winrar-exploit

설명 이것은 CVE-2025-8088 Winrar 익스플로잇의 구현입니다. 아카이브 내에서 ADSAlternate Data Streams와 경로 패칭path patching을 사용합니다. 피해자가 감염된 아카이브를 추출하면, 패칭된 ADS 페이로드예: 실행 파일, PowerShell 스크립트, 또는 재미있는 png가 대상 경로보통 시작 프로그램 폴더로 리디렉션됩니다. 다음 시스템 시작 시, 페이로드가 시작 프로그램에 있기 때문에 자동으로 실행됩니다. 단점 피해자의 Windows 사용자 이름을 알아야 시작 프로그램 폴더에 접근할...

CVE-2026-63520

CVE-2026-63520 SharePoint 안전하지 않은 타입 RCE + CVE-2026-55040 체인 Microsoft SharePoint Server에서의 인증 없는 RCE. 자격 증명 불필요. Stephen FewerRapid7는 Pwn2Own Berlin 2026에서 CVE-2026-55040을 시연했습니다. Rapid7은 후속 연구 중 CVE-2026-63520을 발견했고, VulnCheck는 독립적으로 대체 가젯 체인을 발견했습니다. 이 두 버그를 함께 사용하면 패치되지 않은 인터넷상의 모든 SharePoint...

CVE-2026-39902

漏洞报告： 经过身份验证的 RCE 数据输入 研究员： K | 产品： Cacti ≤ 1.2.30 01 漏洞摘要 字段| 值 ---|--- 产品| Cacti — 基于 RRDtool 的完整图形化解决方案 受影响版本| ≤ 1.2.30 漏洞类型| 操作系统命令注入（CWE-78） 攻击向量| 网络（经过身份验证的管理员） 身份验证| 是 — 需要管理员账户 目标操作系统| Windows（两种向量）+ Linux（直接 inputstring 向量） CVSSv3.1 评分| 7.2 高危 向量|...

CVE-2026-32635-Angular-XSS-Mitigation-

CVE-2026-32635: Angular i18n 속성 XSS - 완화 및 탐지 PoC 📌 개요 이 저장소는 Angular의 국제화i18n 속성에 영향을 미치는 CVE-2026-32635 , 교차 사이트 스크립팅XSS 취약점에 대한 완화 및 탐지 교육용 데모를 포함합니다. 취약점 맥락: 이 취약점은 i18n-를 비살균 값에 대한 데이터 바인딩과 함께 사용할 때 발생합니다 href, src, action, poster, data 등 민감한 속성에 영향을 미칩니다 CVSS v4: 9.0 치명적 -...

copy-fail-CVE-2026-31431-php

CVE-2026-31431 복사 실패 PHP PoC www-data@jumpbox:/home$ id uid=33www-data gid=33www-data groups=33www-data www-data@jumpbox:/home$ uname -a Linux testbox 5.15.0-136-generic 147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x8664 x8664 x8664 GNU/Linux www-data@jumpbox:/home$ php CVE-2026-31431.php id...

CVE-2021-35042

CVE-2021-35042: Django SQL 인젝션 취약점 I. 개요 Django는 Python으로 작성된 오픈소스 웹 애플리케이션 프레임워크로, MVCModel - View - Controller 모델을 기반으로 구축되었습니다. 원래는 Lawrence 출판 그룹이 소유한 뉴스 콘텐츠 웹사이트를 관리하기 위해 구축되었으며, CMSContent Management System 소프트웨어입니다. Django 버전 3.1.x 3.1.13 및 버전 3.2.x 3.2.5에는 SQL 인젝션 취약점이 존재합니다. 이 취약점의 원인은...

CVE-2026-84278

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root sshconfigwrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges...

CVE-2026-84290

IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHODNEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception handling, potentially allowing a privileg...

CVE-2026-84276

IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the...

CVE-2026-107383

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and 3.5.4, the GeoJSON Polygon and MultiPolygon binary encoders size a Buffer.allocUnsafe allocation from each ring's numeric length before confirming that...

CVE-2026-82334 IBM Guardium Data Protection Out-of-bounds Read

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of...

EUVD-2026-95249

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of...

CVE-2026-82334

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser within the Windows S-TAP component . A remote attacker can exploit this by sending a specially crafted TDS LOGIN7 packet containing invalid offset or len...

EUVD-2026-95247

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...

CVE-2026-82335 IBM Guardium Data Protection Buffer Overflow

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...

CVE-2026-82335

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based buffer overflow within the Sniffer component 's MongoDB protocol parser. A remote attacker can exploit this by sending a specially crafted MongoDB SCRAM username with an excessive length, leading to memory c...

CVE-2026-82344 IBM Guardium Data Protection Buffer Overflow

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

EUVD-2026-95246

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

CVE-2026-82344

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based buffer overflow within the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can exploit this by sending crafted TDS login fragments that exceed the fixed-size reassembl...

EUVD-2026-95243

IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting XSS in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated...