234791 matches found
CVE-2024-10930
CVE 공개: CVE-2024-10930 CVE-2024-10930 공개 날짜: 12-02-2025 요약 Carrier 제품 E20-BLK416X.EXE 버전 4.16에서 로컬 권한 상승을 허용할 수 있는 취약점이 확인되었습니다. 이 문제에는 CVE-2024-10930 식별자가 할당되었습니다. 공급업체는 추가 세부 정보와 해결 절차가 포함된 권고를 발표할 예정입니다. 영향을 받는 제품 공급업체 : Carrier 제품 : E20-BLK416X.EXE 버전 : 4.16 업데이트 버전 : 4.2 취약점 설명 Carrier는 Bloc...
CVE-2023-46980
CVE-2023-46980 Best Courier Management System v.1.000의 문제로 인해 원격 공격자가 userID 매개변수에 조작된 스크립트를 전송하여 임의 코드를 실행하고 권한을 상승시킬 수 있습니다. 추가 정보 YT 동영상 POC 링크 ; https://youtu.be/3Mz2lSElg7Y 취약점 유형 부적절한 접근 제어 - 계정 탈취 영향을 받는 구성 요소 사용자 이름 및 비밀번호를 업데이트할 수 있는 사용자 업데이트 양식 공격 벡터 비밀번호 재설정에서 쉽게 얻을 수 있는 사용자 ID가 필요합니다...
cve-2024-10914-port
CVE-2024-10914를 rust와 python으로 포팅함 왜냐면 그냥 이게 뭐냐 cve-2024-10914는 최근에 발견된, 일부 dlink 라우터에 영향을 미치는 9.8 심각도 점수의 취약점입니다. 해당 라우터들이 이미 지원 종료EOL에 도달했기 때문에, dlink는 "가난하게 살지 말고 그냥 새 라우터를 사라"라는 이유로 이 취약점 패치를 거부하고 있습니다. 어떻게 동작하냐 취약한 기기들은 보통 /cgi-bin/accountmgr.cgi?cmd=cgiuseradd&name= 경로에 HTTP 엔드포인트를 노출합니다...
CVE-2026-103680
A heap-based buffer overflow vulnerability exists in the tnef component within the find_free_number() function. The flaw is triggered during the generation of numbered backup suffixes for duplicate filenames. If numbered backups are enabled and file overwriting is disabled, an attacker can provid...
CVE-2026-103680 Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation
A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...
CVE-2026-103680 Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation
A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...
kernel: tipc: fix double-free in tipc_buf_append()
A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. This vulnerability, a double-free, occurs when the tipcbufappend function incorrectly handles memory after a socket buffer skb reallocation. An attacker could potentially exploit this to cause system...
kernel: netfilter: flowtable: publish GC-visible tuple last
A flaw was found in the netfilter flowtable component of the Linux kernel. This vulnerability occurs due to a timing issue where the system's garbage collection can free a network flow while it is still being set up. This can lead to a 'use-after-free' condition, where the system attempts to acce...
Vulnerability hidden in Apple CoreGraphics
Apple has identified a vulnerability in CoreGraphics on iOS, iPadOS, and macOS. This vulnerability involves an out-of-bounds write operation within the CoreGraphics component. An attacker can exploit this vulnerability by processing specially crafted files, which may lead to the execution of...
gvfs: SFTP: heap-based buffer overflow in read_reply()
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...
CVE-2026-102317
An improper privilege management flaw was found in the Mojo component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517312707 https://code.google.com/p/chromium/issues/detail?id=102317...
CVE-2025-69599
CVE-2025-69599 작성자: Rafael José Núñez Gulías 회사: Iberian Var Group 영향받는 제품: RayVentory Scan Engine 12.6 Update 8 및 이전 버전 Raynet 권고: RSEC200965 Raynet의 rvia는 Uncontrolled Search Path Element통제되지 않은 검색 경로 요소 문제에 취약합니다. 공유 객체를 로드하고 시스템 바이너리예: .so 및 헬퍼 바이너리를 호출할 때 상대 경로를 사용하여 호출하므로, 사용자는 PATH 환경 변수 조...
CVE-2026-103531
A flaw was found in OpenSC. A stack-based buffer overflow vulnerability exists in the SetCOS smart card driver during the handling of file control information in the setcosconstructfci44 function. By supplying manipulated card attributes, an attacker could trigger memory corruption, potentially...
Armatura LLC Armatura One
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to the database, execute arbitrary code on the host with the highest level of privilege, or gain control of the physical access-control system. 2. RECOMMENDED PRACTICES CISA...
CVE-2026-48778-PoC
CVE-2026-48778 — Notepad++ 임의 코드 실행 PoC 심각도: 높음 CVSS 7.8 | 영향: Notepad++ ≤ 8.9.6 | 패치 버전: v8.9.6.1 CVE-2026-48778에 대한 PoC 스크립트로, Notepad++ ≤ 8.9.6에서의 임의 코드 실행 취약점입니다. 전체 기술 세부사항은 공식 보안 권고를 참조하세요. 사용법 python cve-2026-48778.py 트리거 실행 후: 파일 → 포함 폴더 열기 → cmd 예상 결과: calc.exe가 cmd 대신 실행됩니다. 작성자 Kavin...
CVE-2026-48800-PoC
CVE-2026-48800 — Notepad++ 임의 코드 실행 PoC 심각도: 높음 | 영향: Notepad++ ≤ 8.9.6 | 패치: v8.9.6.1 CVE-2026-48800을 위한 PoC 스크립트로, shortcuts.xml을 통해 Notepad++ ≤ 8.9.6에서 발생하는 임의 코드 실행 취약점입니다. 전체 기술 세부사항은 공식 보안 권고를 참조하십시오. 사용법 python cve-2026-48800.py 실행 후 트리거: 실행 → Command Injection Demo 예상 결과: calc.exe가 실행되어 임...
CVE-2026-76147
A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...
EUVD-2026-90489
A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...
CLEANSTART-2026-OK73778 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass
Security vulnerability affects the kube-state-metrics-fips package. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...