CVE-2026-87799

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

CVE-2026-87799 Arbitrary file write on LXD host via symlink in migration stream

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

EUVD-2026-88260

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

CVE-2026-85185 Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

CVE-2026-85185 Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

EUVD-2026-88258

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

CVE-2026-85185 Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

CVE-2026-85185

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

CVE-2026-82929

mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts these keys from the firmware can set up a rogue SSH server that clients will trust without warning, enabling man-in-the-middle attacks and credential...

CVE-2018-9206

CVE-2018-9206에 대한 PoC 개요 원본 PoC를 기반으로 합니다. 사용법 usage: run.py -h -p PREFIX -u USERAGENT host CVE-2018-9206 PoC positional arguments: host the host to check optional arguments: -h, --help show this help message and exit -p PREFIX, --prefix PREFIX The prefix for the path -u USERAGENT, --user-agent...

CVE-2019-12594

CVE-2019-12594 이는 DOSBox 0.74-2의 취약점인 CVE-2019-12594에 대한 PoC입니다. DosBox 0.74-2에서 호스트의 계산기를 실행하는 모습 이 취약점의 PoC는 다음 구성에서 테스트되었습니다: DOSBox 0.74-2 Debian 10 amd64 Libc6 2.28-10...

itscape

ITScape — Linux KVM/arm64 ゲストからホストへのエスケープ追跡サイト ITScape パッチステータストラッカーのソースです。Linux カーネルの KVM/arm64 ゲストからホストへのエスケープに対する修正を、どのディストリビューションがリリースしたかを記録するシングルページサイトです。 事実はどこにあるか バグに関するすべての情報（CVE ID、影響を受けるバージョンと修正済みバージョン、上流の修正コミット、発見と開示のクレジット、ディストリビューションごとの最終的なパッチステータス）は、この README ではなくトラッカーページにあります。 表示:...

syswarden

SysWarden Linux defense. Your host. Your rules. Host-local Linux defense with auditable, fail-closed enforcement. Website | Documentation | Build from source | Roadmap SysWarden is an open-source Linux security orchestrator that combines an authoritative nftables policy, host telemetry,...

EUVD-2026-88229

mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts these keys from the firmware can set up a rogue SSH server that clients will trust without warning, enabling man-in-the-middle attacks and credential...

CVE-2026-82929 Use of Shared Cryptographic Key in mH-DEVELOPER

mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts these keys from the firmware can set up a rogue SSH server that clients will trust without warning, enabling man-in-the-middle attacks and credential...

cve-2017-7269

cve-2017-7269용 수정된 msf 모듈 실제 경로 길이가 19가 아니거나 호스트 바인딩이 있는 경우 작동하지 않는 문제를 수정했습니다. 옵션 추가: PhysicalPathLength, HttpHost 테스트용: 호스트 실제 경로: c:\inetpub\ , 길이=11 msf use exploit/windows/iis/cve-2017-7269 msf exploitcve-2017-7269 show options Module options exploit/windows/iis/cve-2017-7269: Name Current...

ReflectiveDLLInjection

概要 リフレクティブDLLインジェクションは、リフレクティブプログラミングの概念を利用して、ホストプロセス内のメモリからライブラリのロードを実行するライブラリインジェクション技術です。このため、ライブラリは最小限のポータブル実行可能（PE）ファイルローダーを実装することで、自身のロードを担当します。そして、ホストシステムおよびプロセスとの最小限のやり取りで、どのようにロードされ、ホストとやり取りするかを制御できます。 インジェクションは、Windows NT4からWindows 8まで、該当する場合はx86、x64、ARM上で動作します。 概要...

starlette-host-header-lab

Starlette Host-Header URL 混同ラボ X41-2026-002 X41 D-Sec が公開した Starlette 認証バイパス脆弱性を再現する、自己完結型のコンテナ化されたトレーニングラボです。 アドバイザリ: X41-2026-002 GHSA: GHSA-86qp-5c8j-p5mr CWE: 436 — 解釈の競合 / 関数呼び出しにおける信頼できない入力 CVSS: 7.0 高 影響を受けるバージョン: Starlette = 0.8.3, ⚠️ 認可されたセキュリティトレーニング専用です。...

Server-Side Request Forgery (SSRF)

jackson-databind is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to InetAddress.getByName resolving attacker-controlled input, which allows an attacker to trigger DNS requests from the server and probe or identify internal hosts...

CVE-2025-32462-CVE-2025-32463-PoC-Lab

CVE-2025-32462 & CVE-2025-32463 – 고급 PoC 실습 환경 이 저장소는 두 가지 중요한 sudo 취약점에 대한 컨테이너 기반 실습 환경 과 상세한 PoC를 제공합니다: CVE-2025-32462 – sudo -h 호스트 일치 로직 우회 CVE-2025-32463 – sudo -R chroot NSS 라이브러리 탈출 연구 및 크레딧 원본 연구: Rich Mirch – Stratascale CRU PoC 및 실습 환경: MAAYTHM 기술 개요 CVE-2025-32462 – 호스트 검증 로직 우회 Sudo...