EUVD-2026-69144

A vulnerability in Hugging Face Transformers versions = 4.49.0 and = 5.8.1 allows remote Python files to be written to local disk without user consent when using GenerativePreTrainedModel.loadcustomgenerate. The function fetches and caches a remote module file before performing the required...

CVE-2026-79684

Dell PowerStore contains a Protection Mechanism Failure vulnerability (CVE-2026-79684, CVSS 3.1 score 8.8 HIGH ). An authenticated user with limited privileges could bypass access restrictions to gain escalated privileges , with high impact on confidentiality, integrity, and availability over the...

cve-2026-21509-office_security_bypass_reproduction

CVE-2026-21509 — Microsoft Office 보안 기능 우회 CVE-2026-21509 는 Microsoft Office 보안 기능 우회 취약점입니다. CVSS 7.8 , APT28러시아 해커이 우크라이나를 대상으로 적극적으로 악용 중입니다. 보안 결정에 신뢰할 수 없는 입력에 의존하는 문제CWE-807 — "킬 비트kill bit 깨기" 악성 문서를 통해 보호된 보기Protected View 및 OLE 완화 조치 를 우회할 수 있습니다. Office 2016, 2019, 2021, 2024, Microsoft...

cve-2025-24472-fortinet_authbypass_reproduction

CVE-2025-24472 — Fortinet FortiOS / FortiProxy 인증 우회 개요 CVE-2025-24472는 Fortinet FortiOS 및 FortiProxy의 인증 우회 취약점입니다. 인증되지 않은 공격자가 특수하게 조작된 CSFCentral Security Fabric 프록시 요청을 구성하여 영향을 받는 장치에서 슈퍼 관리자 권한을 획득할 수 있습니다. 이 결함의 CVSS 점수는 8.1이며, SuperBlackMora001을 포함한 랜섬웨어 그룹이 적극적으로 악용하는 것으로 알려져 있습니다. 기술 세...

cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — PAN-OS 인증 우회 → 권한 상승 체인 CVE| 설명| CVSS ---|---|--- CVE-2024-0012| PAN-OS 관리 인터페이스 인증 우회| 9.3 CVE-2024-9474| PAN-OS 권한 상승| 6.9 이 취약점들을 연쇄적으로 사용하면 PAN-OS 관리 웹 인터페이스에서 인증되지 않은 원격 코드 실행 이 가능해집니다. 두 취약점 모두 Operation Lunar Peek 으로 추적되는 공격에서 야생에서 제로데이로 적극적으로 악용 되었습니다. 해당 연...

CVE-2026-84218 Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a target.url value from a Jolokia POST request and passes it to JMXServiceURL an...

EUVD-2026-69129

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a target.url value from a Jolokia POST request and passes it to JMXServiceURL an...

CVE-2026-84218 Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a target.url value from a Jolokia POST request and passes it to JMXServiceURL an...

CVE-2026-84218

CVE-2026-84218 affects Jolokia (org.jolokia/jolokia-core), a JMX-over-HTTP bridge. The flaw is in the JSR-160 proxy functionality, where the JNDI denylist introduced to mitigate CVE-2018-1000130 is incomplete. The denylist only rejects URLs matching service:jmx:rmi:///jndi/ldap:.*, but attacker-c...

CVE-2026-84218

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a target.url value from a Jolokia POST request and passes it to JMXServiceURL an...

CVE-2026-84147

This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system...

CVE-2026-58575

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator...

Important: Red Hat Security Advisory: iscsi-initiator-utils security update

An update for iscsi-initiator-utils is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket

A flaw was found in open-iscsi. An incorrect authorization vulnerability allows unprivileged local users to bypass authentication for the iscsiuio control socket. This enables unauthorized access to the control socket, potentially leading to system compromise or disruption of iSCSI Internet Small...

CVE-2023-21768-DSE-Bypass

フォーク元 このプロジェクトは以下からフォークされました: WindowsLPEAFDCVE-2023-21768 . アップデート このプロジェクトは chompie1337 のエクスプロイトから更新され、DSE を無効化し、未署名ドライバをロードし、DSE を再有効化します。...

CVE-2026-58575

Dell PowerStore is affected by an Authentication Bypass by Spoofing vulnerability that allows an authenticated attacker to escalate privileges to Administrator . The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network-exploitable conditions with l...

EUVD-2026-69060

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator...

CVE-2026-58575

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator...

CVE-2020-14882-WebLogic-Analysis

취약점 연구: Oracle WebLogic Server의 CVE-2020-14882 및 CVE-2020-14883 체인 익스플로잇 이 저장소는 Oracle WebLogic Server 관리 콘솔 구성 요소에서 인증 우회Authentication Bypass 및 원격 코드 실행RCE 취약점 체인을 시연하기 위한 기술 보고서Write-up와 개념 증명Proof of Concept, PoC을 포함합니다. 🛑 경고 및 면책 조항: 본 자료는 교육 목적과 합법적인 보안 감사Pentest 수행을 위해서만 준비되었습니다. 소유자의 사전 서...

CVE-2022-36537

CVE-2022-36537 요약 R1Soft Server Backup Manager는 ZK 프레임워크를 주요 프레임워크로 사용합니다. 보안을 위해 모든 Web3 프로젝트 당사자는 다양한 Web3 인프라의 보안 취약점에 더 주의를 기울이고 적시에 패치하여 잠재적인 보안 위험과 디지털 자산 손실을 방지해야 합니다. 우리는 적시에 발굴하고, web3의 다양한 보안 위험을 추적하며, 선도적인 보안 솔루션을 제공하여 web3 세계의 체인과 오프체인이 안전하고 건전하도록 보장합니다. 서문 ZK는 엔터프라이즈 웹 애플리케이션 구축을 위한...