54 matches found
vulnknox
VulnKnoX VulnKnox는 Go로 작성된 강력한 명령줄 도구로, KNOXSS API와 연동됩니다. KNOXSS 엔진의 고급 기능을 사용하여 URL에 대한 크로스 사이트 스크립팅XSS 취약점 테스트 과정을 자동화합니다. 기능 파일 목록 전달 및 URL 에코 테스트를 위한 파이프 입력 지원 재시도 및 시간 초과 설정 가능 GET, POST 및 BOTH HTTP 메서드 지원 고급 필터 우회AFB 기능 빠른 XSS 폴리글롯 테스트용 플래시 모드 개념 증명 확인용 CheckPoC 기능 설정 가능한 병렬 처리를 통한 동시 처리 인...
cve-2025-61882-oracle_ebs_rce_reproduction
CVE-2025-61882 — Oracle E-Business Suite 인증되지 않은 원격 코드 실행 CVSS 9.8 중요 개요 CVE-2025-61882는 Oracle E-Business Suite EBS에서 발견된 인증되지 않은 원격 코드 실행 취약점으로, Concurrent Processing 및 BI Publisher 구성 요소에 영향을 미칩니다. 이 결함으로 인해 HTTP를 통해 네트워크 접근이 가능한 인증되지 않은 공격자가 대상 시스템을 완전히 장악할 수 있습니다. 이 취약점은 Clop 랜섬웨어 그룹을 포함한 여러...
CVE-2026-11993
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to properly enforce the limit of concurrent files being processed and handled failed files, which allows a user with permission to upload files to spawn more goroutines than intended and block the...
EUVD-2026-77361
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to properly enforce the limit of concurrent files being processed and handled failed files, which allows a user with permission to upload files to spawn more goroutines than intended and block the...
EUVD-2026-67202
A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null not thread-safe, e.g. the Kotlin kts engine, concurrent message processing can corrupt engine-internal state, potentially leaking one message's payload/headers...
CVE-2026-72118
In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix CAN frame rx/tx statistics KCSAN detected a data race within the bcmrxhandler when two CAN frames have been simultaneously received and processed in a single rx op by two different CPUs. Use atomic operations with...
CVE-2026-7366
IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows a race condition that results in improper isolation of request state when handling the built‑in X‑Client‑IP header. Under concurrent...
Exploit for Improper Authentication in Oracle Concurrent_Processing
CVE-2025-61882 — Oracle E-Business Suite Unauthenticated Remot...
CVE-2026-61051
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-63825
A flaw was found in the Linux kernel. When the GCOV instrumentation, which helps analyze code coverage, processes data concurrently across multiple central processing units CPUs, it can lead to inconsistent counter values. This inconsistency can cause out-of-bounds memory writes within the...
CVE-2026-61051: Improper Access Control
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
PT-2026-62942
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Concurrent Processing versions 12.2.3 through 12.2.15 Description A flaw in the BI Publisher Integration component of Oracle Concurrent Processing allows a low privileged attacker with network access via HTTP to...
Exploit for Improper Authentication in Oracle Concurrent_Processing
markdown CVE-2025-61882 – Oracle E-Business Suite Remote Co...
kernel: Linux kernel Bluetooth: Denial of Service due to use-after-free in connection handling
A flaw was found in the Linux kernel's Bluetooth subsystem. A use-after-free UAF vulnerability exists in the hcidisconnectallsync function. This can occur if a Bluetooth connection is deleted while a controller event is being processed concurrently. A local attacker could potentially exploit this...
PT-2025-52757
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists within the veth module when handling XDP eXpress Data Path with no direct return frames. Specifically, the issue arises from concurrent calls to veth pool in...
SUSE CVE-2023-53762
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix UAF in hcidisconnectallsync Use-after-free can occur in hcidisconnectallsync if a connection is deleted by concurrent processing of a controller event. To prevent this the code now tries to iterate over th...
Siemens SIMATIC Devices Use After Free (CVE-2024-42302)
In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Keith reports a use-after-free when a DPC event occurs concurrently to hot- removal of the same portion of the hierarchy: The dpchandler awaits readiness of the...
Exploit for CRLF Injection in Oracle Concurrent_Processing
CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit...