targetedKerberoast

targetedKerberoast targetedKerberoast est un script Python qui peut, comme beaucoup d'autres par exemple GetUserSPNs.py, afficher les hashs "kerberoast" pour les comptes utilisateurs ayant un SPN défini. Cet outil apporte la fonctionnalité supplémentaire suivante : pour chaque utilisateur sans SP...

Tomcat-CVE-2017-12615

Tomcat PUT 메서드를 통한 임의 파일 쓰기 취약점 CVE-2017-12615 中文版本중국어 버전 Tomcat 버전: 8.5.19 환경 설정 root@kitploit: docker-compose build docker-compose up -d 위 명령을 성공적으로 실행한 후, http://your-ip:8080 사이트를 방문하면 Tomcat의 예제 페이지를 볼 수 있습니다. 취약점 원리 참고 링크: http://wooyun.jozxing.cc/static/bugs/wooyun-2015-0107097.html...

goGetBucket

goGetBucket - Découverte de buckets AWS S3 par altérations et permutations Attention : le code est horrible car je ne l'ai utilisé que pour un usage personnel. Quand j'aurai le temps, je le rendrai moins horrible et plus rapide. Lors d'une reconnaissance sur un domaine, il est très important de...

Kerberos-CVE-2026-27912

Kerberos-CVE-2026-27912 CVE-2026-27912 — уязвимость повышения привилегий Windows Kerberos ResetNightmare — несанкционированный сброс пароля через ошибку протокола смены пароля Kerberos. 📋 Сведения Поле| Значение ---|--- CVE| CVE-2026-27912 Название| Уязвимость повышения привилегий Windows Kerbero...

CVE-2026-22017-Firmware-Update-via-BLE-Without-Authentication

CVE-2026-22017 – Обновление прошивки через BLE без аутентификации Программный код периферийное устройство Python bleak root@kitploit: blefirmwareupdate.py - Simulated BLE peripheral accepting firmware writes from bleak import BleakServer, BleakGATTCharacteristic import asyncio class...

CVE-2026-86416 ILIAS before 9.23, 10.11, and 11.4 Missing Authorization in Group Object Action Methods

ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGroupGUI where saveMapSettingsObject and updateGroupTypeObject perform state-changing operations without write permission checks. Authenticated users with only read access to a group can craft POST...

EUVD-2026-72363

ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGroupGUI where saveMapSettingsObject and updateGroupTypeObject perform state-changing operations without write permission checks. Authenticated users with only read access to a group can craft POST...

EUVD-2026-71620

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is passed directly into the ORDER BY clause of a SQL query without validation against declared sortable columns. Authenticated...

CVE-2026-12663

ControlFLASH™ (Rockwell Automation) contains an improper access control flaw: its installer grants write permissions to the "Everyone" group on the product installation directory. This misconfiguration allows a local attacker to achieve arbitrary code execution at the logged-in user's privilege l...

kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

A flaw was found in the Linux kernel's NFSv4 implementation. A local user could exploit a vulnerability where opening a file with OTRUNC truncate and ORDONLY read-only flags would bypass the necessary write permission checks. This oversight allows an attacker to truncate a file without having...

CVE-2026-55064

Vikunja is an open-source self-hosted task management platform. From 2.3.0 until 2.4.0, a user with Write but not Admin permission on a shared child project can detach it from its parent hierarchy by submitting parentprojectid equal to 0 to POST /api/v1/projects/project. The Project.CanUpdate...

Vikunja has a project duplication bypasses write-permission check on the target parent project

Summary The project-duplication endpoint fails to enforce write access to the target parent project. Any authenticated non-link-share user can duplicate a project they can read into any parent project on the instance, regardless of whether they have write access to that parent — injecting an...

CVE-2026-54766 Vikunja: Project duplication bypasses write-permission check on the target parent project

Vikunja is an open-source self-hosted task management platform. From 0.21.0 until 2.4.0, the project duplication operation in pkg/models/projectduplicate.go allows an authenticated user who can read a source project to place its duplicate beneath an arbitrary target parent project...

CVE-2026-54766

Vikunja , an open-source self-hosted task management platform, has an authorization bypass in its project duplication endpoint (PUT /api/v1/projects/{project}/duplicate). The flaw in ProjectDuplicate.CanCreate (pkg/models/project_duplicate.go) calls parent.CanCreate on an unhydrated Project struc...

EUVD-2026-67830

Vikunja is an open-source self-hosted task management platform. From 0.21.0 until 2.4.0, the project duplication operation in pkg/models/projectduplicate.go allows an authenticated user who can read a source project to place its duplicate beneath an arbitrary target parent project...

CVE-2026-54766 Vikunja: Project duplication bypasses write-permission check on the target parent project

Vikunja is an open-source self-hosted task management platform. From 0.21.0 until 2.4.0, the project duplication operation in pkg/models/projectduplicate.go allows an authenticated user who can read a source project to place its duplicate beneath an arbitrary target parent project...

PT-2026-83229

Name of the Vulnerable Software and Affected Versions Vikunja versions 0.21.0 through 2.3.0 Description An authorization bypass exists in the project duplication process. An authenticated user with read access to a source project can duplicate it and place the copy under any arbitrary target pare...

Apicurio/apicurio-registry: apicurio-registry: XML entity-expansion denial of service via internal DTD subset

A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and schema access but does not disable DOCTYPE declarations or enable FEATURESECUREPROCESSING. An attacker with artifact-write permission can upload XML documents with internal entity-expansion payloa...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101997 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAYWRITE in open permission mask for OTRUNC POSIX requires write permission to...

Tanium Server 7.7.3.x < 7.7.3.8298 / 7.8.2.x < 7.8.2.1198 / 7.8.4.x < 7.8.4.1327 UI Misrepresentation (TAN-2026-017)

The version of Tanium Server installed on the remote host is 7.7.3.x prior to 7.7.3.8298, 7.8.2.x prior to 7.8.2.1198, or 7.8.4.x prior to 7.8.4.1327. It is, therefore, affected by a vulnerability: - A UI misrepresentation of critical information vulnerability could allow an authenticated Tanium...