LolDriverScan

LolDriverScan LolDriverScan은 사용자가 시스템에서 취약한 드라이버를 탐지할 수 있는 golang 도구입니다. 이 도구는 loldrivers.io 목록을 API에서 가져와 시스템에 취약한 드라이버가 있는지 스캔합니다. 이 프로젝트는 Go로 구현되었으며 실행에 관리자 권한이 필요하지 않습니다. 기능 시스템에서 취약한 드라이버를 스캔합니다. 상세 정보를 위한 자세한 출력verbose을 제공합니다. 다른 도구와의 쉬운 통합을 위해 JSON 출력을 지원합니다. 관리자 권한이 필요하지 않습니다. 설치 릴리스 GitH...

CVE-2024-40635_POC

CVE-2024-40635POC CVE-2024-40635 の脆弱性を検証するための Proof of Concept コード データはこちらから取得: https://nvd.nist.gov/vuln/detail/CVE-2024-40635 1. Docker ライブラリのインポート root@kitploit: import docker これは Python の docker ライブラリをインポートするもので、Docker の API を使用して Docker と対話できるようにします。このライブラリがインストールされていない場合は、以下を実行して追加できます:...

EUVD-2026-87097

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution...

CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 は、Ivanti Connect Secure で見つかった重大な脆弱性であり、バッファオーバーフローを悪用したリモートコマンド実行 RCE を可能にします。 この脆弱性により、攻撃者は悪意のあるファイル（例：Web シェル）をアップロードし、昇格した特権でターゲットシステム上でコマンドを実行できます。 悪用のリスクを軽減するために、影響を受けるシステムを最新バージョンに更新することを強く推奨します。 Web シェルのアップロード ターゲットシステムに Web...

CVE-2024-21388

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 我々は、テロ組織ハマスによって人質に取られたすべての市民の安全な帰還を要求します。すべての人質が解放され、無事に帰宅するまで決して休みません。あなたも彼らを家に連れ戻す手助けができます。https://stories.bringthemhomenow.net/ Microsoft Edge 脆弱性エクスプロイト CVE-2024-21388 このPythonスクリプトは、Microsoft...

CVE-2026-79153

The Seclore FileSecure Desktop Client before version 3.25.1.0 contains an improper access control vulnerability within its kernel-mode driver component. This flaw allows an authenticated local user to achieve privilege escalation to NT AUTHORITY\SYSTEM on affected systems. No specific exploit cod...

CVE-2026-86938

A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a malicious DLL file in the installer directory. This vulnerability is addressed in FileMaker Pro version 26.0.3...

EUVD-2026-85161

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity validation. This could enable local attackers to execute arbitrary code with elevated privileges...

CVE-2026-91813

A vulnerability in the Foxit PDF Editor/Reader update mechanism (specifically FoxitUpdater ) allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity validation . This race condition could enable local attackers to execu...

EUVD-2026-84962

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management...

CVE-2026-17645

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management...

CVE-2026-76714 Authenticated Remote Code Execution with Elevated Privileges Vulnerability in HPE Networking Analytics and Location Engine (ALE)

Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system...

CVE-2026-76709 Unauthenticated Remote Arbitrary File Write Vulnerability in HPE Networking Analytics and Location Engine (ALE)

A vulnerability exists in the internal administrative component of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting i...

EUVD-2026-84669

A vulnerability exists in the internal administrative component of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting i...

CVE-2026-80154

All firmware versions of Lantronix SLC8000, SLC9000, EMG8500, EMG7500, SLB882, SLCx-03, and SLCx-02 contain an authentication bypass vulnerability in the web management portal that allows unauthenticated attackers to derive valid session tokens of logged-in users and bypass source IP and User-Age...

CVE-2026-80154

CVE-2026-80154 affects all firmware versions of Lantronix SLC8000, EMG8500, EMG7500, SLB882, SLCx-03, and SLCx-02 . The vulnerability resides in the web management portal , where session tokens are generated deterministically from the device model and current time at one-second resolution , yield...

CVE-2026-80154 Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypass

All firmware versions of Lantronix SLC8000, SLC9000, EMG8500, EMG7500, SLB882, SLCx-03, and SLCx-02 contain an authentication bypass vulnerability in the web management portal that allows unauthenticated attackers to derive valid session tokens of logged-in users and bypass source IP and User-Age...

CVE-2026-80154 Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypass

All firmware versions of Lantronix SLC8000, SLC9000, EMG8500, EMG7500, SLB882, SLCx-03, and SLCx-02 contain an authentication bypass vulnerability in the web management portal that allows unauthenticated attackers to derive valid session tokens of logged-in users and bypass source IP and User-Age...

EUVD-2026-84520

All firmware versions of Lantronix SLC8000, EMG8500, EMG7500, SLB882, SLCx-03, and SLCx-02 contain an authentication bypass vulnerability in the web management portal that allows unauthenticated attackers to derive valid session tokens of logged-in users and bypass source IP and User-Agent...

CVE-2026-92574 Cri-o: cri-o checkpoint restore bypasses destination security context

A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container to bypass the destination Kubernetes security context. The restored process may retain credentials, Linux capabilities, nonewprivs, and seccomp state from the checkpoint instead ...