arp-dns-spoof

설치Debian 기반 Linux 배포판에서 Scapy 설치 % sudo apt-get install tcpdump graphviz imagemagick python-gnuplot python-crypto python-pyx % pip install scapy python-NetfilterQueue 설치 % sudo apt-get install build-essential python-dev libnetfilter-queue-dev % git clone...

CVE-2026-77812

CVE-2026-77812 — DJI Drone Cleartext BLE Transmission of Wi-Fi PSK and Session UUID POC CVE record: https://vulners.com/cve/CVE-2026-77812 NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77812 Description DJI Drone expose a DUML control channel over Bluetooth. Every message on that channel — in bo...

SOC335---CVE-2024-49138-Exploitation-Detected

whoami root@soc: cat casefile.txt Platform : LetsDefend Case : SOC335 - CVE-2024-49138 Exploitation Detected EventID : 313 Alert T...

CVE-2026-104853 Nx: Path traversal in nx migrate package-migrations extraction

Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A hostile direct dependency or a package...

CVE-2026-104853

Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A hostile direct dependency or a package...

CVE-2026-104853

The monorepo solution Nx is vulnerable to a path traversal vulnerability in versions 13.10.0 through 22.7.10 and 23.2.1 . During migration planning, the software reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A host...

CVE-2026-104853 Nx: Path traversal in nx migrate package-migrations extraction

Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A hostile direct dependency or a package...

CVE-2026-104853 Nx: Path traversal in nx migrate package-migrations extraction

Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A hostile direct dependency or a package...

Blackash-CVE-2025-61757

🚨 CVE-2025-61757 — 사전 인증 RCE 경고 🚨 🧩 요약 ID: CVE-2025-61757 제품: Oracle Identity Manager Oracle Fusion Middleware 구성 요소: REST WebServices 영향을 받는 버전: 12.2.1.4.0 & 14.1.2.1.0 심각도: 🔴 치명적 — 9.8 CVSS 3.1 게시일: 2025년 10월 21일 유형: 중요 기능에 대한 인증 누락 CWE-306 🚨 취약점으로 가능한 것 이것은 사전 인증 원격 익스플로잇 입니다: 🌐 네트워크로 익스플로잇 가능...

CVE-2026-94485

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-94486

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

CVE-2026-51901

SuperAGI up to 0.0.14 is vulnerable to Incorrect Access Control. The agent execution controller endpoint /api/agentexecutions/schedule allows authenticated users from one organization to schedule existing agents belonging to a different organization without proper authorization checks. The endpoi...

CVE-2026-104908

MISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint was intended to create a new decaying model belonging exclusively to the importing user's organisation, with the default flag forced to off. However, the application stripped...

Certighost-CVE-2026-54121

Document Type: Detection Use Case Related CVE: CVE-2026-54121 Certighost Author: Youssef Benchater Detection Use Case: Certighost CVE-2026-54121 This document describes the Splunk detection built for CVE-2026-54121. It follows the standard detection use case format so it can sit in a detection...

Exploit for CVE-2026-103978

CVE-2026-103978 - Unauthenticated path traversal in OPNMGR Ar...

rmcp OAuth client fetches server-controlled resource_metadata URLs

Summary The rmcp OAuth client accepts a server-controlled resourcemetadata= URL from the WWW-Authenticate header and fetches it without same-origin or private-network validation. An attacker-controlled MCP server can return a 401 WWW-Authenticate: Bearer resourcemetadata="..." header pointing at ...

GHSA-C9XM-49CP-XCR9 rmcp OAuth client fetches server-controlled resource_metadata URLs

Summary The rmcp OAuth client accepts a server-controlled resourcemetadata= URL from the WWW-Authenticate header and fetches it without same-origin or private-network validation. An attacker-controlled MCP server can return a 401 WWW-Authenticate: Bearer resourcemetadata="..." header pointing at ...

CVE-2026-104908 MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flagging

MISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint was intended to create a new decaying model belonging exclusively to the importing user's organisation, with the default flag forced to off. However, the application stripped...

EUVD-2026-91745

MISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint was intended to create a new decaying model belonging exclusively to the importing user's organisation, with the default flag forced to off. However, the application stripped...

CVE-2026-104908

MISP versions prior to 2.5.48 are vulnerable to an improper input validation vulnerability in the decaying model import functionality. The application fails to adequately sanitize nested model keys during the import process, as it only strips top-level id and uuid fields while pinning org_id and ...