamp + MAC users = struuid.uuid1: "name": "Alice", "data":...
CVE-2023-35078
CVE-2023-35078 漏洞利用工具 root@kitploit: ██████╗ ███╗ ██╗███████╗███████╗ ██████╗ ██╔═████╗████╗ ██║██╔════╝██╔════╝██╔════╝ ██║██╔██║██╔██╗ ██║███████╗█████╗ ██║ ████╔╝██║██║╚██╗██║╚════██║██╔══╝ ██║ ╚██████╔╝██║ ╚████║███████║███████╗╚██████╗ ╚═════╝ ╚═╝ ╚═══╝╚══════╝╚══════╝ ╚═════╝ + CVE-2023-350...
YesWiki < 4.6.4 - Unauthenticated SQL Injection
YesWiki before version 4.6.4 contains an unauthenticated SQL injection vulnerability in the Bazar form-import path. The bnidnature parameter in FormManager::create is concatenated into an INSERT statement without sanitization, allowing unauthenticated attackers to inject arbitrary SQL and read th...
ListingPro < 2.6.1 - Sensitive Data Disclosure
The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the /listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email...
CVE-2026-19478-PoC
CVE-2026-19478 PoC GitLab GraphQL 层中的未认证远程代码注入 ，允许攻击者通过单个精心构造的查询修改或删除公共项目和用户数据 。无需认证，无需用户交互，无需特殊权限。 | ---|--- 严重性| 9.4 严重 — AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H CWE| CWE-94（对代码生成的控制不当 / 代码注入） 影响版本| GitLab CE/EE = 18.2, 18.11.11 · 19.0.8 · 19.1.6 · 19.2.4 修复版本| 18.11.11, 19.0.8, 19.1.6, 19.2.4 披露时间...
WebView2-Cookie-Stealer
ブログ記事 詳細については、こちらのブログ記事をお読みください。 ソースコード このコードは、MicrosoftのWebView2コードを修正したものです。現在のコードは整理され、さらに改善される可能性があります。 デモ 起動例 使用例 使い方 Windows 10および11でテスト済み。 バイナリが実行されると、https://office.com/login が読み込まれます。JavaScriptのキーロガーがすべてのページに注入され、キーストロークが http://127.0.0.1:8080...
CVE-2026-86884
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An app may be able to access sensitive user data...
CVE-2026-84618
A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...
CVE-2026-84587
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data...
CVE-2026-84576
This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...
CVE-2026-84562
A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data...
CVE-2026-65380
An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data...
CVE-2026-65361
This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...
CVE-2026-65345
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data...
CVE-2026-43741
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data...
CVE-2026-43741
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data...
EUVD-2026-78132
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data...
CVE-2026-43741
CVE-2026-43741 is a logic issue in Apple macOS related to improved state management . The flaw allows an app to potentially access protected user data , resulting in a high confidentiality impact (CVSS 5.5, Medium; local vector, user interaction required, no privileges needed). Apple fixed the is...