shellshock-cve-lab

Shellshock CVE-2014-6271 ラボ このリポジトリには、CVE-2014-6271 用の小さな CGI ラボが含まれています。GNU bash 4.2 をコンパイルし、 Python の RFC-3875 スタイルのサーバーを通じて CGI スクリプトを提供し、リクエストヘッダーを CGI 環境変数にマッピングします。 Sentinel は、このシナリオを 2026-08-27 にゼロから構築したサンドボックスラボとして再現しました。 これは意図的に脆弱性を含むラボです。隔離されたローカル環境またはサンドボックス 環境でのみ実行してください。 実行 docker...

segmented-pentest-lab

Segmented Pentest Lab A self-built, Docker-based segmented ne...

WordPress Sexy Contact Form (<= 0.9.7) - Arbitrary File Upload

Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form formerly Sexy Contact Form before 1.0.0 for WordPress and before 2.0.1 for Joomla!, allows remote attackers to execute...

CVE-2014-6345

creationtimestamp| type| source ---|---|--- 2026-09-22 09:22:01+00:00| seen| https://gist.github.com/INFOKOM-KI/b3d6c108fa85f8f8db8dfa6751a589cc...

HTTP File Server <2.3c - Remote Command Execution

HTTP File Server before 2.3c is susceptible to remote command execution. The findMacroMarker function in parserLib.pas allows an attacker to execute arbitrary programs via a %00 sequence in a search action. Therefore, an attacker can obtain sensitive information, modify data, and/or gain full...

Exploit for SQL Injection in Drupal

Metasploitable3 — Penetration Test Report Author: Arlen F...

ROOT-OS-DEBIAN-12-CVE-2014-9900 CVE-2014-9900 in linux - Patched by Root

Root has patched CVE-2014-9900 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2014-9892 CVE-2014-9892 in linux - Patched by Root

Root has patched CVE-2014-9892 in the linux package for Root:Debian:12. Multiple fixed versions available...

CVE-2014-0114 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2014-2338

creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i...

CVE-2014-5139

creationtimestamp| type| source ---|---|--- 2026-09-04 18:00:03+00:00| seen| Telegram/lpcaxohlevWOQxYAX9XUMgFve84tVn0viR4d8tnkij6ww 2026-09-05 01:00:21+00:00| published-proof-of-concept| Telegram/lpcaxohlevWOQxYAX9XUMgFve84tVn0viR4d8tnkij6ww...

CVE-2014-08361

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:14+00:00| seen| https://t.me/hackingAttack/79492 2026-09-02 01:01:31+00:00| seen| https://t.me/hackingAttack/79492 2026-09-05 03:00:04+00:00| exploited| https://t.me/hackingAttack/79492 2026-09-06 00:01:00+00:00| exploited|...

CVE-2014-3971

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:06+00:00| seen| https://t.me/hackingAttack/85770 2026-09-02 01:01:27+00:00| seen| https://t.me/hackingAttack/85770 2026-09-05 00:00:11+00:00| published-proof-of-concept| https://t.me/hackingAttack/85770...

CVE-2014-8964

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:06+00:00| seen| https://t.me/hackingAttack/85770 2026-09-02 01:01:27+00:00| seen| https://t.me/hackingAttack/85770 2026-09-05 00:00:11+00:00| published-proof-of-concept| https://t.me/hackingAttack/85770...

CVE-2014-2917

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:06+00:00| seen| https://t.me/hackingAttack/85770 2026-09-02 01:01:27+00:00| seen| https://t.me/hackingAttack/85770 2026-09-05 00:00:11+00:00| published-proof-of-concept| https://t.me/hackingAttack/85770...

ROOT-OS-DEBIAN-13-CVE-2014-9892 CVE-2014-9892 in linux - Patched by Root

Root has patched CVE-2014-9892 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2014-9900 CVE-2014-9900 in linux - Patched by Root

Root has patched CVE-2014-9900 in the linux package for Root:Debian:13. Multiple fixed versions available...

CVE-2014-8110

creationtimestamp| type| source ---|---|--- 2026-08-29 23:00:18+00:00| seen| Telegram/mygM17KSjyX1ytBX-vC2bUSC6Quyw0MIzjWP6u1Kpz11D0 2026-08-30 00:00:26+00:00| seen| Telegram/mygM17KSjyX1ytBX-vC2bUSC6Quyw0MIzjWP6u1Kpz11D0 2026-08-31 00:00:42+00:00| published-proof-of-concept|...

CVE-2014-8609

creationtimestamp| type| source ---|---|--- 2026-08-29 23:00:08+00:00| seen| Telegram/lHKFDBRntVLEnzL4VqEuPiY-Vt8pAa9hTd9KwEhxyXdixQ 2026-08-30 00:00:12+00:00| seen| Telegram/lHKFDBRntVLEnzL4VqEuPiY-Vt8pAa9hTd9KwEhxyXdixQ 2026-08-31 00:00:46+00:00| published-proof-of-concept|...

Security Bulletin: Vulnerability found in IBM ApplinX.

Summary IBM ApplinX has been updated in order to address the vulnerability CVE-2014-3604. Specifics of this vulnerability come under CWE-297: Improper Validation of Certificate with Host Mismatch Vulnerability Details CVEID:CVE-2014-3604 DESCRIPTION: Certificates.java in Not Yet Commons SSL befor...