CVE-2026-63520

CVE-2026-63520 SharePoint 安全でない型 RCE + CVE-2026-55040 チェーン Microsoft SharePoint Server に対する認証なし RCE。資格情報は不要です。 Stephen Fewer Rapid7 は Pwn2Own Berlin 2026 で CVE-2026-55040 を実証しました。Rapid7 はその後の調査で CVE-2026-63520 を発見し、VulnCheck は独立して代替ガジェットチェーンを発見しました。この2つのバグを組み合わせることで、インターネット上のパッチ未適用の SharePoint...

CVE-2026-39902

脆弱性レポート: 認証済みRCEデータ入力 研究者: K | 製品: Cacti ≤ 1.2.30 01 脆弱性概要 フィールド| 値 ---|--- 製品| Cacti — RRDtoolベースの完全なグラフ作成ソリューション 影響を受けるバージョン| ≤ 1.2.30 脆弱性タイプ| OSコマンドインジェクション CWE-78 攻撃ベクトル| ネットワーク 認証済み管理者 認証| 必要 — 管理者アカウントが必要 対象OS| Windows 両ベクトル + Linux 直接 inputstring ベクトル CVSSv3.1スコア| 7.2 HIGH ベクトル|...

CVE-2026-32635-Angular-XSS-Mitigation-

CVE-2026-32635: Angular i18n 属性XSS - 緩和策と検出のPoC 📌 概要 このリポジトリには、CVE-2026-32635 の緩和策と検出の教育的デモが含まれています。これは、Angularの国際化（i18n）属性に影響を与えるクロスサイトスクリプティング（XSS） 脆弱性です。 脆弱性のコンテキスト: この脆弱性は、i18n- をサニタイズされていない値へのデータバインディングと一緒に使用した場合に発生します href、src、action、poster、data などの機密属性に影響します CVSS v4: 9.0（CRITICAL） -...

copy-fail-CVE-2026-31431-php

CVE-2026-31431（コピー失敗）PHP PoC www-data@jumpbox:/home$ id uid=33www-data gid=33www-data groups=33www-data www-data@jumpbox:/home$ uname -a Linux testbox 5.15.0-136-generic 147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x8664 x8664 x8664 GNU/Linux www-data@jumpbox:/home$ php CVE-2026-31431.php id...

CVE-2021-35042

CVE-2021-35042: Django SQLインジェクションの脆弱性 I. 概要 Djangoは、Pythonで書かれたオープンソースのWebアプリケーションフレームワークであり、MVC（Model - View - Controller）モデルに基づいて構築されています。当初は、ローレンス出版グループが所有するニュースコンテンツサイトを管理するために構築されたCMS（コンテンツ管理システム）ソフトウェアでした。 Djangoバージョン3.1.xから3.1.13、およびバージョン3.2.xから3.2.5には、SQLインジェクションの脆弱性が存在します。...

CVE-2026-84276

IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the...

CVE-2026-84278

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root sshconfigwrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges...

CVE-2026-84290

IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHODNEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception handling, potentially allowing a privileg...

CVE-2026-107383

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and 3.5.4, the GeoJSON Polygon and MultiPolygon binary encoders size a Buffer.allocUnsafe allocation from each ring's numeric length before confirming that...

EUVD-2026-95249

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of...

CVE-2026-82334 IBM Guardium Data Protection Out-of-bounds Read

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of...

CVE-2026-82334

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser within the Windows S-TAP component . A remote attacker can exploit this by sending a specially crafted TDS LOGIN7 packet containing invalid offset or len...

EUVD-2026-95247

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...

CVE-2026-82335 IBM Guardium Data Protection Buffer Overflow

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...

CVE-2026-82335

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based buffer overflow within the Sniffer component 's MongoDB protocol parser. A remote attacker can exploit this by sending a specially crafted MongoDB SCRAM username with an excessive length, leading to memory c...

CVE-2026-82344 IBM Guardium Data Protection Buffer Overflow

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

EUVD-2026-95246

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

CVE-2026-82344

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based buffer overflow within the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can exploit this by sending crafted TDS login fragments that exceed the fixed-size reassembl...

CVE-2026-84244 IBM Guardium Data Protection Cross-Site Scripting

IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting XSS in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated...

CVE-2026-84244

IBM Guardium Data Protection 12.2 is vulnerable to a stored cross-site scripting (XSS) vulnerability in the Quick Search results grid . This flaw allows an unauthenticated attacker capable of influencing monitored database traffic to execute malicious scripts in the browser of an authenticated Gu...