CVE-2017-0144

🔵 EternalBlue CVE-2017-0144 重大なMicrosoft SMBv1 リモートコード実行脆弱性 📌 概要 EternalBlue は、MicrosoftのServer Message Block version 1 SMBv1プロトコルにおける重大な脆弱性であり、認証不要で脆弱なWindowsシステム上で任意のコードを実行することを可能にします。 このエクスプロイトはNSA によって開発され、その後2017年にハッキンググループShadow Brokers によってリークされました。WannaCry やNotPetya...

cve-2021-41773

Apache httpd RCE Apache HTTP Server 2.4.49 のパス正規化に対する変更に欠陥が見つかりました。攻撃者はパストラバーサル攻撃を使用して、Alias 系ディレクティブで設定されたディレクトリの外部にあるファイルに URL をマッピングできる可能性があります。これらのディレクトリ外のファイルがデフォルト設定の "require all denied" で保護されていない場合、これらのリクエストは成功する可能性があります。これらのエイリアスされたパスで CGI...

CVE-2026-78938

CVE-2026-78938 — V8 TurboFan CheckMaps インスタンス移行型混同 CVE-2026-78938の根本原因分析とエクスプロイト。V8のTurboFanロード除去における型混同で、Chrome 152.0.7977.64（V8 15.2.124.18）で修正されました。このバグは実環境で悪用されたと報告されています。...

CVE-2025-31161

🚨 CVE-2025-31161 - CrushFTP의 심각한 인증 우회 취약점 CVE-2025-31161는 인기 있는 관리형 파일 전송MFT 솔루션인 CrushFTP의 심각한 인증 우회 취약점입니다. 인증되지 않은 원격 공격자는 AWS4-HMAC-SHA256 인증 헤더 처리의 결함을 악용하여 알려진 모든 사용자기본 crushadmin 관리자 계정 포함를 가장할 수 있습니다. 이 취약점은 실제 환경에서 적극적으로 악용 되었으며 CISA 알려진 악용 취약점KEV 카탈로그 에 추가되었습니다. 📊 취약점 세부 정보 속성| 세부 정보...

CVE-2026-5281

⚡ CVE-2026-5281 - Chrome Dawn WebGPU 释放后使用 此漏洞影响到了我们提供服务的一家客户。本仓库是我们对原始研究的贡献：为团队提供一个集中起点，以便当影响该组件的类似漏洞再次出现时，我们已有前期基础。它汇集了漏洞背后的理论、原始研究员发现的文档化总结，以及一组用于在实验室环境中验证暴露情况的实用工具。 注意：我本想分享更多研究内容，但由于公司限制，我无法进一步披露。这里包含的所有内容都已通过审查，且不违反我所受的任何协议。因此，本仓库以其当前状态归档。 📑 目录 背景与目的 什么是 WebGPU？ 什么是 Dawn？ 内存基础（栈、堆、显存）...

Exploit for CVE-2026-85706

cve-2026-85706 Unauthenticated arbitrary local file read in G...

CVE-2026-20131

🚨 CVE-2026-20131 | Cisco FMC 严重 RCE 漏洞 Cisco Secure Firewall Management Center 中的未认证远程代码执行 📌 概述 一个严重的预认证 Java 反序列化漏洞 ，允许远程攻击者在 Cisco FMC 设备上实现 root 级代码执行 。 关键信息 属性| 详情 ---|--- 严重程度| 严重 CVSS 评分| 10.0 漏洞类型| Java 反序列化 已被在野利用| 是（勒索软件攻击活动） 补丁可用| 是 ✨ 安全的漏洞检测工具 一个美观、安全且可靠的 CVE-2026-20131 检测工具。 📸 演示 功能特性...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Apache HTTPサーバのパストラバーサルゼロデイ脆弱性が悪用される Apache HTTP Server CVE-2021-41773 が実際に悪用される CVE-2021-42013: Apache HTTP Server 2.4.49および2.4.50におけるパストラバーサルとリモートコード実行（CVE-2021-41773の不完全な修正） Shodan ワンライナー root@kitploit: shodan search Apache Server 2.4.49 | awk 'print $1":"$2' |...

CVE-2018-17456

CVE-2018-17456 1-day...

Astra Linux – Vulnerability in Firefox

An unexpected message in the WebGPU IPC framework could lead to a use-after-free error and an exploitable sandbox escape. There have been reports of attacks exploiting this flaw in real-world scenarios. This vulnerability affects Firefox versions earlier than 97.0.2, Firefox ESR versions earlier...

Linux Distros Unpatched Vulnerability : CVE-2026-77806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection...

CVE-2026-77806

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...

CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

Overview On July 22, 2026, Check Point published a security advisory for multiple vulnerabilities affecting Security Management, Multi-Domain Management, and firewall products. The most urgent of these is CVE-2026-16232, an authentication bypass in the SmartConsole login process classified as...

Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for July 2026, which includes 622 vulnerabilities affecting a range of products, including 57 that Microsoft marked as "critical." Microsoft notes that two of the vulnerabilities disclosed this month have been exploited in the wild. CVE-2026-5615...

Astra Linux – Vulnerability in qBittTorrent

All versions of the qBittorrent client up to 4.5.5 use default credentials when the web user interface is enabled. Administrators are not forced to change the default credentials. As of 4.5.5, this issue has not been fixed. A remote attacker can use the default credentials to authenticate and...

CVE-2026-7473 Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN Virtual Extensible LAN, decap-groups, or a GRE Generic Routing Encapsulation tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a...

EUVD-2026-34858

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN Virtual Extensible LAN, decap-groups, or a GRE Generic Routing Encapsulation tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a...

PT-2026-39534

Critical cPanel vulnerabilities CVE-2026-41940, CVE-2026-41941, CVE-2026-41942 exploited in the wild. Update your servers immediately to protect against unauthorized access. Link: https://t.co/BvY5rEh9wr cPanel Cybersecurity Vulnerabilities Exploits Patching Servers Security Infosec Malware Threa...

PT-2026-46983

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description On platforms running Arista EOS with tunnel decapsulation configurations—such as VXLAN Virtual Extensible LAN, decap-groups, or GRE Generic Routing Encapsulation tunnel interfaces—the swit...

PT-2026-32093

Name of the Vulnerable Software and Affected Versions Acrobat DC versions prior to 26.001.21411 Acrobat Reader DC versions prior to 26.001.21411 Acrobat 2024 affected versions not specified Description An Improperly Controlled Modification of Object Prototype Attributes, also known as Prototype...