CVE-2026-23744-MCPJam-Exploit

CVE-2026-23744 MCPJam Inspector RCE 익스플로잇 ⚠️ 면책 조항 이 도구는 승인된 보안 테스트 및 교육 목적으로만 사용해야 합니다. 무단 사용은 불법입니다. 사용자는 자신의 행동에 대한 모든 책임을 집니다. 📋 개요 이 저장소는 CVE-2026-23744 에 대한 개념 증명 익스플로잇으로, MCPJam Inspector 버전 =1.4.2에서 발견된 인증되지 않은 원격 코드 실행RCE 취약점입니다. 이 취약점은 네트워크 공격 벡터로 심각한 위험을 나타내는 CVSS 점수 9.8을 가지고 있습니다...

httpd-2.4.49

httpd-2.4.49 치명적: Apache HTTP Server 2.4.49 및 2.4.50의 경로 탐색 및 원격 코드 실행 CVE-2021-41773의 불완전한 수정 CVE-2021-42013...

Apache-RocketMQ-RCE-CVE-2023-37582-poc

이 저장소에는 README가 없습니다...

cve-2014-7920-7921

cve-2014-7920-7921 CVE-2014-7920 및 CVE-2014-7921 익스플로잇 코드 - Android 5.1까지의 mediaserver에서 코드 실행 이 익스플로잇의 심볼은 Android 4.3용이며, Android 5.1까지 모든 버전에 적용할 수 있습니다...

CVE-2012-1823

CVE-2012-1823 - PHP CGI 引数インジェクションによるリモートコード実行 RCE 重大度: 重大 CVSS 9.8 CVE: CVE-2012-1823 公開日: 2012年5月11日 影響を受けるソフトウェア: CGI モード php-cgi で実行されている PHP 脆弱性タイプ: 引数インジェクション / リモートコード実行 RCE 攻撃ベクトル: ネットワーク 必要な認証: なし CVE-2012-1823 は、PHP でこれまでに発見された中で最も重要なリモートコード実行脆弱性の 1 つです。この脆弱性は、Common Gateway Interface C...

EUVD-2026-78209

DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attackers operating a malicious container can stream tar entries with traversal sequences to write arbitrary files on the developer workstation, enabling code execution...

EUVD-2026-78164

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...

EUVD-2026-78162

A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gfnodedel of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has been publicly disclosed and m...

CVE-2022-22963

CVE-2022-22963 CVE-2022-22963에 대한 교육용 개념 증명 자동화로, 승인된 Hack The Box 랩 환경에서 시연되었습니다. 개요 CVE-2022-22963은 spring.cloud.function.routing-expression 헤더와 관련된 Spring Cloud Function 취약점입니다. 취약한 구성에서 공격자는 함수 라우팅 메커니즘을 통해 Java 기능을 호출하기 위해 Spring Expression LanguageSpEL 평가를 악용할 수 있습니다. 이 저장소에는 승인된 CTF/랩 환경에서...

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686-문을-여는-TCP-IP-결함 Windows TCP/IP 스택의 치명적인 RCE 취약점CVE-2025-26686이 민감한 메모리 잠금 해제를 방치하여 원격 공격자가 시스템을 탈취할 수 있습니다. 네트워크를 통해 악용 가능하며, 완전한 장악 위험이 있습니다. 지금 패치하세요. 작성자: Mark Mallia 유형: 원격 코드 실행 RCE 심각도: 심각 공격 벡터: 네트워크 기반 영향을 받는 시스템: Windows 10, 11 및 Server 에디션 요약 Microsoft TCP/IP 스택에서...

CVE-2026-25212

CVE-2026-25212 – Percona PMM RCE PoC 심각 – CVSS 9.9 – PMM 3.7에서 인증된 원격 코드 실행 설명 이 개념 증명PoC은 PMM 내부 PostgreSQL 사용자가 'SUPERUSER' 권한을 유지하는 취약점을 이용합니다. 인증된 공격자'pmm-admin' 권한 보유는 '데이터 소스 추가' 기능을 남용하여 PostgreSQL의 'COPY ... TO PROGRAM'을 통해 임의의 OS 명령을 실행할 수 있습니다. 영향을 받는 버전: PMM 3.7 수정된 버전: PMM 3.7 이후 요구 사...

Linux Distros Unpatched Vulnerability : CVE-2026-75092

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A privilege escalation flaw was found in the scanmysql actor of leapp-upgrade-el9toel10 provided by leapp-repository. During RHEL 9 to RHEL 10 upgrades, the act...

CVE-2026-52484

MitraStar GPT-2742GX4X5v6-SV (firmware GL_g2.5_100XNT0b23_3) is vulnerable to authenticated remote code execution via the /cgi-bin/device-management-utilities-internet.cgi endpoint. Diagnostic tools in the VIVO administration panel concatenate user input into shell commands; a blacklist-based san...

nginx:1.26 security update

1.26.3-9.4.0.1 - Require oracle-indexhtml 2:1.26.3-14 - Fixes CVE-2026-42533 2:1.26.3-13 - Fixes CVE-2026-56434 and CVE-2026-60005 2:1.26.3-12 - Resolves: RHEL-191774 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes 2:1.26.3-11 - nginx:1.26/nginx: HTTP/2: Remote Denial of Servic...

AlmaLinux 9 : nginx:1.24 (ALSA-2026:67308)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67308 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the AlmaLinux...

MiracleLinux 9 : freerdp-2.11.7-7.el9_8.7 (AXSA:2026-1843:29)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1843:29 advisory. FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway CVE-2026-55193 Tenable has extracted the preceding description block directl...

RHEL 9 : leapp-repository (RHSA-2026:67608)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67608 advisory. Repositories for leapp Security Fixes: leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scanmysql runs mysqld --validate- config ...

PT-2026-93155

Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-93147

Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

The vulnerability of the email analysis mechanism of the Cisco AsyncOS operating system for Cisco Secure Email protection tools allows for the execution of arbitrary commands.

The vulnerability of the email analysis mechanism of Cisco AsyncOS operating system in Cisco Secure Email protection solutions is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with roo...