CVE-2026-55255-Lab

CVE-2026-55255 - Langflow IDOR in /api/v1/responses Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-55255, an Insecure Direct Object Reference IDOR vulnerability affecting Langflow's OpenAI-compatible Responses API. Langflow is an open-source...

bluesnoop

bluesnoop A simple Bluetooth Low Energy BLE sniffer using Python and the Bleak library Features Identify nearby device UUIDs and names Persistent tracking of first and last appearance Translation of cryptic model IDs Export intelligence for external analysis Demo Gallery Timed Snoop --- Limitless...

CVE-2025-63408

CVE-2025-63408 path-traversal.py: A re-implementation of https://github.com/eric-m-holub/double-agent/blob/main/doubleagent.py Uses uuids as part of the requested filename to avoid remote server crashing after first path traversal exploitation. run.py / shell.py: wrapper on top of podman to run...

RDL-detect

Remote Desktop Licensing Service Detection Reference https://github.com/fortra/impacket/blob/master/examples/rpcdump.py Enumerate open services via MSRPC, and determine whether Terminal Server Licensing is included based on UUID: 3d267954-eeb7-11d1-b94e-00c04fa3080d Usage: python3 rdl-detect.py 目...

bluffy

Bluffy Convert shellcode into ✨ different ✨ formats! Bluffy is a utility which was used in experiments to bypass Anti-Virus products statically by formatting shellcode into realistic looking data formats. Proof-of-concept tools, such as 0xBoku's NinjaUUIDRunner and ChoiSG's UuidShellcodeExec,...

CVE-2026-24134-PoC

CVE-2026-24134-PoC Overview This repository contains the Proof of Concept PoC for CVE-2026-24134 , a Broken Object Level Authorization BOLA vulnerability in StudioCMS. Contents cve202624134poc.py - Python exploitation script Prerequisites StudioCMS=0.1.1 pip install requests colorama Quick Start...

CVE-2025-22828

CVE-2025-22828 📜 Description Apache CloudStack 4.16.0 and later versions have a broken access control issue that allows users with knowledge of resource UUIDs to read or add comments annotations on resources they are not authorized to access. UUIDs can be exposed in various parts of the...

FUD-UUID-Shellcode

FUD-UUID-Shellcode Introduction Another shellcode injection technique using C++ that attempts to bypass Windows Defender using XOR encryption sorcery and UUID strings madness :. How it works Shellcode generation Firstly, generate a payload in binary format using either Havoc, CobaltStrike or...

Directus - Unauthenticated File Modification

Directus versions from 10.8.0 before 11.9.3 allow unauthenticated attackers to modify the contents of an existing file when a valid file UUID is known. The PATCH /files/id endpoint processes multipart file uploads without proper authentication, allowing file content replacement despite returning ...

vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine

Summary Multimodal content parts imageurl, videourl, inputaudio, ... accept a user-supplied uuid field that vLLM uses verbatim as the item's cache identity mmhash. The two frontend/engine processor caches P0 "sender" cache in the API process, P1 "receiver" cache in the EngineCore process are...

GHSA-P92P-RXJ5-7P2X vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine

Summary Multimodal content parts imageurl, videourl, inputaudio, ... accept a user-supplied uuid field that vLLM uses verbatim as the item's cache identity mmhash. The two frontend/engine processor caches P0 "sender" cache in the API process, P1 "receiver" cache in the EngineCore process are...

EUVD-2026-107001

vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine...

CVE-2026-77812

CVE-2026-77812 — DJI Drone Cleartext BLE Transmission of Wi-Fi PSK and Session UUID POC CVE record: https://vulners.com/cve/CVE-2026-77812 NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77812 Description DJI Drone expose a DUML control channel over Bluetooth. Every message on that channel — in bo...

CVE-2019-16113-Dockerfile

Bludit Directory Traversal Vulnerability CVE-2019--16113 Bludit-3.9.2 is a lightweight CMS that only requires a LAMP environment to run. During image upload, Bludit checks the file extension but does not delete the file in time; an attacker can also achieve directory traversal by controlling the...

CVE-2026-55835

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.39.4, an unauthenticated user can trigger Lookyloo's "report a capture" email on demand this is expected. The /json//report API endpoint CaptureRepor...

CVE-2026-55835

The Lookyloo web interface (prior to version 1.39.4 ) is vulnerable to a potential Denial of Service (DoS) on a connected MISP instance . The root cause is a parameter mismatch in the /json//report API endpoint (CaptureReport ), where the email and comment parameters incorrectly overwrite the as_...

EUVD-2026-108582

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.39.4, an unauthenticated user can trigger Lookyloo's "report a capture" email on demand this is expected. The /json//report API endpoint CaptureRepor...

CVE-2026-55835 Lookyloo: Potential sub-system DoS due to parameter missmatch in notification

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.39.4, an unauthenticated user can trigger Lookyloo's "report a capture" email on demand this is expected. The /json//report API endpoint CaptureRepor...

PT-2026-121749

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.39.4, an unauthenticated user can trigger Lookyloo's "report a capture" email on demand this is expected. The /json//report API endpoint CaptureRepor...

DEBIAN-CVE-2026-115373

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization vulnerability in GET /1.0/operations/uuid that lets project-restricted clients read operations in other projects. Attackers holding a restricted certificate and a known operation UUID can retrieve...