CVE-2023-46980

CVE-2023-46980 Best Courier Management System v.1.000 における問題により、リモート攻撃者が細工したスクリプトを userID パラメータに渡すことで、任意のコードを実行し、特権を昇格させることが可能です。 追加情報 YT のビデオ POC リンク ; https://youtu.be/3Mz2lSElg7Y 脆弱性タイプ 不適切なアクセス制御 - アカウント乗っ取り 影響を受けるコンポーネント ユーザー名とパスワードを更新できるユーザー更新フォーム 攻撃ベクトル パスワードリセットで簡単に取得できるユーザーIDが必要です。 発見者...

cve-2024-10914-port

Rust と Python に移植された CVE-2024-10914 だって、理由なんてないから これは何か cve-2024-10914 は最近発見された、一部の dlink ルーターに影響を与える深刻度 9.8 の重大な脆弱性です。これらのルーターは EOL（サポート終了）に達しているため、dlink はこの脆弱性のパッチ適用を拒否しています。その言い分は「貧乏人は諦めて新しいルーターを買え」といったところです。 仕組み 影響を受けるデバイスは、通常 /cgi-bin/accountmgr.cgi?cmd=cgiuseradd&name= の下に HTTP...

CVE-2026-103680

A heap-based buffer overflow exists in the tnef component within the find_free_number() function. The vulnerability occurs during the generation of numbered backup suffixes for duplicate filenames when numbered backups are enabled and file overwriting is disabled. An attacker can trigger this by ...

CVE-2026-103680 Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation

A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...

kernel: tipc: fix double-free in tipc_buf_append()

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. This vulnerability, a double-free, occurs when the tipcbufappend function incorrectly handles memory after a socket buffer skb reallocation. An attacker could potentially exploit this to cause system...

kernel: netfilter: flowtable: publish GC-visible tuple last

A flaw was found in the netfilter flowtable component of the Linux kernel. This vulnerability occurs due to a timing issue where the system's garbage collection can free a network flow while it is still being set up. This can lead to a 'use-after-free' condition, where the system attempts to acce...

Vulnerability hidden in Apple CoreGraphics

Apple has identified a vulnerability in CoreGraphics on iOS, iPadOS, and macOS. This vulnerability involves an out-of-bounds write operation within the CoreGraphics component. An attacker can exploit this vulnerability by processing specially crafted files, which may lead to the execution of...

gvfs: SFTP: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

CVE-2026-102317

A flaw was found in chromium-browser. An improper privilege management issue exists within the Mojo inter-process communication IPC framework. A local attacker could exploit this flaw by running a crafted local program to bypass the browser's sandbox security boundary. Successful exploitation cou...

CVE-2025-69599

CVE-2025-69599 著者: Rafael José Núñez Gulías 会社: Iberian Var Group 影響を受ける製品: RayVentory Scan Engine 12.6 Update 8 およびそれ以前のバージョン Raynet 勧告: RSEC200965 Raynet の rvia は、制御されていない検索パス要素 の問題に対して脆弱です。共有オブジェクトをロードし、システムバイナリ（.so やヘルパーバイナリなど）を呼び出す際に相対パスが使用されるため、ユーザーが PATH 環境変数の操作を通じて実行される最終的なバイナリや .so...

CVE-2026-103531

A flaw was found in OpenSC. A stack-based buffer overflow vulnerability exists in the SetCOS smart card driver during the handling of file control information in the setcosconstructfci44 function. By supplying manipulated card attributes, an attacker could trigger memory corruption, potentially...

CVE-2026-48778-PoC

CVE-2026-48778 — Notepad++ 任意コード実行 PoC 重要度: High CVSS 7.8 | 影響を受けるバージョン: Notepad++ ≤ 8.9.6 | 修正済み: v8.9.6.1 CVE-2026-48778 の PoC スクリプトです。Notepad++ ≤ 8.9.6 における任意コード実行の脆弱性を実証します。 詳細な技術情報については、公式セキュリティアドバイザリ を参照してください。 使い方 python cve-2026-48778.py 実行後の操作: ファイル → 含むフォルダを開く → cmd 期待される結果: calc.exe が...

CVE-2026-48800-PoC

CVE-2026-48800 — Notepad++ 任意コード実行 PoC 深刻度: High | 影響を受けるバージョン: Notepad++ ≤ 8.9.6 | パッチ適用済み: v8.9.6.1 CVE-2026-48800 の PoC スクリプト。Notepad++ ≤ 8.9.6 における shortcuts.xml 経由の任意コード実行の脆弱性です。 詳細な技術情報は、公式セキュリティアドバイザリ を参照してください。 使用方法 python cve-2026-48800.py 実行後の発動方法: Run → Command Injection Demo 期待される結果:...

CVE-2026-76147

A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...

EUVD-2026-90489

A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...

CLEANSTART-2026-OK73778 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass

Security vulnerability affects the kube-state-metrics-fips package. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...

EUVD-2025-209814

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

Rocky Linux 8 [CIQ] Security Update: perl-DBI / perl-DBI-debuginfo / perl-DBI-debugsource Multiple Vulnerabilities (crlsa-2026_38901)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202638901 advisory. DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution CVE-2026-9698 Tenable has extracted the preceding description block...

Rocky Linux 10.2 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-data / vim-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_66336)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202666336 advisory. vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service v...

Rocky Linux 9 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc (crlsa-2025_9448)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259448 advisory. emacs: arbitrary code execution via Lisp macro expansion CVE-2024-53920 Tenable has extracted the preceding description block directly from the CIQ security advisor...