290 matches found
CVE-2025-61456
🛡️ CVE開示: CVE-2025-61456 — Eコマースプロジェクトにおける反射型XSS 開示日: 2025年10月14日 CVE ID: CVE-2025-61456 深刻度: MEDIUM CVSS 6.1 🧩 概要 E-commerce Project v1.0 の index.php...
CVE-2018-4878
CVE-2018-4878 Flash Exploit Poc '빠르고 간단하게' 자세한 내용은 다음을 참조하세요. http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html 원본 Poc https://github.com/anbai-inc/CVE-2018-4878 이 저장소에서는 크래시 문제를 수정하고 셸코드에 적절한 공간을 계산했습니다. 자세한 내용은 익스플로잇을 확인하세요. 트위터: @SyFi2k...
weakpass
Weakpass Here, you can find the list of tools and example of API server from weakpass.com for password and hash cracking in one place. 📂 Folder Structure tools A collection of password and hash cracking tools. Check them out: Kraker-js Lookup Passcheck Passgen libs Links to the libraries used in...
CVE-2018-4878
CVE-2018-4878 샘플 샘플 출처：https://github.com/brianwrf/CVE-2017-4878-Samples 분석 보고서：http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html python 스크립트의 exploit 출처：https://github.com/vysec/CVE-2018-4878 cve-2018-4878.py 는 exploit 생성 스크립트이며, shellcode는 metasploit으로 생성됩니다. 기본값은 Windows 계산기를...
Firefox-ANGLE-CVE-2024-0741
Firefox 123에서 수정됨. 수정: https://source.chromium.org/chromium//chromium/angle/angle/+/f8fae1ff4fae14fc6ba0aa1dc3af2e13a6e9a597. 체리픽: https://github.com/mozilla/angle/commit/ddaf44ac75d5d0390873c2af193e02159ecbe672...
Siemens SIMATIC S7-1500 CPU 1518 MFP Write-what-where Condition (CVE-2026-46323)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505968; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...
Astra Linux – Vulnerability in Firefox and Thunderbird
Memory safety bugs exist in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox version...
Astra Linux – Vulnerability in Firefox
The incorrect object was checked as NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. This vulnerability affects Firefox versions earlier than 123...
Astra Linux – Vulnerability in Firefox
Memory safety bugs exist in Firefox 122. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects versions of Firefox prior to 123...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially perform out-of-bounds memory access via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Firefox
When opening a website using the firefox:// protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox versions 123...
Astra Linux – Vulnerability in Firefox
Memory safety bugs exist in Firefox 123. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 124...
CLSA-2026-1789159265 TuxCare security update for 123 packages (1 CVE)
TuxCare rebuilt 123 packages to address 1 CVE. Fixed in 11.0.31.tuxcare0001...
CLSA-2026-1786482291 TuxCare security update for 123 packages (1 CVE)
TuxCare rebuilt 123 packages to address 1 CVE. Fixed in 10.0.29.tuxcare0003...
CLSA-2026-1773879503 TuxCare security update for 123 packages (1 CVE)
TuxCare rebuilt 123 packages to address 1 CVE. Fixed in 11.0.28.tuxcare0001...
Real-Time Assessment of Distribution Grid Security through Adaptive Smart Meter Measurements
The rapid expansion of distributed energy resources is heightening uncertainty and variability in distribution system operations, potentially leading to power quality challenges such as voltage magnitude violations and excessive voltage unbalance. Ensuring the dependable and secure operation of...
GHSA-2JCC-MXV7-P3F9 oasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)
Summary From v1.13.2 through v1.18.0, oasdiff did not enforce --allow-external-refs=false library: openapi3.Loader.IsExternalRefsAllowed = false when loading a spec from a git revision the rev:path form, e.g. main:openapi.yaml. External $refs were resolved on that load path even when external ref...
PT-2026-56295
Name of the Vulnerable Software and Affected Versions oasdiff versions 1.13.2 through 1.18.0 Description When loading a specification from a git revision using the rev:path format, the software fails to enforce the --allow-external-refs=false setting specifically the...
Amazon Linux 2 : soci-snapshotter, --advisory ALAS2DOCKER-2026-123 (ALASDOCKER-2026-123)
The version of soci-snapshotter installed on the remote host is prior to 0.13.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-123 advisory. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C...
