usbsas

usbsas es una herramienta y framework libre y de código abierto GPLv3 para leer de forma segura dispositivos de almacenamiento masivo USB no confiables. Visión general Siguiendo el concepto de defensa en profundidad y el principio de mínimo privilegio, el objetivo de usbsas es reducir la superfic...

SOGo_web_mail-vulnerability-CVE-2025-50340

CVE-2025-50340: Insecure Direct Object Reference IDOR vulnerability in SOGo Webmail CVE ID: CVE-2025-50340 Reporter: Milad Seddigh Product: SOGo Affected Versions: v5.6.0 Impact: Insecure Direct Object Reference IDOR vulnerability → Allows the user to send emails on behalf of another user. Summar...

CVE-2022-47132

CVE-2022-47132 Academy LMS history.pushState'', '', '/' input type="submit" value="...

CVE-2020-35847_CVE-2020-35848

Cockpit CMS NoSQL Injection CVE-2020-35847, CVE-2020-35848 Cockpit CMS before version 0.11.2 is vulnerable to a NoSQL Injection vulnerability in the /auth/resetpassword and /auth/newpassword that allows extraction of password reset tokens which allow for user details enumeration as well as passwo...

CVE-2026-65660-Poc

MS SharePoint CVE-2026-65660 - Malicious Register Directive Code Injection Exploit Description This repository provides a production-ready exploit for CVE-2026-65660 Improper Control of Generation of Code, CWE-94 in Microsoft SharePoint Server. The vulnerability stems from unescaped quote injecti...

CVE-2021-3490-POC

CVE-2021-3490 Credits to https://github.com/chompie1337 Steps to Reproduce Install the ubuntu-20.04.6-live-server-amd64.iso from Ubuntu Releases, and install into the virtual machine. wget https://releases.ubuntu.com/20.04/ubuntu-20.04.6-live-server-amd64.iso After installing ISO, fully install t...

CVE-2021-4191_Exploits

CVE-2021-4191Exploits pip install python-graphql-client Usage: python3 gitlabenum.py --rurl http://10.0.0.6/api/graphql Copyrights: https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/...

CVE-2018-15131

Zimbra Collaboration User Enumeration Script CVE-2018-15131 How to use The argument --host must be the hostname or IP address of Zimbra Collaboration Web Application root page, and --userlist an list of usernames to check against it. root@kali ./cve-2018-15131-user-enum.py --host...

kratos

Chat · Discusiones · Boletín informativo · Documentación · Probar Ory Network · Empleos Ory Kratos es un sistema de gestión de identidad y usuarios API-first para aplicaciones nativas de la nube. Centraliza los flujos de inicio de sesión, registro, recuperación, verificación y gestión de perfiles...

CVE-2026-107761

The Postiz platform contains a vulnerability where several endpoints return complete database rows, exposing sensitive secrets. Specifically, the public API's channel delete endpoint returns the platform access and refresh tokens, allowing third-party OAuth apps with delete permissions to access ...

EUVD-2026-97100

Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not meant to receive. The public API's channel delete returns the deleted integration row, including the channel's platfor...

Starlink-FI

Starlink User Terminal Modchip This repository accompanies the talk titled "Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal". A slide deck is available here, a recording of the talk should be available soon. The talk covers how we managed to execu...

Estudo-de-Caso-CVE-2024-21413

CVE-2024-21413 — Moniker Link 🔗💀 Microsoft Outlook RCE + NTLM Credential Leak ⚠️ Legal Notice: This repository is exclusively for educational and security research purposes. All demonstrations were carried out in controlled and isolated environments. The use of these techniques against systems...

CVE-2026-108904

pH7Builder pH7 Social Dating CMS before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController::users and user return unfiltered database rows. Attackers holding a valid private API key can retrieve bcrypt password...

CVE-2026-108875

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGroup handler that allows any authenticated user to modify user group membership. Low-privileged attackers can send POST requests with arbitrary user ids and a groupId to add any users to...

CVE-2026-108874

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or remove department heads by calling PUT /sys/user/changeDepartChargePerson. Low-privileged attackers can supply arbitrary userId, department id, and status values to make any user...

CVE-2026-108873

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify any department by calling PUT /sys/user/doUpdateDepartInfo. Attackers can supply a department id to rename or re-parent it and replace or remove its department heads...

CVE-2026-108876

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated user to cancel user resignations. Low-privileged attackers can supply user ids and a tenantId parameter or X-Tenant-Id header to restore ended,...

CVE-2026-108872

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler of SysUserController that allows any authenticated user to edit user department assignments. Low-privileged attackers can send PUT requests to /sys/user/batchEditUsers with arbitrary user and...

CVE-2024-50633

CVE-2024-50633 🏆 - CVE-2024-50633 : Vulnerabilidad BOLA en Indico Descubrió y reportó una vulnerabilidad BOLA en Indico. 📜 Descripción de CVE-2024-50633 Una vulnerabilidad de Autorización de Objetos a Nivel Roto BOLA en Indico v3.2.9 permite a atacantes acceder a información sensible de usuarios...