CLEANSTART-2026-IL67419 Netty is an asynchronous, event-driven network application framework

CVE-2026-42580 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

CLEANSTART-2026-NR95500 Netty is an asynchronous, event-driven network application framework

CVE-2026-42581 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

CLEANSTART-2026-AM86994 Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is config...

Security vulnerability affects the apache-nifi-registry package. Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through...

CLEANSTART-2026-SB20243 Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE)

Security vulnerability affects the apache-nifi-registry package. Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events SSE...

CLEANSTART-2026-SS30538 Echo is a Go web framework

CVE-2026-55677 affects multiple packages. Echo is a Go web framework. See references for individual vulnerability details...

CVE-2022-22965-Spring4Shell-Security-Operations-Analysis

CVE-2022-22965 — Spring4Shell 보안 운영 분석 활성 Spring4Shell 악용 시도에 대응하는 정보 보안 분석가 역할을 수행한 실습형 보안 운영 센터SOC 시뮬레이션입니다. 이 저장소는 초기 탐지부터 분석 및 완화까지의 전체 사고 대응 수명 주기를 문서화합니다. 고지사항: 이 프로젝트는 교육 목적으로 Forage에서 진행된 사이버 보안 직무 시뮬레이션의 일부로 완료되었습니다. 모든 분석은 통제된 시뮬레이션 환경에서 수행되었습니다. CVE-2022-22965 Spring4Shell 개요...

PT-2026-107799

A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control RBAC checks under specific environmental conditions. Successful exploitation lowers the system authorization mode for t...

PT-2026-107778

Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA Authentication, Authorization, and Accounting integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific...

CVE-2025-55182

CVE-2025-55182 React JavaScript 프레임워크의 RCE 취약점에 대한 호스트 기반 탐지 규칙입니다...

EUVD-2026-91668

Next.js: Pending use cache fill can leak Draft Mode content into regular responses and persisted pages...

EUVD-2026-93516

Quasar Framework: DOM Clobbering in Quasar openURL SafariViewController Integration Causes Client-Side Denial of Service...

GHSA-89VP-X45C-52CQ Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service

Summary A DOM Clobbering vulnerability exists in Quasar's openURL utility when handling the iOS SafariViewController bridge. The vulnerable implementation only checks whether window.SafariViewController exists before invoking it as a native bridge object. An attacker who can inject HTML content...

NPM: Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service

NPM: Quasar Framework: DOM Clobbering in Quasar openURL SafariViewController Integration Causes Client-Side Denial of Service vulnerability discovered by ? in WordPress Npm quasar versions = 2.32.1...

coruna

Coruna — iOS Safari Sandbox Escape & Post-Exploitation C2 Fram...

Security Bulletin:React Router SSR Error Handling Vulnerability in Versions 6.4.0 to 7.17.0

Summary React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was written in a way that allows attacker-supplied input to overwrite certain aspects of errors caught by the SSR process, then it was possible for an attacker to trigger unexpected constructor...

EUVD-2026-94008

Backstage: Improper authorization enforcement for TechDocs static content...

CVE-2026-80843

A flaw was found in the Linux kernel's xfrm IPSec framework component. This vulnerability occurs when the xfrmstateconstruct function incorrectly manages memory allocations for authentication algorithms. Specifically, it can overwrite an existing allocation, leading to a memory leak. Over time,...

CVE-2023-32692-CodeIgniter4

CVE-2023-32692 — CodeIgniter 4 검증 규칙 주입 CVE-2023-32692 는 CodeIgniter 4 PHP 프레임워크의 코드 주입 취약점으로, 4.0.0부터 4.3.4까지 의 버전에 영향을 미칩니다. 4.3.52023년 6월 출시에서 수정되었습니다. 이것은 이 취약점을 가지고 놀고 싶은 사람을 위한 데모 환경입니다. 취약점 세부 정보는 MOGWAI LABS 블로그에서 확인할 수 있습니다. PoC 환경 이 저장소는 취약점을 보여주는 최소한의 CodeIgniter 4 애플리케이션을 포함합니다. Dev...

EUVD-2026-93570

Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions...

Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions

The @quasar/ssl-certificate development utility caches a combined PEM containing a generated private key and certificate without explicitly restricting its filesystem permissions. On systems with a typical process umask, the PEM can be readable by other local users. A local attacker with filesyst...