BrowserBox v18.8.0

BrowserBox by DOSAYGO Secure, modern Remote Browser Isolation RBI with a clientless experience 🔐 NEW in v18.0.1 — Passkey authentication on macOS: sign in to websites with real passkeys inside your remote browser. Passkeys are created and stored on your Mac's Secure Enclave and unlocked with Touc...

misfortune-cookie

CVE-2014-9222 "Misfortune Cookie" PoC suite Stack overflow in...

CVE-2026-48611-phpBB

CVE-2026-48611-phpBB 绕过身份验证 简单的绕过身份验证PoC，如果想通过浏览器访问，别忘了根据浏览器显示的User-Agent更改脚本中的 USERAGENT 变量，否则无法正常工作。使用Cookie编辑器替换 sid和 u的值。 影响版本：phpBB 3.3.16及以下 + 4.0.0-a2 root@kitploit: phpbb python3 exploit.py https://localhost:8000 joushk + Target: https://localhost:8000 + Target username: joushk +...

Palimpsest

CVE-2026-74945 · Uninitialized heap disclosure through a crafted web font This directory holds an honest reproduction package for an uninitialized-memory disclosure in Firefox font handling. A crafted @font-face font walks the OTS output stream into an uninitialized-heap gap, and ordinary content...

CVE-2025-4138-4517-POC

CVE-2025-4138 / CVE-2025-4517 Python tarfile 过滤器绕过：利用 PATHMAX 符号链接逃逸 通过filter="data" / filter="tar" 提取实现任意文件写入 目录 概述 漏洞详情 工作原理 受影响版本 受影响代码模式 安装 使用方法 快速入门 — SSH 密钥注入 预设攻击 自定义目标 概念验证 — 安全验证 技术深度解析 PATHMAX 与 os.path.realpat...

CVE-2026-18963-Exploit

CVE-2026-18963 — Keycloak reset-credentials 绕过 → 未认证账户接管 仅凭用户名或电子邮件地址 ，未认证的攻击者即可在任何 Keycloak 账户上设置一个 任意密码。密码重置电子邮件会发送 给真正的受害者，但攻击者完全不需要它 — 攻击者从不读取邮箱，从不 点击链接，也不持有任何先前的凭据或会话。 受影响：Keycloak 26.0.0 – 26.7.1。已在 26.7.2 中修复。 我是否易受攻击？ 一条命令。无需有效用户名，且无副作用 — 它不会发送 电子邮件，不会写入任何账户，并会在可利用步骤之前停止。bash git clone...

winmagic_sd

CVE-2020-11519 および CVE-2020-11520 に関する技術レポート 日付: 2020年6月 著者: Dennis Elser コード: github 目次 はじめに アプローチと技術的説明 CVE-2020-11519 CVE-2020-11520 概念実証エクスプロイト 開示のタイムライン 解決策 チェックサム 参考文献 はじめに そのウェブサイトによると、Winmagic SecureDoc は「フルディスク暗号化 FDE、多要素認証、リムーバブルメディアコンテナ暗号化 RMCE、ファイルおよびフォルダー暗号化 FFE などの機能を効率的に活用することで、企業が...

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser. "Requiring prior administrative or code execution access, its installer injects the extension directly into Chrome/Edge...

CVE-2026-86497

In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administrator to exfiltrate stored mailbox credentials...

CVE-2026-86497

In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administrator to exfiltrate stored mailbox credentials...

CVE-2026-86497

In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administrator to exfiltrate stored mailbox credentials...

EUVD-2026-72513

In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administrator to exfiltrate stored mailbox credentials...

CVE-2026-86497

JetBrains YouTrack versions before 2026.2.18769 contained a vulnerability in the mailbox configuration flow. Changing a mailbox host did not require re-authentication, allowing a project administrator to exfiltrate stored mailbox credentials . The CVSS 3.1 score is 6.8 (MEDIUM) with a network att...

SUSE CVE-2026-80766

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: fix use-after-free of inrangetimer on remove uclogicremove cancels the pen in-range timer and then stops the device: timerdeletesync&drvdata-inrangetimer; hidhwstophdev; timerdeletesync only guarantees the timer is...

CVE-2026-86419

Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery functionality. In feed processing, redirects were followed without validating the redirect scheme or destination. The original request headers were reused acro...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules

Summary IBM App Connect Enterprise Connector Discovery and OpenAPI Editor, IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise runtime are vulnerable to multiple vulnerabilities due to multiple Node.js modules fast-uri, postcss, axios, jsonata and body-parser...

EUVD-2026-72370

Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery functionality. In feed processing, redirects were followed without validating the redirect scheme or destination. The original request headers were reused acro...

CVE-2026-86419 MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery

Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery functionality. In feed processing, redirects were followed without validating the redirect scheme or destination. The original request headers were reused acro...

CVE-2026-86419 MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery

Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery functionality. In feed processing, redirects were followed without validating the redirect scheme or destination. The original request headers were reused acro...

CVE-2026-86419

MISP versions ≤2.5.45 contain insufficient validation of outbound HTTP destinations in feed retrieval and TAXII discovery . In feed processing, redirects were followed without validating the scheme or destination, causing configured authentication headers and API credentials to be forwarded to di...