CVE-2016-4971

CVE-2016-4971 서버가 HTTP에서 FTP 리소스로 리다이렉트할 때, wget은 HTTP 서버를 신뢰하고 리다이렉트된 URL의 이름을 대상 파일명으로 사용합니다. 자세한 내용은 제 블로그의 게시글을 참조하세요. 사용법 서버에서, node wget.js 테스트 컴퓨터에서, wget http://url.to.your/server 스크린샷 screenshot 1 screenshot 2...

cve-2026-16219-croogo-lab

CVE-2026-16219: Croogo FileManager 방어 연구소 이 저장소는 Croogo CMS에서 CVE-2026-16219 로 추적되는 경로 권한 부여path-authorization 결함을 문서화하고 안전하게 시연합니다. 본인 소유 시스템이나 명시적으로 평가를 승인받은 시스템을 테스트하는 방어자, 유지보수자, 학생, 연구자를 대상으로 합니다. 안전 경계: 포함된 HTTP proof of concept은 리터럴 루프백 주소 127.0.0.1만 허용하며, 고정된 비웹non-web 대상 디렉터리...

CVE-2026-49097

camel-irc irc.sendTo 헤더 인젝션 재현기 CVE-2026-49097 이 프로젝트는 Apache Camel의 camel-irc 컴포넌트에서 발생하는 메시지 헤더 인젝션message-header injection 을 시연하며, CVE-2026-49097 로 추적됩니다. IrcProducer는 irc.sendTo 헤더를 읽어 나가는 IRC 메시지의 목적지를 선택합니다. 해당 헤더가 존재하면 엔드포인트에 설정된 채널 목록을 덮어씁니다 : // IrcProducer.process 영향받는 4.18.2 final Stri...

CVE-2020-15778-SCP-Command-Injection-Check

CVE-2020-15778 – OpenSSH SCP 명령 삽입 취약점 탐지 스크립트 개요 CVE-2020-15778 는 OpenSSH에서 제공하는 scp 유틸리티에서 발견된 명령 삽입 취약점입니다 버전 ≤ 8.3p1. 이 문제는 조작된 대상 인자백틱 포함가 scp에 전달될 경우 공격자가 클라이언트 시스템에서 임의의 명령을 실행할 수 있게 합니다. 이 저장소에는 Bash로 작성된 안전한 탐지 및 시뮬레이션 스크립트 가 포함되어 있습니다. 이 스크립트는 사용자와 시스템 관리자가 다음을 수행하는 데 도움을 줍니다: 시스템의 scp...

CVE-2024-38063

CVE-2024-38063 PoC | DKob & N3TCR4SH 개요 이 스크립트는 CVE-2024-38063을 악용하기 위한 개념 증명PoC입니다. 특정 대상 옵션이 포함된 악성 분할 IPv6 패킷을 생성하여 커널을 대상으로 전송하며, 잠재적으로 서비스 거부나 불안정을 유발할 수 있습니다. 기사 링크: 여기 비디오 링크: 여기 PoC 코드: 여기 코드 문서: 여기...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

PT-2026-104392

Name of the Vulnerable Software and Affected Versions image-downloader version 4.3.0 Description A path traversal issue exists where an attacker who can control the download URL can cause the downloaded response data to be written outside the configured destination directory. Path traversal is a...

EUVD-2026-90589

A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter rd during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an...

Rocky Linux 8 [CIQ] Security Update: python3.12 / python3.12-debug / python3.12-debuginfo / etc (crlsa-2026_58971)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202658971 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding description...

Rocky Linux 9 [CIQ] Security Update: python-unversioned-command / python3 / python3-debug / etc (crlsa-2026_54268)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202654268 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding description...

AlmaLinux 9.2 [TuxCare] Security Update: grafana (ALMALINUX9.2:CLSA-2025:1751142388)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1751142388 advisory. - Grafana is an open source observability and data visualization platform. Versions of Grafana for endpoints prior to 9.1.8 and 8.5.14 could...

Rocky Linux 9.6 [TuxCare] Security Update: python3.11 / python3.11-debug / python3.11-devel / python3.11-idle / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1787043977)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787043977 advisory. - When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cau...

CentOS Linux 7 [TuxCare] Security Update: bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1787291758)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1787291758 advisory. - The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known ...

Rocky Linux 10.2 [CIQ] Security Update: python3.14 / python3.14-debug / python3.14-debuginfo / etc (crlsa-2026_58928)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202658928 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding...

CentOS Linux 7 [TuxCare] Security Update: squashfs-tools (CENTOS7:CLSA-2026:1777544697)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1777544697 advisory. - squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the...

CentOS Linux 8.4 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1787647818)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1787647818 advisory. - When using the configparser module to write configuration files containing multi-line text values with carriage return characters ...

Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2026-3149)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3149 advisory. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. CVE-2026-425...

AlmaLinux 9.6 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.6:CLSA-2026:1788769322)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788769322 advisory. - tarfile.extractall with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a...

AlmaLinux 9.2 [TuxCare] Security Update: evince / evince-devel / evince-dvi / evince-libs / evince-nautilus / etc (ALMALINUX9.2:CLSA-2026:1782485183)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782485183 advisory. - Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single- click remote code execution...

CVE-2024-36971

CVE-2024-36971 — 개념 증명 연구 및 분석 전용 ⚠️ 면책 조항 — 이 저장소를 사용하기 전에 읽어 주세요 이 저장소는 방어적 연구, 분석 및 책임 있는 보고 를 위해서만 제공됩니다. 여기에는 악용할 수 없는 개념 증명 파일인 CVE-2024-36971과 영향을 받는 영역을 설명하기 위한 공개 Android 커널 헤더 스니펫sock.h이 포함되어 있습니다. 악용 코드, 재현 명령 또는 단계별 지침은 제공되지 않습니다. 프로덕션 장치, 타사 시스템 또는 통제할 수 없는 네트워크에서 이 저장소의 어떤 파일도 실행하지...