CVE-2024-27348

🔥 CVE-2024-27348 利用工具包 🎓 学术项目 📚 课程: FC411 - 安全网络设计 👨‍🏫 讲师: Dr. Maira Sultan 🏫 大学: 穆格林王子大学 📅 年份: 2025 ⚡ 一个完整的 CVE-2024-27348 Apache Huge-Graph-Server 利用工具包，作为 FC411 课程要求的一部分开发。该项目包括用于教育目的的漏洞利用程序和绑定 shell。 📋 目录 📖 概述 🛠️ 包含的工具 ✅ 前提条件 📦 安装 🚀 使用方法 ⚠️ 漏洞详情 🚨 警告与免责声明 🔒 缓解措施 📖 概述 此仓库包含两个用于利用 CVE-2024-27348...

`nx graph` dev server permissive CORS policy

Summary The local HTTP server started by nx graph sent Access-Control-Allow-Origin: on every response, letting any website a developer visited read the server's responses cross-origin — including the full project graph and the output of the /help endpoint, which runs a target's configured help...

EUVD-2026-39831

nx graph dev server permissive CORS policy...

CVE-2026-54753

Summary (CVE-2026-54753) Nx's nx graph local HTTP server (in versions 17.0.4 through 22.7.2 and 23.0.0-beta.2) exposed an overly permissive CORS policy by returning Access-Control-Allow-Origin: * on every response. This enabled cross-origin access to sensitive server data, including the full proj...

Vulnerabilities fixed in Oracle Database products

Oracle has fixed vulnerabilities in several Database Server products. A malicious party can exploit the vulnerabilities to perform attacks that could result in the following categories of damage: Denial-of-Service DoS. Remote code execution User rights Access to sensitive data Access to system da...

Oracle Patch Update, January 2024 Security Update Review

Oracle has released its first quarterly edition of Critical Patch Update, which contains patches for 389 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in a wide range of product families, includin...

Oracle Patch Tuesday April 2023 Security Update Review

Oracle has released the second quarterly edition of Critical Patch Update, which contains a group of patches for 433 security vulnerabilities. Some of the vulnerabilities addressed this month impact various products. These patches address vulnerabilities in Oracle code and third-party components...