CVE-2021-20717

CVE-2021-20717-EC-CUBE-XSS NVD 설명 EC-CUBE 4.0.0부터 4.0.5까지의 크로스 사이트 스크립팅 취약점으로, 원격 공격자가 EC-CUBE로 생성된 EC 웹 사이트의 특정 입력 필드에 특수하게 조작된 스크립트를 주입할 수 있습니다. 그 결과, 관리자의 웹 브라우저에서 임의의 스크립트가 실행될 수 있습니다. 설정 1. EC-CUBE 클론 git clone https://github.com/EC-CUBE/ec-cube.git -b 4.0.5 2. Docker 빌드 docker build -t...

CVE_2022_38181_Gazelle

CVE-2022-38181용 FireTV 3세대 Cube에서 실행되는 익스플로잇 이것은 보안 연구원 Man Yue Mo의 Pixel 6 POC를 CVE-2022-38181에 맞게 포크한 것입니다. 취약점에 대한 자세한 분석은 여기에서 확인할 수 있습니다. FireOS의 32비트 사용자 공간에 맞게 변경되었습니다. 이 POC는 ARM Mali 커널 드라이버의 버그를 악용하여 임의의 커널 코드 실행을 달성하고, 이를 사용하여 SELinux를 비활성화하고 루트 권한을 얻습니다. 다음 명령어를 사용하여 ndk-21의 clang으로...

CVE_2022_38181_Raven

FireTV 2세대 Cube용 CVE-2022-38181 익스플로잇 이 프로젝트는 보안 연구원 Man Yue Mo의 Pixel 6 POC for CVE202238181를 포크한 것입니다. 취약점에 대한 자세한 분석은 여기에서 확인할 수 있습니다. FireOS의 32비트 사용자 공간과 2세대 Cube의 구형 Bifrost 드라이버r16p0 및 Linux 커널4.9.113 버전을 반영하여 변경되었습니다. 이 POC는 ARM Mali 커널 드라이버의 버그를 악용하여 임의의 커널 코드 실행을 달성한 후 SELinux를 비활성화하고 루...

openSUSE 16: ImageMagick / ImageMagick-config-7-SUSE / etc (openSUSE-SU-2026:21973-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21973-1 advisory. - CVE-2026-93586: use-after-free in the ImagesToBlob method can lead to a process crash bsc1281912. - CVE-2026-93587: policy bypass in the PCD,...

CVE_2022_46395_Raven

CVE-2022-46395를 FireTV 2세대 Cube에서 실행하기 위한 익스플로잇 보안 연구원 Man Yue Mo의 Pixel 6 POC를 포크한 것입니다. 취약점에 대한 자세한 설명은 여기에서 읽을 수 있습니다. FireOS의 32비트 사용자 공간을 고려하여 변경 사항이 적용되었습니다. 이 POC는 ARM Mali 커널 드라이버의 버그를 악용하여 임의 커널 코드 실행을 달성한 후, SELinux를 비활성화하고 루트 권한을 획득합니다. 해당 익스플로잇은 PS7652/35642023년 8월 하순에서 패치되었습니다. 참고로...

CVE-2013-3651

CVE-2013-3651 PoC - EC-CUBE 2 사용하기 필요 사항 Python 3 실행 $ python poccve20133651.py - 예시 $ python poccve20133651.py http://127.0.0.1:9000/ 결과: 취약함! PoC 취약점 | ECサイト構築・リニューアル은「EC 오픈 플랫폼 EC-CUBE」 https://www.ec-cube.net/info/weakness/weakness.php?id=49 참고 JVNDB-2013-000062 - JVN iPedia...

CVE-2026-93587

A flaw was found in ImageMagick. A local user, by supplying a specific command line option to the PCD, CUBE, or HALD image decoders, can bypass configured resource limits. This policy bypass allows for extra memory allocation, enabling the user to exceed the intended memory policy limit. The most...

SUSE CVE-2026-93587

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD and, per the upstream advisory, CUBE and HALD coder: when a specific command line option is supplied, the decoder does not check a configured resource limit, which can result in extra memory allocation. A local...

UBUNTU-CVE-2026-93587

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD and, per the upstream advisory, CUBE and HALD coder: when a specific command line option is supplied, the decoder does not check a configured resource limit, which can result in extra memory allocation. A local...

CVE-2026-93587: Uncontrolled Resource Consumption

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD and, per the upstream advisory, CUBE and HALD coder: when a specific command line option is supplied, the decoder does not check a configured resource limit, which can result in extra memory allocation. A local...

PT-2026-95366

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-31 ImageMagick versions prior to 6.9.13-56 Description A policy bypass exists in the PCD, CUBE, and HALD coders. When a specific command line option is used, the decoder fails to verify the configured resour...

CVE-2026-83015

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Cube Manager. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleToo...

CVE-2026-83014

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Cube Manager. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

EUVD-2026-79343

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Cube Manager. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleToo...

CVE-2026-83015

A vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Cube Manager ) affects supported versions 8.61–8.63 . The flaw allows a low-privileged, local attacker with logon access to compromise the application, resulting in full confidentiality, integrity, and availability impact (i....

EUVD-2026-79342

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Cube Manager. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-83014

CVE-2026-83014 affects the Cube Manager component of Oracle PeopleSoft Enterprise PeopleTools , versions 8.61–8.63 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to cause unauthorized creation, deletion, or modification of data (high integrity impact) and ...

CVE-2026-83015: Improper Access Control

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Cube Manager. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleToo...

PT-2026-92538

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Cube Manager. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

PT-2026-92539

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Cube Manager. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleToo...