Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to 1 CFIDE/administrator/settings/mappings.cfm, 2 logging/settings.cfm, 3 datasources/index.cfm, 4...

DMA-ProcessDumper

DMA-ProcessDumper PCIe FPGAデバイス上でMemProcFSを使用したDMAを利用し、ユーザーモードで対象プロセスのメモリ全体をダンプします ビルド MemProcFSからleechcore.h、vmmdll.h、vmm.libをDMA-ProcessDumperディレクトリにコピーします Visual Studioを使用してコンパイルします MemProcFSからleechcore.dll、vmm.dll、FTD3XX.dllをDMA-ProcessDumper\x64ディレクトリにコピーします 使用方法 DMA-ProcessDumper.exe...

CVE-2024-9465

CVE-2024-9465 Checkpoint SQLインジェクション（時間ベース攻撃）CVE-2024-9465 SHODAN検索 https://www.shodan.io/search?query=html%3A%22Expedition+Project%22 html:"Expedition Project" FOFA検索 https://en.fofa.info/ body="Expedition Project" || title="Expedition Project" 使用方法 python3 CVE-2024-9465.py -u https://domain.com...

CVE-2026-104982: Improper Limitation of a Pathname to a Restricted Directory

A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function setupdocumentcontentlist/gstrdupprintf of the file backend/epub/epub-document.c of the component EPUB File Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely...

Fedora 44 : cockpit-machines (2026-57e39fc2fa)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-57e39fc2fa advisory. Automatic update for cockpit-machines-357-1.fc44. Changelog for cockpit-machines Wed Sep 23 2026 Packit - 357-1 - Harden against local attacks from...

Fedora 43 : cockpit-machines (2026-4923296720)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4923296720 advisory. Automatic update for cockpit-machines-357-1.fc43. Changelog for cockpit-machines Wed Sep 23 2026 Packit - 357-1 - Harden against local attacks from...

PT-2026-104520

Name of the Vulnerable Software and Affected Versions WP 2FA WordPress plugin versions prior to 4.1.0 Description The plugin fails to invalidate a time-based one-time passcode after its initial use. This allows an attacker who possesses a user's password and has intercepted a valid code during it...

CVE-2026-103514: Improper Authentication

The WP 2FA WordPress plugin before 4.1.0 does not invalidate a time-based one-time passcode once it has been used, allowing an attacker who knows an account's password and has observed a valid code within its validity window to replay it and bypass two-factor authentication, including on...

Bounded Reasoning: Cognitive Hierarchy in Human-Versus-AI Cyber Defense

Human-agent evaluations often compress interaction into a single performance score, even when human and automated policies adapt differently over time. We study this in a sequential cyber-defense game on an attack graph, where a human or reinforcement-learning defender protects cloud assets again...

Linux Distros Unpatched Vulnerability : CVE-2026-103627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium...

EUVD-2026-57757

@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header...

challenge_CVE-2020-13777

CVE-2020-13777 챌린지 여기 pcap에서 TLS 1.3 MITM이 가능한지 증명하고 0-RTT 초기 데이터를 복호화해 보세요 서버: 192.168.100.23:5556. 자세한 내용은 https://jovi0608.hatenablog.com/entry/2020/06/13/104905 및 CVE-2020-13777을 참조하세요...

CVE-2023-33768

CVE-2023-33768 Description Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows attackers to cause a Denial of Service DoS via a crafted firmware file. Additional Information When updating the firmware of the Wemo...

GHSA-5WF9-H793-W73C Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks

Summary Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in some cases. Details https://github.com/XTLS/Xray-core/blob/45cf2898ab12e97a55dd8f1f3d78d903340bdc9e/transport/internet/tls/config.goL333-L347 If r.Config.ServerName is empty, DNSName will be empty...

Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks

Summary Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in some cases. Details https://github.com/XTLS/Xray-core/blob/45cf2898ab12e97a55dd8f1f3d78d903340bdc9e/transport/internet/tls/config.goL333-L347 If r.Config.ServerName is empty, DNSName will be empty...

CVE-2021-25253

Exploit Title: Trend Micro OfficeScan Client 10.0 - ACL Service LPE Date: 2023/05/04 Exploit Author: msd0pe Vendor Homepage: https://www.trendmicro.com My Github: https://github.com/msd0pe-1 Trend Micro OfficeScan Client: Versions = icacls "C:\Program Files x86\Trend Micro\OfficeScan Client"...

CVE-2025-55234

CVE-2025-55234 This vulnerability allows attackers to perform relay attacks against the SMB Server Message Block protocol. If successful, it can lead to Elevation of Privilege EoP essentially allowing unauthorized users to gain higher-level access on a system By Mark Mallia Issue This vulnerabili...

CVE-2024-1086

CVE-2024-1086 학습 목적입니다. 참고: https://pwning.tech/nftables/ https://github.com/Notselwyn/CVE-2024-1086 Kconfig: +CONFIGCONFIGFSFS=y +CONFIGSECURITYFS=y +CONFIGNFTABLES=y mnlcbrun: Operation not supported +CONFIGNETFILTERNETLINKGLUECT=y +CONFIGNETLINKDIAG=y +CONFIGNFTCT=y +CONFIGNFTABLESIPV4=y...

SupplyChainAttacks

ファームウェアサプライチェーン攻撃 このリポジトリは、Binarly REsearchチームによって発見または調査された、文書化されたファームウェアサプライチェーン攻撃の厳選かつ包括的なコレクションを提供します。Binarlyによって維持されているこのプロジェクトは、サイバーセキュリティ研究者、専門家、および組織がサプライチェーン侵害で使用される攻撃ベクトル、戦術、および方法論をより深く理解するための教育および参考リソースとして機能します。 ここで見つけられるもの： 注目すべきサプライチェーン攻撃事例に関する詳細情報 これらのインシデントに関連する侵害指標（IoCs）...

CVE-2024-0582-dataonly

CVE-2024-0582 A data-only attack based on CVE-2024-0582 Description The exploit follows the strategy in this blog post, except that I didn't use a child process to open files. I found some exploits on GitHub follows the strategy in this write-up. After I reproduced the exploit with socket-based...