VirtualBox-6.0.0-Exploit-1-day

VirtualBox 6.0.0 Exploit 1-day 사용할 VBox bug CVE-2019-2525 : crUnpackExtendGetAttribLocation Infomation Disclosure CVE-2019-2548 : crServerDispatchReadPixels Interger overflow, lead to Heap overflow these bugs can be trigger on enable 3D Acceleration. 먼저 설명에 앞서 아래 익스를 수행한 동영상을 찍어서 첨부한다...

VirtualBox_CVE-2019-2525-CVE-2019-2548

VirtualBox 3D PoC 및 익스플로잇 저자 : @niklasb 개요 문서. 라이선스 익스플로잇 lib 이외의 하위 디렉터리를 참조하십시오. 디버그 빌드 Arch Linux의 경우 archpkg에 제공된 PKGBUILD를 사용하여 2018년 7월의 3D 보안 수정 사항이 되돌려진 5.2.18 디버그 버전을 얻을 수 있습니다. 라이브러리 lib/hgcm.py와 lib/chromium.py는 VBoxGuest IOCTL을 통해 HGCM 인터페이스와 VBoxSharedCrOpenGL 서비스에 대한 고수준 접근을 제공합니다...

MINI-C34F-HVHR-2548

Bulletin has no description...

ECHO-AE38-BB32-2548

Bulletin has no description...

CVE-2015-2548

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:16+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:50+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:13+00:00| seen|...

MINI-2548-6X3J-M4RJ

Bulletin has no description...

MINI-W46R-5VHX-2548

Bulletin has no description...

CVE-2026-2548

WAYOS FBM-220G (version 24.10.19) contains a flaw in the rc file affecting function sub_40F820. Per the CVE records, manipulating arguments (upnp_waniface, upnp_ssdp_interval, upnp_max_age) can lead to a remote command injection. Exploitation is described as remotely executable with a low attack ...

EUVD-2026-2548

The WP-CRM System plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on the wpcrmgetemailrecipients and wpcrmsystemajaxtaskchangestatus AJAX functions in all versions up to, and including, 3.4.5. This makes it possible for authenticated attackers, with...

Linux Distros Unpatched Vulnerability : CVE-2019-2548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and...

CVE-2025-2548

A vulnerability, which was classified as problematic, was found in D-Link DIR-618 and DIR-605L 2.02/3.02. Affected is an unknown function of the file /goform/formSetDomainFilter. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The...

CVE-2025-2548

creationtimestamp| type| source ---|---|--- 2025-03-20 16:18:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8232 2025-03-20 17:08:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkt6slauoo2s 2025-03-20 19:54:41+00:00| seen| https://t.me/cvedetector/20...

CVE-2025-2548

A vulnerability, which was classified as problematic, was found in D-Link DIR-618 and DIR-605L 2.02/3.02. Affected is an unknown function of the file /goform/formSetDomainFilter. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The...

CVE-2025-2548 D-Link DIR-618/DIR-605L formSetDomainFilter access control

A vulnerability, which was classified as problematic, was found in D-Link DIR-618 and DIR-605L 2.02/3.02. Affected is an unknown function of the file /goform/formSetDomainFilter. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The...

Linux Distros Unpatched Vulnerability : CVE-2010-2548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary files. CVE-2010-2548 Note that Nessus reli...

CVE-2024-2548 Path Traversal in parisneo/lollms-webui

A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the lollmscore/lollms/server/endpoints/lollmsbindingfilesserver.py and lollmscore/lollms/security.py files. Due to inadequate validation of file paths between Windows and Linux environments using...

CVE-2024-2548 Path Traversal in parisneo/lollms-webui

A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the lollmscore/lollms/server/endpoints/lollmsbindingfilesserver.py and lollmscore/lollms/security.py files. Due to inadequate validation of file paths between Windows and Linux environments using...

Oracle Linux 9 : podman (ELSA-2024-2548)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2548 advisory. 4.9.4-3.0.1 - Add devices on container startup, not on creation - Backport fast gzip for compression Orabug: 36420418 - overlay: Put should ignore...

EulerOS Virtualization 2.10.1 : protobuf-c (EulerOS-SA-2023-2548)

According to the versions of the protobuf-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember. CVE-2022-48468 Note that Tenable Network...

CVE-2023-2548

CVE-2023-2548 affects the WordPress plugin RegistrationMagic (versions up to 5.2.0.5). The root cause is Insecure Direct Object References, where the plugin exposes user-controlled objects, allowing an authenticated admin+ to bypass authorization and access system resources. Impact: an attacker w...