1434 matches found
RE11S_1.11-formAccept-CommandInjection
RE11S1.11-formAccept-CommandInjection Qi An Xin Tiangong Lab에서 인턴십을 하는 동안 RE11S1.11 라우터에서 명령 주입 취약점을 발견했습니다. bin 디렉터리의 webs 파일을 분석한 결과, formAccept 함수에 명령 주입 취약점이 포함되어 있음을 발견했습니다. 명령 주입은 submit-url 키 값에 의해 트리거될 수 있으며, 이로 인해 시스템 명령 주입이 발생합니다. 라우터를 어떻게 시뮬레이션할 수 있나요 firmAE로 시뮬레이션하려면 다음 명령을 사용하세요...
Hybrid Submit
Скрипт пакетной отправки в Hybrid Analysis Этот скрипт на Python рекурсивно сканирует папку и отправляет исполняемые файлы, скрипты, документы и другие релевантные файлы в Hybrid Analysis Falcon Sandbox для автоматического анализа вредоносного ПО. Возможности Рекурсивный обход каталогов Отправка...
CSRF-exploit-generator
CSRF-exploit-generator Генератор CSRF -эксплойтов позволяет пользователям создавать форму CSRF-эксплойта с настраиваемыми параметрами. CSRF-exploit-generator Возможности Ввод целевого URL: указывает URL-адрес, который будет использоваться для эксплуатации. Ввод POST-параметров: позволяет добавлят...
magento-upload-auto-submit-zoneh
magento-upload-auto-submit-zoneh CVE-2025-54236 ⚠️ ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ ⚠️ КРИТИЧЕСКОЕ ПРЕДУПРЕЖДЕНИЕ! Этот инструмент был создан исключительно для: ✅ Образовательных целей и исследований в области безопасности ✅ Авторизованного тестирования на проникновение ✅ Оценки безопасности систем,...
CVE-2026-48549
Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...
CVE-2026-48549
Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are affected by a CSRF vulnerability in cmd.cgi . The root cause is that when no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a ...
CVE-2026-48549 Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie
Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...
CVE-2026-48549 Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie
Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...
EUVD-2026-66599
Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...
Linux Distros Unpatched Vulnerability : CVE-2026-48549
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: erofs: Add GFPNOIO to the bio completion if necessary. The bio completion path in the process context e.g., dm-verity will directly call into decompression instead of triggering another workqueue context for minimal scheduling...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fixed the issue where the fence was put before waiting in amdgpuamdkfdsubmitib. The amdgpuamdkfdsubmitib function submits a GPU job and obtains a fence from amdgpuibschedule. This fence is used to wait for the job to...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: nullblk: Fixed a issue where a NULL pointer dereference occurred when configuring ‘power’ and ‘submitqueues’. Writing ‘power’ and ‘submitqueues’ concurrently would trigger a kernel panic. Test script: bash modprobe nullblk...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: removing redundant scheduler job cleanup when CS aborts. When command submission fails due to an invalid userptr in amdgpucssubmit, legacy code will perform cleanup of scheduler jobs. However, this is completely...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: drm/msm: Another leak in the submit error path has been fixed. putunusedfd does not free the allocated file if we have already performed fdinstall. Therefore, we also need to free the syncfile. Patchwork:...
Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: btrfs: Do not clean up the repair bio if submission fails. The submission helper always runs bioendio on the bio if submission fails. Therefore, cleaning up the bio only leads to various use-after-free errors and NULL pointer...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: nilfs2: A potential use-after-free issue has been addressed in nilfsgccachesubmitreaddata. In nilfsgccachesubmitreaddata, the function brelsebh is called to decrement the reference count of bh when the call to nilfsdattranslate...
CVE-2026-75948
Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 - The frontend "Submit an Event" form stores the image and file fields as raw strings with no output-side HTML-attribute escaping...
SUSE CVE-2026-74456
In the Linux kernel, the following vulnerability has been resolved: can: peakusb: peakusbstart: fix double free of transfer buffer on URB submit error In peakusbstart, each RX URB transfer buffer is allocated with kmalloc and the URB is flagged URBFREEBUFFER so that the final usbfreeurb also free...
AZL-96012 CVE-2026-74456 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: can: peakusb: peakusbstart: fix double free of transfer buffer on URB submit error In peakusbstart, each RX URB transfer buffer is allocated with kmalloc and the URB is flagged URBFREEBUFFER so that the final usbfreeurb also free...