CVE-2023-36163

익스플로잇 제목: BuildaGate5library - Reflected Cross-Site Scripting XSS 날짜: 06/07/2023 익스플로잇 작성자: Idan Malihi 공급업체 홈페이지: 없음 버전: 5 테스트 환경: Microsoft Windows 10 Pro CVE: CVE-2023-36163 PoC: 공격자는 취약한 매개변수 mc=를 찾아 다음과 같은 JS 코드를 주입해야 합니다: 'div id="aaaa...

MC-Log4j-Patcher

MC-Log4J-Patcher このプロジェクトの目的は、最近発見されたLog4Jエクスプロイト（CVE-2021-44228）に関して、Minecraftプレイヤーとサーバー運営者に安心感を提供することです。 現在、このプロジェクトは jndi だけでなく、すべてのLog4J形式の文字列を検出し、設定に応じて、それらを置換するか、ログに記録されないよう完全にブロックします。 詳細は、機能、対応プラットフォームなどを以下でご覧ください。 他の方からの支援（貢献や、issue での機能・プラットフォームの提案など）をいただけると大変ありがたく思います。 対応プラットフォーム...

CVE-2026-66631

Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...

CVE-2026-66631

CVE-2026-66631 affects the MC Woocommerce Wishlist WordPress plugin (plugin slug: smart-wishlist-for-more-convert ) in versions

EUVD-2026-81511

Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...

CVE-2026-66631 WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability

Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...

WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MC Woocommerce Wishlist versions = 1.9.21...

mc-log4j-patcher

mc-log4j-patcher 古い（脆弱性のある - CVE-2021-44228）Log4j2 バージョンを、JNDI RCE 修正を含む最新版（2.15.0）に置き換えます。 Spigot 1.12.2、PaperSpigot 1.8.8、PaperSpigot 1.17.1 でテスト済みです。 これは現在サポートされていないサーバー（PaperSpigot 1.8.8 など）を修正するためのものです。 このツールを使用する前に、現在のサーバーソフトウェアに脆弱性を修正する公式リリースがあるかどうか確認してください。 使用方法: java -jar patcher.jar...

TencentOS Server 2: compat-glibc (TSSA-2026:1019)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1019 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Astra Linux – Vulnerability in libde265

Libde265 v1.0.4 contains a heap buffer overflow in the mcluma function, which can be exploited through a specially crafted file...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vfio/fsl-mc: Blocking calls to interrupt handlers without triggering them The eventfdctx trigger pointer of the vfiofslmcirq object is initially NULL, and it may become NULL if the user sets the trigger parameter of eventfd to -1...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix double-free on mcdev The committed code attempted to simplify the process of deallocations, but this led to a double-free on the mcdev variable. If the MC device is a DPRC, a new mcbus is allocated, and the mcdev...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: Check the return value of platformgetresource. platformgetresource returns NULL in case of failure. Therefore, check its return value and propagate the error to prevent NULL pointer dereferencing...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053248)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053248 advisory. In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: fix KASAN use-after-free in fslmcbusremove In fslmcbusremove, mc-rootmcbusdev-mc...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: Fixed the KASAN use-after-free in fslmcbusremove. In fslmcbusRemove, mc-rootmcbusdev-mcio is passed to fsldestroymcio. However, mc-rootmcbusdev has already been freed in fslmcDeviceRemove. Therefore, referencing...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: The use-of-memory issue in driveroverrideshow has been fixed. The driveroverrideshow function reads the driveroverride string without holding the devicelock. However, driveroverridestore uses driversetoverride, which...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: bus: fsl-mc: Do not assume that child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as a child of fsl-mc devices, resulting in a crash when attempting to bind a fsl-mc device to VFIO. This...

MAL-2026-14305 Malicious code in mc-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e494af2871662b1b342a26141de010623484dfef353b505805f4b41d85d775c1 Package metadata describes mc-provider as 'Theta chain registry ⚛️' and the README is a verbatim copy of the hyperweb-io/chain-registry README...

Malicious code in mc-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e494af2871662b1b342a26141de010623484dfef353b505805f4b41d85d775c1 Package metadata describes mc-provider as 'Theta chain registry ⚛️' and the README is a verbatim copy of the hyperweb-io/chain-registry README...

Malicious code in mc-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f3053643e65c63fa7d8e3d5c48ae3d659650bd0052137099cd8674232780bc Package publishes as mc-registry with description 'Theta chain registry', but its README, badges, homepage layout, and package listing copy the...