CVE-2025-27636-Practical-Lab

🛡️ CVE-2025-27636 — Apache Camel 실용적 공격 실습 연구소 🔍 개요 CVE-2025-27636 은 Apache Camel 의 camel-exec 구성 요소에서 발생하는 치명적인 원격 코드 실행RCE 취약점입니다. 미묘하지만 위험한 문제에서 비롯됩니다: DefaultHeaderFilterStrategy는 헤더 이름에 대해 대소문자를 구분하여 검사하므로, 대체 대소문자를 사용하여 우회할 수 있습니다. 즉, 차단되어야 하는 내부 Camel 헤더예: CamelExecCommandExecutable가 대소문자를...

CVE-2026-34835-Black-box-Analysis

이 저장소는 외부 침투 테스터의 관점에서 CVE-2026-34835에 대한 블랙박스 보안 분석을 제공합니다. 목표는 취약점을 리버스 엔지니어링하는 것이 아니라, 승인된 평가 중에 보안 평가자가 취약점을 식별하고, 검증하고, 그 영향을 평가하는 방법을 문서화하는 것입니다. CVE-2026-34835 블랙박스 분석 Rack Host 헤더 우회 CVE-2026-34835 에 대한 동적 애플리케이션 보안 테스트DAST 관점의 분석으로, 중간 심각도Moderate의 검증 우회 취약점입니다. 이 보고서는 외부 블랙박스 침투 테스트 관점에...

CVE-2024-10410

소스 코드 온라인 호텔 예약 시스템 PHP/MySQLi 소스 코드 포함 | SourceCodester 설명 Online Hotel Reservation System에서 고위험 취약점이 발견되었습니다. 이 취약점은 /marimar/admin/modroom/controller.php 파일의 업로드 기능에 영향을 미칩니다. 이미지 매개변수의 탐지 우회 작업으로 인해 무제한 파일 업로드가 가능합니다. 원격으로 공격을 실행할 수 있습니다. 취약점 분석 marimar\admin\modroom\controller.php 파일이 업로드된 후...

claude-create-CVE-2025-29927

Next.js 미들웨어 취약점 테스터 CVE-2025-29927 이 애플리케이션은 Next.js 미들웨어 인증 우회 취약점CVE-2025-29927을 시연합니다. 취약점 정보 CVE-2025-29927은 Next.js 미들웨어의 인증 우회 취약점입니다. 특수하게 조작된 HTTP 헤더x-middleware-subrequest를 전송함으로써, 공격자는 미들웨어에 구현된 인증 검사를 우회하고 보호된 리소스에 접근할 수 있게 됩니다. 설정 지침 1. 의존성 설치: cd...

CVE-2025-12720

g-FFL Cockpit 'POST', 36: 'callback' = CLASS, 'handleenqueueonly', 37: 'permissioncallback' = fn = self::fflcockpitisallowedself::$fflckey, 38: ; fflcockpitisallowed 함수는 플러그인 소스 코드에 노출된 하드코딩된 IP 주소base64: My4yMTIuMTg1LjE4Nw==, 디코딩: 3.212.185.187를 사용합니다. class-sync-endpoint.php의 취약한 코드 조각: 11:...

CentOS Linux 6 [TuxCare] Security Update: python / python-devel / python-libs / python-test / python-tools / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1777457441)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1777457441 advisory. - An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module...

CVE-2026-85547

CVE-2026-85547 is a cross-site request forgery (CSRF) vulnerability in MISP (Malware Information Sharing Platform). The root cause is that MISP's _isRest() check disables form-security and CSRF protections when a request is identified as REST, but this detection can be manipulated by an attacker-...

UBUNTU-CVE-2026-34959

Adminer 4.6.0 before 5.5.0 prepends the client-supplied X-Forwarded-Prefix header to $SERVER"REQUESTURI" with no trusted-proxy check and no validation of the prefix value. An attacker can supply an absolute URL e.g. X-Forwarded-Prefix: https://evil.example that flows into Location redirect header...

Signature Bypass

Apache CXF is vulnerable to signature Bypass. The vulnerability is due to insufficient verification of metadata signatures, where the JwsJsonContainerRequestFilter processes metadata without confirming it was authenticated by the accepted signature, and attackers can supply unauthenticated...

EUVD-2026-55228

A cross-site request forgery CSRF vulnerability in FreePBX Framework 17.0 allows an unauthenticated remote attacker to perform administrative actions on behalf of an authenticated administrator...

CVE-2026-72578

CVE-2026-72578 concerns FreePBX Framework 17.0. The vulnerability is a CSRF weakness in the /admin/ajax.php dispatcher (amp_conf/htdocs/admin/libraries/BMO/Ajax.class.php) where no CSRF tokens are implemented; protection relies solely on a Referer header, which can be bypassed when no Referer hea...

Updated python-starlette package fixes security vulnerabilities

The updated package fixes security vulnerabilities: Proxy-Authorization header kept across hosts. CVE-2024-28849 Starlette vulnerable to On^2 DoS via Range header merging in starlette.responses.FileResponse. CVE-2025-62727 Security restriction bypass via malformed HTTP Host header. CVE-2026-48710...

MGASA-2026-0327 Updated python-starlette package fixes security vulnerabilities

The updated package fixes security vulnerabilities: Proxy-Authorization header kept across hosts. CVE-2024-28849 Starlette vulnerable to On^2 DoS via Range header merging in starlette.responses.FileResponse. CVE-2025-62727 Security restriction bypass via malformed HTTP Host header. CVE-2026-48710...

CVE-2026-71192

In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...

CVE-2026-48061

Litestar prior to v2.22.0 is affected by CVE-2026-48061: AllowedHostsMiddleware may bypass host validation by using X-Forwarded-Host when Host is absent, enabling host-header injection (e.g., password reset links, cache keys, routing decisions). The issue occurs when no reverse proxy strips X-For...

GO-2026-5346 Caddy: FastCGI header normalization bypass in forward_auth copy_headers in github.com/caddyserver/caddy

Caddy: FastCGI header normalization bypass in forwardauth copyheaders in github.com/caddyserver/caddy...

CVE-2026-63732

9router 0.4.59 fixed in 0.4.60 contains a chain of vulnerabilities: a hardcoded default password 123456 that authenticates any fresh installation, a bypass of the LOCALONLY network gate via a spoofed Host header, and unvalidated arguments passed to childprocess.spawn when registering MCP plugins....

Security update for python-aiohttp

This update for python-aiohttp fixes the following issues CVE-2026-22815: insufficient restrictions in header/trailer handling can cause uncapped memory usage and a denial of service bsc1261320. CVE-2026-34513: unbounded DNS cache can cause a excessive memory usage and lead to a denial of service...

CVE-2026-62312

9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacker to achieve arbitrary code execution on the host operating system by combining a Host header bypass of localhost-only routes with unvalidated MCP plugin args passed to childprocess.spawn, allowing...

EUVD-2026-44814

9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacker to achieve arbitrary code execution on the host operating system by combining a Host header bypass of localhost-only routes with unvalidated MCP plugin args passed to childprocess.spawn, allowing...