EUVD-2026-68680

A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the function TBGlobal.GetToken of the file tubebuddymaster1.js. The manipulation of the argument t/c/r results in insufficient verification of data authenticity. It is possible to launch...

CVE-2026-82813

CVE-2026-82813 affects TubeBuddy for YouTube Extension (BEN Group) up to version 5.8.4 on Chrome. The vulnerability resides in the TBGlobal.GetToken function within the file tubebuddymaster1.js , where insufficient verification of data authenticity occurs when the argument t/c/r is manipulated. A...

CVE-2026-82813 BEN Group TubeBuddy for YouTube Extension tubebuddymaster1.js TBGlobal.GetToken data authenticity

A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the function TBGlobal.GetToken of the file tubebuddymaster1.js. The manipulation of the argument t/c/r results in insufficient verification of data authenticity. It is possible to launch...

security-research

security-research Proof-of-concept code and technical write-ups for vulnerabilities I discovered and reported through coordinated disclosure. Every entry here is already public: the vendor advisory is published and a fixed release is available. Nothing under embargo or in draft is included. The...

CVE-2023-25157

CVE-2023-25157 これは、最新のGeoServer SQLインジェクションの脆弱性を発見するためのシンプルなPythonスクリプトです。ホスト上でスクリプトを使用して、感染したパスを確認できます。 インストール: 1. git clone https://github.com/0x2458bughunt/CVE-2023-25157/ 2. cd CVE-2023-25157 3. chmod +x geoserver.sh 注意: すべてのファイルを同じディレクトリに配置する必要があります。システム全体からファイルを使用したい場合は、以下の手順に従ってください: 1...

CVE-2026-51152

Server-side request forgery SSRF in the /har/test endpoint in QD 20220208 through 20250803. Fetcher.buildrequest in libs/fetcher.py constructs an httpclient.HTTPRequest from user-supplied JSON without validating URL scheme, host, or IP range. The /har/test handler does not require authentication,...

CVE-2022-26134

CVE-2022-26134 Atlassian Confluence 远程代码执行漏洞（CVE-2022-26134） 使用方法：python CVE-2022-26134.py -u http://127.0.0.1 批量验证： python CVE-2022-26134.py -f xxx.txt复制url到txt...

CVE-2026-78078

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

heaphopper

heaphopper HeapHopper 是一个用于堆实现的有界模型检测框架。 概述 设置 root@kitploit: sudo apt update && sudo apt install build-essential python3-dev virtualenvwrapper git clone https://github.com/angr/heaphopper.git && cd ./heaphopper mkvirtualenv -ppython3 heaphopper pip install -e . 所需软件包 root@kitploit: build-essenti...

CVE-2026-78078 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

CVE-2026-78078 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

CVE-2026-78078

Helix Ultimate is a Joomla template by joomshaper.com. In versions prior to 2.2.10 , image uploads were validated only by file extension and basic size parameters, allowing an attacker with privileged access to upload non-image files disguised with raster extensions — a content spoofing bypass. T...

CVE-2021-22005-

CVE-2021-22005- CVE-2021-22005バッチ検証用Pythonスクリプト 実行環境：python3 実行：検証したいURLをテキストファイル（例：url.txt）に入れ、python3 url.txt を実行してください。...

CVE-2021-26295

CVE-2021-26295-POC Utilice DNSlog para verificar la vulnerabilidad CVE-2021-26295. Uso poc: Coloque el objetivo en target.txt y luego ejecute python poc.py. El entorno JDK debe ser 12, de lo contrario, ysoserial no puede generar el payload correctamente exp: python exp.py https://baidu.com y lueg...

asa_tools

Cisco ASA RCE 验证 该脚本可用于验证 CVE-2016-1287 是否存在。 它需要安装 python3 和 python hexdump 模块 root@kitploit: $ sudo pip3 install hexdump 可通过以下方式运行： root@kitploit: python3 cisco-asa.py IP.IP.IP.IP:port...

USN-8699-1 libssh vulnerabilities

It was discovered that libssh had a stack buffer overflow in its SFTP server when constructing directory listing entries for long filenames. An attacker could possibly use this issue to cause libssh to crash or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. CVE-2026-15370 It w...

CVE-2026-45022

A flaw was found in go-git, an extensible Git implementation library. This vulnerability arises from go-git's differing interpretation of malformed Git objects compared to upstream Git. When processing commit or tag objects with ambiguous or malformed headers, go-git may sign or verify a commit...

CVE-2026-82879

DataEase before 2.10.26 contains multiple access control defects in its sharing link module. Tickets are not bound to the target share UUID, allowing a valid ticket issued for one share to be reused against another via ShareTicketManage.validateTicket (POST /de2api/share/proxyInfo). Additionally,...

EUVD-2026-68462

Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers can generate arbitrary RSA key pairs, sign modified firmware with the private key, embed the matching modulus in the...

break-golf

break-golf 一个用于展示密码分析结果的看板，这些结果是经过证明的 ，而非运行出来的。 Challenge 固定两个世界以及你必须证明的命题。你编写一个敌手和一个证明，证明它能区分这两个世界。胜利就是证明本身：不会执行、采样或重放任何东西，也没有人类阅读提交内容来决定其是否有效。 状态：概念验证。 站点是静态的，提交会打开一个 GitHub issue，由人工判断。目前还没有 Lean 验证器作为后端。 布局 路径| 说明 ---|--- challenges//Challenge.lean| 可信。 固定提交必须满足的确切类型。不属于任何上传内容。...