SUSE CVE-2022-29224

Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can perform various types of upstream health checking. One of them uses gRPC. Envoy also has a feature which can "hold" prevent removal upstrea...

EUVD-2026-91022

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

EUVD-2026-90972

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom

CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom Parani M10 IntercomのBluetooth Classic RFCOMMサービスは、安全な認証や適切なアクセス制御を強制せずに公開されています。範囲内に入ると、任意のデバイスが適切なペアリング制限なしに接続を確立し、RFCOMMチャネルに直接アクセスしたり、任意または不正な形式のペイロードを送信したりできます。...

CVE-2022-21907-http.sys

CVE-2022-21907 - http.sys ドライバーの二重解放 Double Free CVE-2022-21907 - http.sys ドライバーの二重解放 Double Free 概要 認証されていない攻撃者が、HTTP プロトコル スタック http.sys 内の unknown coding-list で二重解放を引き起こす「Accept-Encoding」HTTP リクエスト ヘッダーを含む HTTP リクエストを送信してパケットを処理させると、カーネル クラッシュが発生します。 脆弱なシステム Windows Server 2019 および Windows 10...

BlueGate

BlueGate 원격 데스크톱 게이트웨이 취약점CVE-2020-0609 & CVE-2020-0610에 대한 PoC입니다. 제 실수를 지적해 준 ollypwn님께 감사드립니다! 설정 원래 저장소가 제대로 빌드되지 않아 패치된 버전의 pydtls를 사용하고 있습니다. cd pydtls sudo python setup.py install 서비스 거부DoS DoS 공격에 대한 PoC는 dos.py에서 찾을 수 있습니다. 이는 기본적으로 원격 데스크톱 게이트웨이 서비스를 중단시킵니다. 초기 PoC는 커밋 또는 여기에서 확인할 수 있습니...

CVE-2026-93546

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

CVE-2026-93546 Apache HTTP Server: mod_dav_fs namespace overflow

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

CVE-2026-42528

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

ufuzz

UFuzz（Universal Plug and Fuzz）は、自動UPnPファジングツールです。ネットワーク上のすべてのUPnPエンドポイントを列挙し、利用可能なサービスを見つけてファジングします。また、Burpプロキシログを使用してHTTPをファジングする機能もあります。...

CVE-2026-56449

Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

EUVD-2026-90885

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

CVE-2026-42528 Apache HTTP Server: mod_dav shared lock overflow

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

windbg-mcp

WinDbg MCP MCP Model Context Protocol 서버로, 모든 pybag Windows 디버거 함수를 네이티브 MCP 도구로 노출합니다. 모든 MCP 호환 클라이언트Claude Desktop, Claude Code, Cowork, OpenAI Codex CLI, Cursor 및 사용자 정의 에이전트에게 사용자 모드 프로세스, 커널 세션 및 크래시 덤프 분석에 대한 완전한 제어를 제공합니다. 모든 것은 타입화된 도구 호출과 구조화된 JSON 응답을 통해 이루어집니다. 요구 사항 Windows 전용 — pyba...

CVE-2025-29632

Author: HanyiLuo, Yuqi Huo CVE-2025-29632 CVE-2025-29632 で対象となる脆弱性の情報 影響を受けるバージョン: 4.0.0 およびそれ以前のバージョン free5gc が InitialUEMessage を処理する際、nASPDU 参照が nil であるか（つまりヌルポインタであるか）どうかのみをチェックし、nASPDU の内容が空であるかどうかは検証しません。その結果、後続のメッセージ解析で nassecurity.DecodePlainNasNoIntegrityChecknASPDU.Value...

CVE-2022-26937

Windows 네트워크 파일 시스템 충돌 PoC CVE-2022-26937 nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data structure. The corruption...

CVE-2026-42945

CVE-2026-42945 PoC（Go） 한국어 | English nginx HTTP/2 구현CVE-2026-42945 에 대한 탐지 및 익스플로잇 보조 도구로, 승인된 환경 에서 취약점 존재 여부 확인, 패치 효과 대조, 제어 가능한 실험 환경에서 PoC 동작 재현을 위해 사용됩니다. 영향받는 버전대략: nginx 0.6.27 – 1.30.0 ; 1.30.1+ / 1.31.0+ 에서 수정됨. ⚠️ 면책 조항 반드시 읽어주세요 본 저장소는 보안 연구, 취약점 검증 및 방어적 테스트 목적으로만 제공됩니다. 1. 합법적 권한 :...

CVE-2020-11019

CVE-2020-11019 FreeRDP 2.0.0 이하 버전에서 로거가 "WLOGTRACE"로 설정된 상태로 실행하면, 잘못된 배열 인덱스를 읽어 애플리케이션 충돌이 발생할 수 있습니다. 데이터가 로컬 터미널에 문자열로 출력될 수 있습니다. 이 문제는 2.1.0에서 수정되었습니다. 인증| 복잡성| 벡터 ---|---|--- SINGLE| LOW| NETWORK 기밀성| 무결성| 가용성 ---|---|--- NONE| NONE| PARTIAL CVSS 점수: 4 참고 자료...