CVE-2021-45232-RCE

CVE-2021-45232 CVE-2021-45232 Apache APISIX Dashboard API 인증 없이 원격 코드 실행 버전: 2.10.1 Fofa: title="Apache APISIX Dashboard" POC: IP:PORT/apisix/admin/migrate/export...

go-dbmigrate

migrate Go로 작성된 마이그레이션 헬퍼입니다. 기존 Golang 코드에서 사용하거나 CLI를 통해 명령을 실행할 수 있습니다. GoCode import github.com/mattes/migrate/migrate CLI go get -u github.com/mattes/migrate 기능 구현이 매우 쉬운 Driver 인터페이스. ^C 입력 시 실행 중인 마이그레이션을 안전하게 종료. 마법 같은 검색 경로 루틴 없음, 하드코딩된 설정 파일 없음. CLI는 migrate 패키지를 기반으로 구축됨. 사용 가능한 드라이버...

CVE-2021-45232-RCE

CVE-2021-45232-RCE CVE-2021-45232-RCE-다중 스레드 배치 취약점 탐지 FOFA 검색 title="Apache APISIX Dashboard" 영향 범위 Apache APISIX Dashboard 2.10.1 POC: IP:PORT/apisix/admin/migrate/export 도움이 되셨다면, 별Star 하나 눌러주시면 감사하겠습니다! 배치 취약점 탐지 의존성 문제는 직접 해결하시고, 모르면 검색하세요. 일반적으로 모듈 오류가 발생하면 해당 의존성을 직접 설치하세요. 작성 및 탐지 일부 참고 출...

CVE-2026-42413 WordPress Snapshotify – All-in-One Backup & Restore & Migrate plugin <= 1.3.2 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Snapshotify All-in-One Backup & Restore & Migrate = 1.3.2 versions...

CVE-2026-42413 WordPress Snapshotify – All-in-One Backup & Restore & Migrate plugin <= 1.3.2 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Snapshotify All-in-One Backup & Restore & Migrate = 1.3.2 versions...

CVE-2026-42413

The Snapshotify – All-in-One Backup & Restore & Migrate WordPress plugin (versions

NPM: Nx: Path traversal in nx migrate package-migrations extraction

NPM: Nx: Path traversal in nx migrate package-migrations extraction vulnerability discovered by ? in WordPress Npm nx versions = 13.10.0, 22.7.10...

WordPress Snapshotify – All-in-One Backup & Restore & Migrate plugin <= 1.3.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Snapshotify All-in-One Backup & Restore & Migrate versions = 1.3.2...

Craftcms-PoC-CVE-2026-31266

CVE-2026-31266 - Craft CMS 권한 누락 CVE 정보 필드| 값 ---|--- CVE ID| CVE-2026-31266 공급업체| Pixel & Tonic 제품| Craft CMS 영향받는 버전| self::ALLOWANONYMOUSLIVE | self::ALLOWANONYMOUSOFFLINE, ; 개념 증명 allowAdminChanges=false 설정 상태 curl -X POST "http://target/actions/app/migrate" 증거 공격 전: mysql SELECT COUNT FROM...

CVE-2026-104853 Nx: Path traversal in nx migrate package-migrations extraction

Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A hostile direct dependency or a package...

CVE-2026-104853 Nx: Path traversal in nx migrate package-migrations extraction

Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A hostile direct dependency or a package...

CVE-2026-104853 Nx: Path traversal in nx migrate package-migrations extraction

Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A hostile direct dependency or a package...

CVE-2026-98087

In the Linux kernel, the following vulnerability has been resolved: sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate A migratedisable'd RT task cannot be moved to another CPU, but the scheduler still keeps such a task on that CPU's pushable list rq-rt.pushabletasks and still...

PT-2026-98750

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scheduler for real-time RT and deadline DL tasks where tasks that have called migrate disable are not correctly skipped when picking a push candidate. The schedule...

PT-2026-97956

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular lock dependency exists in the ext4 ext migrate function. This occurs between s writepages rwsem and sb internal used for freeze protection, which can lead to a deadlock. The...

PT-2026-97971

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/pagemap component where drm pagemap migrate unmap pages relies on a pages array to identify pages requiring DMA unmapping. Because drm pagemap migration unlock...

CVE-2026-49292

Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial setup and proxies repeated requests to Kiwi/manage.py migrate. The migration command is reentrant, so repeated access...

CVE-2026-49292 Kiwi TCMS: The /init-db/ page renders and responds to requests after first use

Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial setup and proxies repeated requests to Kiwi/manage.py migrate. The migration command is reentrant, so repeated access...

EUVD-2026-82384

Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial setup and proxies repeated requests to Kiwi/manage.py migrate. The migration command is reentrant, so repeated access...

CVE-2026-49292 Kiwi TCMS: The /init-db/ page renders and responds to requests after first use

Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial setup and proxies repeated requests to Kiwi/manage.py migrate. The migration command is reentrant, so repeated access...