CVE-2026-107814

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege...

CVE-2026-108158 plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then...

CVE-2026-108158

The plugNmeet Server through 2.5.2 version is vulnerable to a path traversal vulnerability in the /api/whiteboard/convert endpoint. An authenticated meeting participant can provide crafted filePath values containing ../ sequences to force the server to convert arbitrary files into page images. Th...

CVE-2024-23897

CVE-2024-23897 취약점을 악용하기 위한 PoC로, Jenkins 2.441 이하 버전에서 시스템 내부 파일을 읽을 수 있습니다. 먼저, Jenkins 버전을 확인하여 취약한 버전인지 확인합니다: 그런 다음, 익스플로잇을 사용할 수 있습니다: python3 CVE-2024-23897.py 172.17.0.2 8080 /etc/passwd 취약점 악용 연습을 위해 https://dockerlabs.es 플랫폼의 'SecretJenkins' 실습 환경을 사용했습니다:...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-더티파이프-익스플로잇 침투 테스터 및 레드 팀원을 위한 익스플로잇 및 문서 모음으로, Linux Dirty Pipe 취약점 악용을 지원하는 데 사용할 수 있습니다. 취약점 정보 Dirty Pipe CVE-2022-0847는 Linux 커널의 로컬 권한 상승 취약점으로, 권한이 없는 사용자가 다음과 같은 작업을 수행할 수 있습니다: /etc/passwd와 같은 임의의 읽기 전용 파일 수정/덮어쓰기. 상승된 셸 획득. 영향을 받는 버전 5.8보다 최신인 Linux 커널 버전이 영향을 받습니다. 현재까지 다...

CVE-2023-39062

CVE-2023-39062 Spipu Html2Pdf alertdocument.domain HTTP/1.1 Host: example.afine.com Cookie: PHPSESSID=oiqo2oopiqt88teqgfb0a23vk0 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:109.0 Gecko/20100101 Firefox/113.0 Accept-Language: pl,en-US;q=0.7,en;q=0.3 Accept-Encoding: gzip, deflate...

DEBIAN-CVE-2026-108063

A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash,...

CVE-2026-108063

A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash,...

CVE-2026-104081

KodExplorer versions prior to 4.55 are vulnerable to a path traversal vulnerability located in the unzip_pre_name() function within app/function/helper.function.php. The root cause is a non-recursive str_replace() sanitization pass that can be bypassed using crafted filenames like ....//, combine...

CVE-2026-108063

A null pointer dereference vulnerability exists in libhangul within the hanja_new() function. The flaw occurs because the library fails to verify that a Hanja dictionary entry contains a valid value alongside its key when parsing files. An attacker can provide a specially crafted dictionary file ...

CVE-2026-108063

A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash,...

excelpeek

ExcelPeek v0.2 ExcelPeek — это инструмент, предназначенный для анализа потенциально вредоносных файлов Microsoft Excel. Документация Используйте Руководство по установке для начала работы. Перейдите к Руководству пользователя для получения дополнительной информации...

CVE-2026-101130

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, coul...

CVE-2024-20338

CVE-2024-20338 アドバイザリ このリポジトリには、リマソールで開催されたBehind The Codeカンファレンスでの私のトークのデモファイルが含まれています。 免責事項 これらの資料はすべて現状のまま提供され、教育目的のみを意図しています。著者は、他者による悪意のある行為に対して一切の責任を負いません。 著者は責任ある開示を支持し、他の人にも同じようにすることを奨励します。...

CVE-2026-101130

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, coul...

CVE-2026-101130

The Affinity by Canva application (versions prior to 3.3.1 , October 2026 release) is vulnerable to a heap buffer over-read due to inadequate bounds checking when parsing arrays of strings in Affinity document files. Specifically, the flaw exists in Kernel::InSerialiser::LoadTypes involving a pro...

jfrog-CVE-2022-21449

CVE-2022-21449 개요 이 도구는 컴파일된 코드 아카이브.jar, .war 등를 빠르게 스캔하여 ECDSA 알고리즘 사용을 나타내는 문자열을 찾음으로써 CVE-2022-21449 취약점을 확인할 수 있습니다. 추가 사전 요구 사항 없이 Python3를 사용합니다. 사용법 python cve202221449.py root-folder -quiet -exclude folder1 folder2 .. 또는 python cve202221449.py root-archive -quiet -exclude folder1 folder2...

cve-2025-54313

cve-2025-54313 Проверяет проекты на наличие скомпрометированных пакетов, подозрительных файлов и операторов импорта, см. атака на цепочку поставок Как? Просто выполните скрипт в терминале/консоли. Рекомендуется сначала установить maple. npm install -g maple chmod +x cve-2025-54313.sh...

sysmon-modular

sysmon-modular | A Sysmon configuration repository for everybody to customise Sysmon Modular is a configuration repository for Microsoft Sysinternals Sysmon. Small XML modules make it easier to select, review and maintain the telemetry that is useful to your organisation. The sysmon-modular Go to...

CVE-2025-70330

🧩 CVE-2025-70330: Уязвимость при разборе файлов Easy Grade Pro 4.1 Образовательный пример, созданный, чтобы показать новичкам, что исследование уязвимостей через обратную разработку возможно с самого начала. 📑 Содержание Зачем существует этот репозиторий Связь с «The Path That Leads to Your First...