Nextjs_RCE_Exploit_Tool

Next.js RCE Exploit Tool CVE-2025-55182 !CAUTION 免責事項 / Disclaimer このツールはセキュリティ研究および教育 目的に限り使用できます。ユーザーは本ツールを使用してテストを行う際、対象システムの正当な許可 を得ていることを確認する必要があります。 許可なく侵入テスト、悪意のある攻撃、またはその他の違法な目的に使用することを固く禁じます。脆弱性の認識及び利用により生じたすべてのリスクと法的責任はユーザーが自己責任 で負うものとし、本プロジェクトの開発者は一切の責任を負いません。...

kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps

A flaw was found in the libceph component of the Linux kernel. A remote attacker could send a specially crafted monitor map monmap that advertises zero monitors. This malformed monmap is incorrectly processed as valid, which can lead to a client crash when attempting to open a session. This...

nginx-map-risk-audit

CVE-2026-42533: NGINX Map 정규식 위험 검토 CVE-2026-42533에 대한 방어적 연구 노트입니다. 이 CVE는 정규식 캡처와 특정 변수 평가 패턴을 사용하는 map 지시문과 관련된 NGINX 요청 처리의 힙 버퍼 오버플로입니다. 쉽게 말하면: NGINX는 웹 서버이자 리버스 프록시 소프트웨어입니다. 웹사이트와 API 앞에 위치하여 웹 요청을 받아 어디로 보낼지 결정합니다. map 규칙은 "이 요청 값이 X처럼 보이면 이 변수를 Y로 설정하라"는 NGINX 구성 기능입니다. 정규식 캡처는 패턴 일치에서...

CVE-2021-41277

CVE-2021-41277 Metabase GeoJSON 맵 로컬 파일 포함 버전: x.40.0-x.40.4 사용법 : chmod -x CVE-2021-41277.sh ./CVE-2021-41277.sh http://ip:port/ /etc/passwd 참조 https://vulners.com/cve/CVE-2021-41277...

CVE-2026-14431

CVE-2026-14431 버그 수정 https://chromium-review.googlesource.com/c/v8/v8/+/7950517 maglev Check map of inlined array in ArrayIteratorPrototypeNext Fixed: 523884658 Change-Id: I2a2bba817952d7023eb4b97ad41d8bb460fb9359 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7950517 Commit-Queu...

Samba-CVE-2007-2447-Exploit-Username-Map-Script

Samba CVE-2007-2447 익스플로잇 Username Map Script 이 저장소는 Samba 서버버전 3.0.203.0.25rc3에서 CVE-2007-2447 취약점의 악용을 자동화하도록 설계된 Python 스크립트를 포함합니다. 이 도구는 오로지 교육적 목적과 승인된 침투 테스트를 위해 개발되었습니다. 📝 기술·학술적 설명 "Username Map Script" 취약점은 Samba 구성에서 username map script 옵션이 활성화된 경우 사용자 이름 입력에 대한 검증새니타이제이션이 부족하여 발생합니다. ...

GPEWebDefender

GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...

EUVD-2026-87829

heym before 0.0.91 contains a sandbox escape vulnerability in the expression engine's DotList map/filter and fallback resolver that allows authenticated users to execute arbitrary Python code. Attackers can craft workflow expressions using dunder attribute access through item expressions or the...

SUSE SLES16 Security Update : jsoup, re2j (SUSE-SU-2026:23867-1)

"The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:23867-1 advisory. This update for jsoup, re2j fixes the following issue: - CVE-2026-75140: The builder copies the entire inherited namespace map on every...

CVE-2026-41729

CVE-2026-41729: Spring Data REST JSON Patch Map Key SpEL Injection PoC 이 저장소는 Spring 공식 보안 권고문으로 공개된 CVE-2026-41729의 최소 재현 PoC입니다. 공식 권고문: https://spring.io/security/cve-2026-41729/ 공식 제목: Spring Data REST SpEL Injection via Map Key in JSON Patch 심각도: High CVSS v3.1:...

POC-GeoLeak-CVE-2026-52715

GeoLeak — CVE-2026-52715 の PoC WordPress 用プラグイン GEO my WordPress = 4.5.5 における未認証 SQL インジェクション（CVSS 9.3）である GeoLeak （CVE-2026-52715）の教育用 Proof of Concept。マップ境界のパラメータ swlatlng と nelatlng は、WHERE 句にサニタイズなしで補間されます。自己完結型 Docker ラボ + time-based・boolean-based・1 文字ずつの排出手法を用いたエクスプロイト。 目次 1. 実行概要 2. 法的免責事項...

SUSE CVE-2026-98149

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU IDs Per-CPU array, hash, and cgroup storage map updates without BPFFCPU or BPFFALLCPUS use a value buffer whose per-CPU slots are packed in possible-CPU order. The buffer is siz...

CVE-2026-98149

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU IDs Per-CPU array, hash, and cgroup storage map updates without BPFFCPU or BPFFALLCPUS use a value buffer whose per-CPU slots are packed in possible-CPU order. The buffer is siz...

DEBIAN-CVE-2026-98149

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU IDs Per-CPU array, hash, and cgroup storage map updates without BPFFCPU or BPFFALLCPUS use a value buffer whose per-CPU slots are packed in possible-CPU order. The buffer is siz...

CVE-2026-98065

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject key-less BTF for hash maps mapcheckbtf allows a key-less BTF btfkeytypeid == 0 only for maps that have a -mapcheckbtf callback, and leaves the actual decision to that callback. Hash maps used to have no -mapcheckbtf, ...

AZL-104549 CVE-2026-98033 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve inner map identity in callback frames Callback frame constructors initialize map-typed argument registers with markregknownzero and then restore mapptr. This clears mapuid, which is the only field distinguishing inn...

DEBIAN-CVE-2026-98033

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve inner map identity in callback frames Callback frame constructors initialize map-typed argument registers with markregknownzero and then restore mapptr. This clears mapuid, which is the only field distinguishing inn...

DEBIAN-CVE-2026-97952

In the Linux kernel, the following vulnerability has been resolved: sunvdc: unmap LDC cookies when the descriptor send fails sendrequest maps the request's pages into the LDC channel's map table ldcmapsg, fills in the descriptor and marks it VIODESCREADY before ringing the doorbell via...

UBUNTU-CVE-2026-98065

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject key-less BTF for hash maps mapcheckbtf allows a key-less BTF btfkeytypeid == 0 only for maps that have a -mapcheckbtf callback, and leaves the actual decision to that callback. Hash maps used to have no -mapcheckbtf, ...

UBUNTU-CVE-2026-98033

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve inner map identity in callback frames Callback frame constructors initialize map-typed argument registers with markregknownzero and then restore mapptr. This clears mapuid, which is the only field distinguishing inn...