cve-2026-0013-poc

CVE-2026-0013 Уязвимость Android DocumentsUI Confused Deputy — проект верификации исследования безопасности Важное замечание Этот репозиторий является производным сборочным репозиторием и связан с исходным основным репозиторием. Роль| Репозиторий| Описание ---|---|--- Основной репозиторий|...

CVE-2026-82813 BEN Group TubeBuddy for YouTube Extension tubebuddymaster1.js TBGlobal.GetToken data authenticity

A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the function TBGlobal.GetToken of the file tubebuddymaster1.js. The manipulation of the argument t/c/r results in insufficient verification of data authenticity. It is possible to launch...

CVE-2026-82813

CVE-2026-82813 affects TubeBuddy for YouTube Extension (BEN Group) up to version 5.8.4 on Chrome. The vulnerability resides in the TBGlobal.GetToken function within the file tubebuddymaster1.js , where insufficient verification of data authenticity occurs when the argument t/c/r is manipulated. A...

EUVD-2026-68680

A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the function TBGlobal.GetToken of the file tubebuddymaster1.js. The manipulation of the argument t/c/r results in insufficient verification of data authenticity. It is possible to launch...

security-research

security-research Proof-of-concept code and technical write-ups for vulnerabilities I discovered and reported through coordinated disclosure. Every entry here is already public: the vendor advisory is published and a fixed release is available. Nothing under embargo or in draft is included. The...

CVE-2023-25157

CVE-2023-25157 This is a simple Python Script to Find the Latest GeoServer SQL Injection Vulnerability. You can use the Scripts on hosts to check for infected path. Installation: 1. git clone https://github.com/0x2458bughunt/CVE-2023-25157/ 2. cd CVE-2023-25157 3. chmod +x geoserver.sh Note: You...

CVE-2026-51152

Server-side request forgery SSRF in the /har/test endpoint in QD 20220208 through 20250803. Fetcher.buildrequest in libs/fetcher.py constructs an httpclient.HTTPRequest from user-supplied JSON without validating URL scheme, host, or IP range. The /har/test handler does not require authentication,...

CVE-2022-26134

CVE-2022-26134 Atlassian Confluence リモートコード実行の脆弱性（CVE-2022-26134） 使用方法：python CVE-2022-26134.py -u http://127.0.0.1 一括検証： python CVE-2022-26134.py -f xxx.txturlをtxtにコピー...

CVE-2026-78078

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

heaphopper

heaphopper HeapHopper est un framework de vérification de modèle borné pour les implémentations de tas. Aperçu Installation root@kitploit: sudo apt update && sudo apt install build-essential python3-dev virtualenvwrapper git clone https://github.com/angr/heaphopper.git && cd ./heaphopper...

CVE-2026-78078 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

CVE-2026-78078 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

CVE-2026-78078

Helix Ultimate is a Joomla template by joomshaper.com. In versions prior to 2.2.10 , image uploads were validated only by file extension and basic size parameters, allowing an attacker with privileged access to upload non-image files disguised with raster extensions — a content spoofing bypass. T...

CVE-2021-22005-

CVE-2021-22005- Script Python de validation en masse pour CVE-2021-22005 Environnement d'exécution : python3 Exécution : placez les URL à vérifier dans un fichier texte, par exemple url.txt, puis exécutez python3 url.txt...

CVE-2021-26295

CVE-2021-26295-POC Utilisez DNSlog pour vérifier la vulnérabilité CVE-2021-26295. Utilisation poc: Placez la cible dans target.txt puis exécutez python poc.py. L'environnement JDK doit être 12, sinon ysoserial ne peut pas générer le payload correctement. exp: python exp.py https://baidu.com puis...

asa_tools

Cisco ASA RCE Проверка Этот скрипт может быть использован для проверки наличия CVE-2016-1287. Требуется python3 и установленный модуль python hexdump root@kitploit: $ sudo pip3 install hexdump Запуск осуществляется следующим образом root@kitploit: python3 cisco-asa.py IP.IP.IP.IP:port...

USN-8699-1 libssh vulnerabilities

It was discovered that libssh had a stack buffer overflow in its SFTP server when constructing directory listing entries for long filenames. An attacker could possibly use this issue to cause libssh to crash or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. CVE-2026-15370 It w...

CVE-2026-45022

A flaw was found in go-git, an extensible Git implementation library. This vulnerability arises from go-git's differing interpretation of malformed Git objects compared to upstream Git. When processing commit or tag objects with ambiguous or malformed headers, go-git may sign or verify a commit...

CVE-2026-82879

DataEase before 2.10.26 contains multiple access control defects in its sharing link module. Tickets are not bound to the target share UUID, allowing a valid ticket issued for one share to be reused against another via ShareTicketManage.validateTicket (POST /de2api/share/proxyInfo). Additionally,...

EUVD-2026-68462

Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers can generate arbitrary RSA key pairs, sign modified firmware with the private key, embed the matching modulus in the...