CVE-2025-63353

FiberHome Wi-Fi パスワード予測ツール CVE-2025-63353 FiberHome HG6145F1 RP4423 ルーターに見られる、決定論的なパスワード生成の欠陥を利用したセキュリティ監査および概念実証デモンストレーションのための Python ユーティリティ。 📋 概要 このスクリプトは CVE-2025-63353 を悪用します。これは、工場出荷時の WPA/WPA2 プリシェアードキーがブロードキャストされる SSID から数学的に導出されるという重大な脆弱性です。攻撃者はネットワーク名 SSID...

wp2shell

wp2shell WordPress RESTバッチルート混乱ブラインドSQLインジェクション — 自動エクスプロイトチェーン。 CVE-2026-63030 / CVE-2026-60137 | ---|--- 影響を受けるバージョン| WordPress 6.9.0 – 6.9.4 and 7.0.0 – 7.0.1 修正バージョン| WordPress 6.9.5 / 7.0.2 注入箇所| authornotin SQL via desync'd authorexclude parameter 認証要件| 不要（未認証SQLi） 許可されたセキュリティテストのみを対象としています...

Rocket.Chat

チームコミュニケーションのための究極のセキュアなオープンソースソリューション Rocket.Chatは、高いデータ保護基準を持つ組織向けにTypeScriptで開発された、オープンソースで安全かつ完全にカスタマイズ可能なコミュニケーションプラットフォームです。 私たちはチームコミュニケーションのための究極のソリューションであり、同僚同士、他社、そして顧客や市民との間で、どのような接続方法であってもリアルタイムの会話を可能にします。その結果、生産性とユーザー満足度が向上します。 毎日、150以上の国と地域、ならびにDeutsche Bahn（ドイツ鉄道）、米国海軍、Credit...

log4j-vulnerable-app-cve-2021-44228-terraform

log4j-vulnerable-app-cve-2021-44228-terraform 脆弱なアプリとJNDIExploitをCVE-2021-44228と連携させるためのTerraform スタックについて このTerraformはAWSクラウドのVPC上に2つのインスタンスを作成します。 AWSACCESSKEYID とAWSSECRETACCESSKEY をエクスポートするだけでOKです。 1つ目のインスタンスはJNDIExploitです。 2つ目はlog4jエクスプロイト用のVulnerable-Appです。 apply前にterraform内のSSH公開鍵を置き換えてくださ...

Log4Shell-CVE-2021-44228-Demo

Log4ShellCVE-2021-44228 デモ 環境設定 クライアント curl コマンドラインで HTTP サーバーにアクセスできる任意の場所 log4j を使用した HTTP サーバーによる脆弱なアプリ Amazon Linux 2 x86 ベース EC2 インスタンス / CentOS Azure 仮想マシン $ yum install docker -y $ systemctl enable docker $ systemctl start docker $ docker run --name vulnerable-app -p 8080:8080...

CVE-2026-100653

A flaw was found in vLLM. When operators configure a deployment to use a specific, pinned model revision, vLLM fails to apply the revision pin to certain supporting artifacts, such as model processors and configuration files. Consequently, these components are loaded from the external repository'...

Security Bulletin: QRadar Deployment Intelligence App for IBM QRadar SIEM contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. QRadar Deployment Intelligence for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-25639 DESCRIPTION: Axio...

BIT-GITLAB-2026-86341 Access Control Check Implemented After Asset is Accessed in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user with Owner or Maintainer permissions could have silently disabled protected environment deployment approval...

PT-2026-98986

GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user with Owner or Maintainer permissions could have silently disabled protected environment deployment approval...

CVE-2026-97636

Apache Airflow HashiCorp provider: the HashiCorp Vault secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the backend to resolve a secret...

CVE-2026-97636

The apache-airflow-providers-hashicorp component is vulnerable to a team-scope guard bypass in the HashiCorp Vault secrets backend . In multi-team deployments, a Dag author can provide a Variable key containing a path separator . This causes the backend to fall back to a team-agnostic path, allow...

CVE-2026-97636 Apache Airflow HashiCorp provider: HashiCorp Vault secrets backend: team-scope guard bypass via user-controlled key

Apache Airflow HashiCorp provider: the HashiCorp Vault secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the backend to resolve a secret...

CVE-2026-97636 Apache Airflow HashiCorp provider: HashiCorp Vault secrets backend: team-scope guard bypass via user-controlled key

Apache Airflow HashiCorp provider: the HashiCorp Vault secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the backend to resolve a secret...

CVE-2026-79761

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a grep pattern from a user-controlled public-key token and interpolates it into double-quoted shell commands executed on...

EUVD-2026-86158

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a grep pattern from a user-controlled public-key token and interpolates it into double-quoted shell commands executed on...

CVE-2026-79761 Termix: Command injection in SSH key deployment verification

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a grep pattern from a user-controlled public-key token and interpolates it into double-quoted shell commands executed on...

CVE-2026-79761 Termix: Command injection in SSH key deployment verification

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a grep pattern from a user-controlled public-key token and interpolates it into double-quoted shell commands executed on...

CVE-2026-79761

The web-based server management platform Termix (versions 1.7.0 to 2.5.1 ) is vulnerable to command injection within the SSH key deployment flow. The root cause is located in src/backend/database/routes/credential-deploy-routes.ts, where the application derives a grep pattern from a user-controll...

CVE-2026-79761: Improper Neutralization of Special Elements used in an OS Command

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a grep pattern from a user-controlled public-key token and interpolates it into double-quoted shell commands executed on...

PT-2026-98313

CVE-2026-97636 Apache Airflow HashiCorp provider: the HashiCorp Vault secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Da… https://t.co/UZkMPyWzeJ...