SRS Simple Hits Counter 1.0.3-1.0.4 - Unauthenticated Blind SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields. id: CVE-2020-5766 info: name: SRS Simple Hits Counter 1.0.3-1.0.4...

pixma

이것은 무엇인가요? Canon PIXMA 시리즈의 펌웨어를 분석을 위해 언패킹하는 작은 도구들입니다. 동기 일부 Pixma 프린터가 폐잉크 카운터를 재설정할 수 없어 프린트를 거부하고 있습니다. 폐잉크 용기를 교체했음에도 불구하고 말이죠. 그래서 카운터를 재설정하는 방법에 대한 단서를 찾기 위해 펌웨어의 내부 동작이 궁금해졌습니다. 하지만 곧 포기했습니다. 그럼에도 불구하고 흥미로웠으며, 다른 연구자들에게 유용할 수도 있을까요? 기본적으로,...

Umbrella_android

Umbrella Umbrella는 Security First에서 개발한 안드로이드 모바일 앱으로, 인권 운동가들에게 각 보안 상황에서 무엇을 해야 하는지에 대한 정보와 이를 수행하는 데 필요한 도구를 제공합니다. 사용자는 데이터 보호, 안전한 전화/이메일, 안전한 인터넷 접속, 안전한 여행 계획, 사무실/집 보호, 대감시 활동, 또는 납치/체포/대피 대처 등 원하는 작업을 선택할 수 있습니다. 상황이 선택되면 앱은 주어진 상황에서 무엇을 해야 하고 어떤 도구를 사용해야 하는지 개요를 제공합니다. 그 다음에는 사용자 정의, 저장...

Specter-FlipperZero

The waveform is not a graphic. It is 128 columns of 13.56 MHz carrier that Specter recorded off a real polling reader at 8 ms per column, read back out of the screenshot beside it. Its duty measures 28% where the device's own counter printed 27%, and both numbers are on the banner. Sweep for the...

CVE-2026-93647

An unauthenticated calendar sender can place active markup in a COUNTER message's RFC From address. Selecting the message in Zimbra Classic triggers stored XSS, allowing the attacker to access mailbox data and act as the victim...

EUVD-2026-87102

An unauthenticated calendar sender can place active markup in a COUNTER message's RFC From address. Selecting the message in Zimbra Classic triggers stored XSS, allowing the attacker to access mailbox data and act as the victim...

CVE-2026-93647 Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address

An unauthenticated calendar sender can place active markup in a COUNTER message's RFC From address. Selecting the message in Zimbra Classic triggers stored XSS, allowing the attacker to access mailbox data and act as the victim...

CVE-2026-93647

The Zimbra Collaboration Suite Classic Web Client is vulnerable to a stored Cross-Site Scripting (XSS) flaw. An unauthenticated calendar sender can inject active markup into the RFC From address of a COUNTER message . When a user selects this message within Zimbra Classic, the XSS is triggered, p...

EUVD-2026-86895

In the Linux kernel, the following vulnerability has been resolved: perf: RISC-V: store available counter mask as bitmap The available-counter mask was a single unsigned long, but iteration uses RISCVMAXCOUNTERS, which is 64. On RV32 that reads past the object. Filling with an unsigned-long bit a...

CVE-2026-14382

CVE-2026-14382 バイナリトリガー Bug fix root@kitploit: $250000492218546 High CVE-2026-14382: Insufficient validation of untrusted input in ANGLE. Reported by anonymous on 2026-03-13 この脆弱性の根本原因はCVE-2025-6558と類似しているようです。現在の分析に基づくと、CVE-2025-6558の亜種である可能性が高いと考えています。そこで、CVE-2025-6558のPoCを応用して以下のファイルを作成しました。...

CVE-2020-0022

CVE-2020-0022 Insinuator の素晴らしいブログ記事とコードに心から感謝します! 結果 insinuator の投稿に記載されているすべての手順を完了し、さらに追加の作業も行いました。これらの手順は README.md ファイルに記載するには数が多すぎるため、前述の Insinuator の投稿を参照してください。 エクスプロイトは以下の時点まで完全に完成しています: 1. 攻撃者が制御する十分に大きなメモリ領域のアドレスがリークされる 2. プログラムカウンタがカスタムアドレスを指すように変更される 3. 失敗の確率が大幅に低下するまで、自動的にリトライが行われる ...

CVE-2020-0022

CVE-2020-0022 Insinuator の素晴らしいブログ記事とコードに感謝します。 結果 insinuator の投稿に記載されたすべての手順とそれ以上のことが完了しました。これらは多くの手順であり、README.md ファイルにすべてを記載するのは大変なので、上記の Insinuator の投稿 を参照してください。 エクスプロイトは以下の点まで完全に完了しています： 1. 攻撃者が制御する十分に大きなメモリ領域のアドレスが漏洩する 2. プログラムカウンタがカスタムアドレスを指すように変更される 3. 自動的に再試行が行われ、失敗の可能性が大幅に減少する 4...

twint-utils

twint-utils 이들은 Twint의 활용 사례입니다. 기여하려면 협업 가이드라인을 확인해 주세요. 상호 팔로워 탐지기 Mutuals Detector Mufos.py는 Twint를 사용하여 주어진 시드 계정의 상호 팔로워를 감지합니다. 이는 소셜 네트워크 또는 밀리외 감지를 위한 다른 정교한 파이프라인에 통합될 수 있습니다. 현재 팔로워/팔로잉 수가 많은 계정에는 너무 느려서 유용하지 않습니다. 플레이그라운드 모드에서 열어서 실험해볼 수 있는 호스팅 버전이 있습니다. 미디어 다운로더 Media Downloader...

AZL-103781 CVE-2026-97477 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/counter: Fix numcounters leak on bindqp failure in allocandbind When rdmacounterbindqp fails in allocandbind, the error path jumps to errmode which frees the counter without decrementing portcounter-numcounters. The only pla...

CVE-2026-97477

The Linux kernel contains a memory leak vulnerability in the RDMA/counter component within the alloc_and_bind() function. When __rdma_counter_bind_qp() fails, the error path jumps to err_mode, which frees the counter without decrementing port_counter->num_counters. This results in a leak of nu...

CVE-2026-97477 RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()

In the Linux kernel, the following vulnerability has been resolved: RDMA/counter: Fix numcounters leak on bindqp failure in allocandbind When rdmacounterbindqp fails in allocandbind, the error path jumps to errmode which frees the counter without decrementing portcounter-numcounters. The only pla...

Linux Distros Unpatched Vulnerability : CVE-2026-97477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/counter: Fix numcounters leak on bindqp failure in allocandbind When rdmacounterbindqp fails in allocandbind, the error path jumps to errmode which frees t...

EUVD-2026-83662

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive, due to a variable being reused as a loop counter so that the check always passes, allowing users granted its gallery-management capability...

CVE-2026-81650

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive, due to a variable being reused as a loop counter so that the check always passes, allowing users granted its gallery-management capability...

CVE-2026-1801C

CVE-2026-1801C QUANTUM-SHIFT / CVE-2026-180A7 BAL-JUMP: Source 2（server.dll）における移動入力ヒューリスティックの静的解析 概要 本稿では、Counter-Strike 2 エンジン（server.dll）に実装された2つのクライアント側移動検証ルーチン、すなわち入力自動化 / SOCD 評価器（sub1801C6B30、CVE-2026-1801C / QUANTUM-SHIFT と指定）およびジャンプ要求レートリミッタ（sub180A7EDB0、CVE-2026-180A7 / BAL-JUMP...