CVE-2018-6574-go-get-RCE

CVE-2018-6574-解決 gcc -shared -o attack.so -fPIC attack.c...

Wordpress-ebook-CVE-2016-10924

Wordpress eBook Download 1.1 プラグインには、filedownload.php ファイルの get パラメータを悪用することでファイル開示の脆弱性があります。 このスクリプトは、この脆弱性を利用してサーバー上のさまざまなプロセスをブルートフォースします。 使用方法: python pidbrute.py...

SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation

SOC227 - Microsoft SharePoint Server の権限昇格 CVE-2023-29357 の悪用 CVE-2023-29357 は重大な権限昇格の脆弱性であり、他の脆弱性と組み合わせることで、リモートコード実行につながる可能性があります。この脆弱性のCVSSスコアは 9.8 Critical です。 イベント情報 EventID : 189 イベント時刻 : 2023年10月6日 20:05 ルール : SOC227 - Microsoft SharePoint Server の権限昇格 - CVE-2023-29357 の悪用の可能性 レベル :...

CVE-2018-6574-go-get-RCE

このリポジトリには README がありません。...

CVE-2024-23339

CVE-2024-23339 취약점 개요 CVE-2024-23339 CVSS : 6.5 Jan 23, 2024 ProtoType Pollution in node.js package rebob 프로젝트의 일환 취약점 설명 github advisories hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utilit...

CVE-2004-2271-MiniShare-1.4.1-Buffer-Overflow

CVE 2004-2271 MiniShare-1.4.1-バッファオーバーフロー https://vulners.com/cve/CVE-2004-2271 使用方法はファイル内に記載されています。面倒なので、msfvenom ペイロードを自動生成します。 移植元: https://www.exploit-db.com/exploits/636/ https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/minisharegetoverflow.rb ライセンス:...

CVE-2019-18655

CVE-2019-18655 metasploit 모듈. File Sharing Wizard 앱 v.1.5.0의 SEH 기반 버퍼 오버플로우. CVE 요약: File Sharing Wizard 버전 1.5.0은 SEHStructured Exception Handler 기반 버퍼 오버플로우 취약점의 영향을 받습니다. 인증되지 않은 공격자는 URL에 악성 페이로드가 포함된 HTTP GET 요청을 전송하여 원격 코드 실행을 수행하고 명령 셸을 얻을 수 있습니다. 이는 CVE-2019-17415, CVE-2019-16724 및...

CVE-2024-10511

CVE-2024-10511 CWE-287: 不適切な認証 概要 Schneider Electric PowerChute Serial Shutdown は、デスクトップ、サーバー、ワークステーション向けに、システムの正常なシャットダウンとエネルギー管理機能を提供するUPS管理ソフトウェアです。 PowerChute Serial Shutdown v1.2.0.301 以前 には、ブルートフォースによるパスワード破解を防ぐため、ログイン試行が3回失敗すると2分間「ロックアウト」する仕組みが含まれています。PowerChute...

CVE-2018-6574

このリポジトリには、CVE-2018-6574 "go get RCE" の PoC が含まれています。これは、サードパーティのパッケージをダウンロードする際にコマンドを実行することを可能にした脆弱性です。これは、cflags が外部ライブラリの設定を許可していたために可能でした。この PoC では、外部ライブラリがコンストラクタでコマンドを実行します。...

CVE-2026-76579: Improper Neutralization of Input During Web Page Generation

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'esi' parameter in all versions up to, and including, 7.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

DEBIAN-CVE-2026-93852

In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...

UBUNTU-CVE-2026-93852

In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...

CVE-2026-93852

In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...

CVE-2026-93852

OpenStack Blazar before 17.0.1 has a broken authorization flaw in the V2 lease listing endpoint (GET /v2/leases). The endpoint returns leases for every project without enforcing project scoping or an administrator-only policy, allowing any authenticated user with REST API access to enumerate leas...

EUVD-2026-83273

In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...

CVE-2026-93852

In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...

CVE-2026-93852

In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...

CVE-2026-76901: Authorization Bypass Through User-Controlled Key

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.4, GET /pool/lead/get/id in PoolClueController.get and GET /pool/account/get/id in PoolCustomerController.get use bare pool-read permission checks without the CsPermission...

CVE-2026-93852: Missing Authorization

In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...

CVE-2026-63646: Exposure of Sensitive Information to an Unauthorized Actor

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.2, GET /mcp/form/config/formKey calls McpController.getMcpField without authentication because ShiroFilter.addPublicPathFilters marks /mcp/ as anonymous and the controller...