20700 matches found
cve-2025-50946
cve-2025-50946 CVE-2025-50946 OliveTin get-theme RCE에 대한 익스플로잇 스크립트입니다. 문자 요구 사항이 까다로워 여러 인수를 포함하는 많은 명령이 제대로 실행되지 않을 수 있습니다. 근본 원인을 추적하거나 스크립트를 더 강력하게 만들 시간을 투자하지 않았습니다. 필요한 것이 있으면 저에게 연락하거나 PR을 열어주세요. 이 스크립트의 기반이 된 원본 연구를 제공한 chrisWalker11에게 감사드립니다: link 사용 예 기본 PoC: python cve-2025-50946.py -t...
CVE-2026-94293
An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...
EUVD-2026-92985
An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...
CVE-2025-5880
Whistle 2.9.98에는 /cgi-bin/sessions/get-temp-file 엔드포인트가 filename 매개변수의 사용자 입력을 적절히 필터링하지 못해 패치되지 않은 경로 탐색 취약점이 존재합니다. 공격자는 /etc/passwd와 같은 절대 경로나 탐색 시퀀스를 제공하여 디렉터리 제한을 우회하고 대상 서버에서 민감한 시스템 파일을 직접 읽을 수 있습니다. /etc/passwd 파일을 읽기 위한 POC http://$target/cgi-bin/sessions/get-temp-file?filename=/etc/pass...
CVE-2024-52301-Research
CVE-2024-52301-연구 CVE-2024-52301에 관한 약간의 연구입니다. 이 취약점을 살펴보면서 Laravel이 어떻게 취약한지 알고 싶었습니다. 이를 위해 6.20.44와 6.20.45 버전을 diff하여 GET 매개변수가 애플리케이션 구성을 어떻게 변경할 수 있는지 추적했습니다. 이에 대해 X와 BlueSky에 글을 올렸습니다: https://x.com/0xntrm/status/1857504510609965206...
CVE-2026-58457
CVE-2026-58457 - Неаутентифицированная инъекция команд ОС в Wi-Fi репитере Shenzhen Aitemi M300 !WARNING Этот код предоставляется КАК ЕСТЬ только для образовательных и исследовательских целей. Не используйте этот PoC на промышленных системах, общих средах или любых неавторизованных целях. Запуск...
CVE-2026-105783
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Clipper server enabled, the server in packages/lib/ClipperServer.ts sends Access-Control-Allow-Origin: and allows an...
CVE-2026-74251
Phoca Cart의 속성 필터를 통한 비인증 SQL 인젝션 Phoca Cart ≤ 6.1.6 — 비인증 공격자가 시간 기반 블라인드 인젝션으로 전체 데이터베이스 추출 요약 Phoca Cart의 공개 상점 아이템 페이지에서 a속성 및 s사양 GET 배열 매개변수가 파라미터화나 이스케이프 없이 SQL WHERE 절에 원시 형태로 연결됩니다. 비인증 공격자는 이러한 매개변수를 통해 임의의 SQL을 주입할 수 있으며, 시간 기반 블라인드 기법으로 전체 데이터베이스를 추출할 수 있습니다. 취약점은...
PT-2026-106821
Name of the Vulnerable Software and Affected Versions @quasar/icongenie versions prior to 6.1.1 Description The icongenie generate --profile command fails to constrain the resolved destination to the Quasar project directory when processing folder and name values from a user-supplied profile. The...
PT-2026-106681
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted The client borrows shared CQ credits in the ADDR RESOLVED handler via ib cq pool get, before the peer is connected. create cm can return -ERESTARTSYS from wait event...
PT-2026-106581
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount bug exists in the RDMA/core component within the iwpm get nlmsg request function. The function initializes the refcount after calling list add tail, which makes the object...
PT-2026-106361
An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...
PT-2026-106652
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the RDMA/siw component. The siw get hdr function may process an extended DDP/RDMAP header across multiple TCP callbacks. If the first callback receives...
PT-2026-106688
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/core component where the ib get eth speed function invokes an ethtool callback without first verifying the registration state of the returned net device...
PT-2026-106759
A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get token bin counts and mask of the file vllm/model executor/layers/utils.py of the component Penalty Handler. Performing a manipulation results in denial of service. Remote exploitation of the attac...
PT-2026-106501
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd connection leak on cifs get tcp session error When an RDMA connection is successfully established via smbd get connection but cifs get tcp session later fails e.g. kthread create returns an error, the error...
Cisco ASA Exposure of Sensitive Information to an Unauthorized Actor (CVE-2020-3259)
A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to retrieve memory contents on an affected device, which could lead to the disclosure of confidential...
CVE-2018-6574
CVE-2018-6574 CVE-2018-6574 go get RCE...