CVE-2026-47101-PoC

CVE-2026-47101 — LiteLLM Privilege Escalation via /key/generate + /user/update LiteLLM v1.82.6（v1.83.14 之前版本）的 /key/generate 端点允许低权限的 internaluser 请求带通配符路由 "/" 的 API key，随后通过 /user/update 端点将自身角色提升为 proxyadmin，实现未授权的权限提升。 Field| Value ---|--- CVE| CVE-2026-47101 CVSS v3.1| 8.8 HIGH —...

LEAKEY

LEAKEY 🔑 LEAKEY 是一个用于验证渗透测试和红队演练中发现的泄露 API 令牌/密钥的工具。 该脚本对漏洞猎手非常有用，可用于验证和确定泄露凭据的影响。 LEAKEY 使用位于 /.leakey/signatures.json 的基于 JSON 的签名文件。 LEAKEY 的理念是使其高度可定制，并能轻松添加新发现的服务/检查项。 LEAKEY 通过签名文件加载服务/检查列表，如果您想添加更多检查项/服务，只需将其附加到 signatures.json 文件中。 要求： jq 安装： curl...

CVE-2026-56596 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

EUVD-2026-93373

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

CVE-2026-56596 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

CVE-2026-56596

The HCL BigFix Service Management software is affected by an Improper Input Validation vulnerability (CWE-20). This flaw could allow an attacker to provide malformed or unexpected data, potentially leading to processing errors , business logic bypasses , and unintended application behavior . The ...

xss_vulnerability_challenges

XSS Vulnerability Scenarios challenges This repository is a Dockerized php application containing some XSS vulnerability challenges. The ideas behind challenges are: Javascript validation bypass html entities bypass WAF bypass Black-list validation bypass Basic XSS validation bypass Double encode...

keycloak-services: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. Thi...

netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin bailiwick of CNAME records in DNS...

keycloak-services: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. Thi...

CVE-2024-54819

CVE-2024-54819 Lea más detalles en: https://www.partywave.site acerca de CVE-2024-54819 Solicitud POST para iniciar sesión El atacante debe estar autenticado POST /librarian/index.php/authentication HTTP/1.1 Host: 127.0.0.1 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:128.0 Gecko/20100101...

CVE-2024-26229-lpe

CVE-2024-26229 CWE-781: Validación de direcciones incorrecta en IOCTL con código de control de E/S METHODNEITHER en el controlador csc.sys...

netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin bailiwick of CNAME records in DNS...

keycloak-services: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. Thi...

CVE-2024-57241

CVE-2024-57241CNNVD-2024-34500830 For web applications using DEDECMS 5.71SP1 and earlier, URL redirects occur because the source code logic error of the CMS does not judge the input GET request 使用dedecms 5.71sp1及以下版本的web应用，因为cms的源码逻辑错误未对输入的GET请求进行判断从而发生url重定向 How to use POC poc使用方法 Just change th...

CVE-2020-7247-POC

Prefacio Datos clave sobre el exploit Instalación del servidor vulnerable Configuración Avisos sobre el entorno Exploit Explotación manual Explotación mediante script Prefacio Este repositorio debe servir como base para configurar y explotar CVE-2020-7247 en un entorno controlado y privado. Todo ...

ssl-kill-switch2

SSL Kill Switch 2 Herramienta de caja negra para deshabilitar la validación de certificados SSL/TLS - incluido el anclaje de certificados certificate pinning - dentro de aplicaciones iOS y macOS. Segunda iteración de https://github.com/iSECPartners/ios-ssl-kill-switch . Descripción Una vez cargad...

Blackash-CVE-2025-48593

🚨 CVE-2025-48593 Android 系统零点击远程代码执行漏洞 🚨 "单个恶意数据包即可掌控你的设备。" — Android 安全团队，2025年11月 🎯 漏洞概览 属性| 详情 ---|--- CVE ID| CVE-2025-48593 严重性| 🔴 严重 RCE，零点击 CVSS（预估）| 9.8 待 NVD 确认 攻击向量| 🌐 网络（远程） 用户交互| ❌ 无需任何交互 所需权限| ❌ 无需任何权限 漏洞利用状态| 🟡 无公开 PoC 截至 2025年11月4日 🛡️ 受影响设备及版本 - Android 13（2023年10月 – 2025年10月所有构建版本）...

CVE-2026-34207

CVE-2026-34207 SSRF过滤器检查了主机名字符串，但实际目的地是由后续的DNS决定的。这一漏洞使得攻击者控制的Webhook URL能够到达回环地址、元数据服务和私有网络目标。 介绍 我在审查Typebot （一个开源聊天机器人构建器）时发现了这个漏洞，心中带着一个简单的安全问题： 如果SSRF保护验证的是主机名字符串，而实际目的地是由后续的DNS决定的，会发生什么？ 在这个案例中，这个问题引出了一个真正的漏洞。 Typebot 的 Webhook / HTTP 请求块的 SSRF 保护仅验证了： URL 字符串， 封禁了主机名字面量， 以及字面量 IP 格式 它没有...

CVE-2025-47812

CVE-2025-47812 Una validación de entrada incorrecta llevó a ejecución remota de código comprometiendo completamente el sistema 📘 Introducción: Julien Ahrens de RCE Security descubrió una vulnerabilidad de seguridad crítica que afecta a WingFTP. Rastreada como CVE-2025-47812, la vulnerabilidad tie...