cve_2022_0492

쉘 스크립트 템플릿 컬러 출력 포맷과 유틸리티 함수를 갖춘 현대적인 Bash 스크립트 템플릿으로, 전문적인 명령줄 도구를 만드는 데 사용됩니다. 기능 🎨 컬러 출력 : 사전 정의된 색상 구성 및 포맷 함수 📝 표준화된 메시지 : 일관된 정보, 성공, 경고, 오류 메시지 형식 🔧 유틸리티 함수 : 일반적인 쉘 스크립트 작업에 바로 사용 가능한 함수 📦 모듈식 설계 : 여러 프로젝트에서 쉽게 재사용할 수 있는 별도의 라이브러리 파일 ⚡ 간편한 설정 : 즉시 사용할 수 있는 간단한 소싱 메커니즘 빠른 시작 1. 이 템플릿을 클론하거...

CVE-2025-55182

CVE-2025-55182 탐색하기 오픈 소스 인텔리전스를 사용하여 취약한 시스템 식별 Shodan 검색 엔진 Shodan으로 이동합니다. 검색창에 다음 쿼리를 입력하여 취약한 버전의 Next.js 프레임워크를 실행 중인 장치를 찾습니다: http.component:"Next.js" 200 터미널에서 Shodan CLI를 사용하여 검색 결과를 다운로드합니다: shodan download nextjsvuln "http.component:'Next.js' 200" 결과를 필터링하여 취약한 Next.js 버전을 실행 중인 도메인과...

cve-2024-6387-poc

cve-2024-6387-poc OpenSSH 서버sshd의 시그널 핸들러 경쟁 상태 7etsuo 설명 CVE-2024-6387에 대한 익스플로잇으로, glibc 기반 Linux 시스템에서 OpenSSH 서버sshd의 시그널 핸들러 경쟁 상태를 대상으로 합니다. 이 취약점은 SIGALRM 핸들러에서 async-signal-unsafe 함수가 호출되어 루트 권한으로 원격 코드 실행을 가능하게 합니다. 익스플로잇 상세 취약점 요약 이 익스플로잇은 OpenSSH의 sshd에 있는 SIGALRM 핸들러 경쟁 상태를 대상으로 합니다:...

CVE-2025-55182

CVE-2025-55182 — React Server Components 인증되지 않은 RCE 심각도: Critical — CVSS 10.0 CWE: CWE-502 신뢰할 수 없는 데이터 역직렬화 공급업체: Meta Facebook 공개일: 2025년 12월 3일 개요 CVE-2025-55182는 React Server ComponentsRSC에서 발견된 최대 심각도의 인증되지 않은 원격 코드 실행RCE 취약점으로, React2Shell 이라고 명명되었습니다. 이 결함은 React가 Flight 프로토콜 을 통해 React...

CVE-2025-55182-PoC-exploit

CVE-2025-55182-PoC-exploit Next.js RCE（React Server Functions経由） ❯ python3 cve-2025-55182-exploit.py 0:"a":"$@1","f":"","b":"3OmR5Ifk9dmFJ1coB7-Wc" 1:E"digest":"uid=0root gid=0root groups=0root,0root,1bin,2daemon,3sys,4adm,6disk,10wheel,11floppy,20dialout,26tape,27video"...

CVE-2026-82827

Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions. This issue affects Hitachi Coding Software Suite: through...

CVE-2026-76142

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions...

EUVD-2026-90492

Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions. This issue affects Hitachi Coding Software Suite: through...

CVE-2026-82827

The Hitachi Coding Software Suite (versions through 3.3.0 ) is vulnerable to a Use of Hard-coded Cryptographic Key flaw. The software uses a hard-coded JWT signing secret key , which enables an attacker to generate unauthorized Bearer tokens . By using these fraudulent tokens, an attacker can exp...

CVE-2026-82827 A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens

Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions. This issue affects Hitachi Coding Software Suite: through...

CVE-2026-82827 A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens

Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions. This issue affects Hitachi Coding Software Suite: through...

EUVD-2026-90484

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions...

CVE-2026-76142 Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions...

CVE-2026-103283: Insufficient Session Expiration

Ghost versions 6.20.0 before 6.57.1 contain a session handling vulnerability that allows authenticated staff users to log in as any other staff user with only the password, bypassing two-factor authentication. Attackers with valid staff credentials can exploit improper session management to...

AlmaLinux 9.2 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc (ALMALINUX9.2:CLSA-2025:1767000167)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1767000167 advisory. - In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. pgsql and pdopgsql escaping functions do not check if the...

Rocky Linux 9 [CIQ] Security Update: python3.12-setuptools / python3.12-setuptools-wheel (crlsa-2024_5533)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20245533 advisory. pypa/setuptools: Remote code execution via download functions in the packageindex module in pypa/setuptools CVE-2024-6345 Tenable has extracted the preceding...

AlmaLinux 9.6 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc (ALMALINUX9.6:CLSA-2025:1764680377)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1764680377 advisory. - In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. pgsql and pdopgsql escaping functions do not check if the...

CVE-2026-103116

A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LOsort causes sql injection. The attack can be initiated remotely. The...

CVE-2026-103117

A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function dbproperties of the file functions/DatabaseInc.php of the component Save Data Handler. Such manipulation of the argument values leads to sql injection. The attack can be launched remotely. The...

CVE-2026-103115

A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql injection. It is possible to launch the attack remotely. The...