5197 matches found
CVE-2026-51744
Incorrect access control in the recvmeshinfosync function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to force mesh configuration synchronization from an attacker-controlled host via sending a crafted MQTT message to the csbroker component...
EUVD-2026-69413
An issue in fast-note-sync-service =2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes authTokenKey...
CVE-2026-52111
An issue in fast-note-sync-service =2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes authTokenKey...
CVE-2017-14980
CVE-2017-14980 Sync Breeze Enterprise 10.0.28 - 缓冲区溢出研究 目标 在受控的实验室环境中,研究经典的基于栈的缓冲区溢出漏洞,用于教育目的。 本项目旨在更好地理解: 应用程序模糊测试 崩溃分析 EIP 控制 坏字符识别 内存破坏 Shellcode 执行流程 基础漏洞利用开发方法 环境 Windows 10 虚拟机 Sync Breeze Enterprise 10.0.28 Immunity Debugger Mona.py Python 实验室设置 第一步是在一台配置用于漏洞研究和漏洞利用开发的 Windows 10 虚拟机中安装 Sy...
CVE-2026-28672
CVE-2026-28672 — Apache Ranger UnixUserGroupBuilder OS 命令注入 Apache Ranger user-sync(unixusersync)模块中 OS 命令注入漏洞的可运行概念验证复现程序。 在枚举每个已同步用户所属的组时,UnixUserGroupBuilder 会通过 shell 执行 id 命令,并将用户名 拼接到命令行中: root@kitploit: // ugsync/src/main/java/org/apache/ranger/unixusersync/process/UnixUserGroupBuilder.jav...
CVE-2017-14980
CVE-2017-14980 漏洞利用程序 用于 CVE-2017-14980 的 PoC 漏洞利用程序——Sync Breeze Enterprise 10.0.28 中的一个 基于堆栈的缓冲区溢出 漏洞。 📖 完整的漏洞利用技术分析: 👉 https://davigsantana.github.io/posts/buffer-overflow/ 关于 此仓库包含一个 概念验证 PoC ,为教育和研究目的而开发,演示了利用 Sync Breeze Enterprise 认证 Web 界面中的输入验证漏洞进行攻击。 该漏洞允许 未经身份验证的 远程攻击者导致内存损坏并获得 远程代码执行...
CVE-2026-15718-who-put-ptrs-in-my-wasm
CVE-2026-15718 — 谁把指针放进了我的 wasm 针对 CVE-2026-15718 的概念验证漏洞利用链,该漏洞是 Mozilla SpiderMonkey 的 WebAssembly baseline 编译器("JavaScript: WebAssembly" 组件)中一处缺失 sync 的错误编译。单个零次循环的 array.fill 即可产生 fakeobj 原语;该利用链可升级为对宿主进程的任意读/写 以及任意本机代码执行 (posixspawnp"/bin/sh", ...)。 CVE: CVE-2026-15718(CWE-763,无效指针的释放) 受影响版本...
QNAP HBS 3 - Broken Access Control
An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...
CVE-2026-82367
Exposure of Data Element to Wrong Session vulnerability in ash-project ashgraphql can deliver one subscription's resolved records to a different subscriber's topic. AshGraphql.Subscription.Batcher.dosend/5 reads the resolved batch from the process dictionary via Process.get:batchresolved and then...
CVE-2025-32579
⚠️ CVE-2025-32579 - Sync Posts 插件(WordPress)中的严重 RCE 漏洞 📦 影响版本:Sync Posts 🧨 CVSS 评分:9.9 严重 📁 CVSS 向量:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 🧠 漏洞概述 由 SoftClever Limited 开发的 Sync Posts WordPress 插件存在一个无限制文件上传 漏洞,该漏洞允许经过身份验证的攻击者 在服务器上上传并执行任意 PHP 文件 (例如 Web Shell)。 🔓 根本原因: 该插件接受一个返回 JSON 帖子的...
CVE-2017-14980_syncbreeze_10.0.28_bof
漏洞利用 - CVE-2017-14980 - Sync Breeze Enterprise v10.0.28 本仓库包含一个针对 Sync Breeze Enterprise 10.0.28 版本的缓冲区溢出利用(BOF)概念验证,针对漏洞 CVE-2017-14980 。 描述 该漏洞源于在处理向 /login 端点发送的 POST 请求中的 password 字段时存在不当输入验证。 攻击者可在此字段中发送超长值,从而覆盖 EIP 并允许任意代码执行。 此漏洞利用发送精心构造的有效负载,包含: 520 字节填充('A') 4 字节覆盖 EIP 20 字节 NOP sled...
CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass
CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass A minha versão - CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass no Win7 x64 CVE-2018-6892...
CVE-2025-12674
CVE-2025-12674 KiotViet Sync = 1.8.5 - Nicht authentifizierter Upload beliebiger Dateien 🐚 KiotViet Sync = 1.8.5 - Nicht authentifizierter Upload beliebiger Dateien 📝 Beschreibung Das KiotViet Sync -Plugin für WordPress Versionen bis einschließlich 1.8.5 ist anfällig für das Hochladen beliebiger...
revsync
revsync Plugin di sincronizzazione in tempo reale per IDA Pro, Binary Ninja e Vivisect Sincronizza: Commenti Nomi dei simboli Nomi delle variabili di stack Strutture Copertura del codice quanto tempo è stato dedicato all'analisi di un blocco Installazione su IDA Pro Prima, clona nella directory...
Chromium: CVE-2026-79076 Improper input validation in Sync
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-79013 Improper input validation in Sync
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-78964 Use after free in Sync
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
EUVD-2026-67427
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: hold conn in hciconnectacl/lesync callbacks There is theoretical UAF if the conn is freed while the hcisync task is running. Hold refcount to avoid that...
CVE-2026-61800
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a party holding the cluster key can write, overwrite, or delete arbitrary files under /var/ossec on worker nodes, leading to remote code executi...
CVE-2026-61800 Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a party holding the cluster key can write, overwrite, or delete arbitrary files under /var/ossec on worker nodes, leading to remote code executi...