CVE-2026-18397

This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...

CVE-2026-34493

On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63...

POC-Bash-CVE-2021-3560

Bash-CVE-2021-3560 POC Bash -- CVE-2021-3560 Polkit ローカル権限昇格エクスプロイト このリポジトリは、多くの最近の Linux ディストリビューションに影響する polkit のローカル権限昇格の脆弱性である CVE-2021-3560 のための bash エクスプロイト を提供します。 !!!!!! テスト中は不安定になる可能性があります !!!!! 💥 脆弱性の概要 Kevin Backhouse によって発見されたこの脆弱性は、polkit の認証チェックを競合させることにより、非特権ユーザーが dbus...

CVE-2022-41678

Apache ActiveMQ CVE-2022-41678 취약점 악용 도구 취약점 개요 참고 문서: https://app.nextcyber.cn/courses/41/tasks/580 CVE-2022-41678은 Apache ActiveMQ의 원격 코드 실행 취약점입니다. 이 취약점을 통해 공격자는 JMXJava Management Extensions 인터페이스를 통해 Log4j 구성 또는 JFRJava Flight Recorder 구성을 수정하여 악성 JSP 웹셸을 서버의 웹 디렉토리에 작성하고, 최종적으로 원격 코드 실행을 달...

CVE-2026-18397 SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability

This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...

CVE-2026-18397 SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability

This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...

CVE-2026-18397

The SConnect native host component is vulnerable to unauthenticated remote code execution (RCE) . The flaw stems from a combination of cryptographic weaknesses and memory management issues , where an unrestricted messaging interface between an attacker-controlled web page and the native host allo...

CVE-2026-34494

On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63...

CVE-2026-34494

On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63...

CVE-2026-34494

A vulnerability in the On-Chip Debug Interface of Johnson Controls Neo Series MVP2 (versions before 3.3b63 ) allows an attacker to Collect Data from Common Resource Locations . The issue is associated with CWE-1191 (On-Chip Debug and Test Interface With Improper Access Control). The CVSS 4.0 scor...

CVE-2026-34493

On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63...

CVE-2026-34493

On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63...

CVE-2026-34493

A vulnerability in the On-Chip Debug Interface of Johnson Controls EasyIO FS32 (versions before 3.3b63 ) allows an attacker to Collect Data from Common Resource Locations . This issue is associated with CWE-1191 , involving an On-Chip Debug and Test Interface with Improper Access Control . The vu...

CVE-2026-55393

Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows remote unauthenticated attackers to read configuration and security parameters on Teledyne FLIR PackBot and FirstLook robots running this software via path traversal...

binja_dynamics

Binary Ninja 동적 분석 도구 이 프로젝트는 Binary Ninja용 binjatron 플러그인에 PyQt5 프런트엔드를 추가하며, 초보자가 리버스 엔지니어링을 더 쉽게 배울 수 있도록 돕는 강조 표시 기능을 포함합니다. 동기 x86 바이너리를 리버스 엔지니어링하는 능력은 정보 보안 업계 밖에서도 중요한 기술입니다. 그러나 풍부한 교육 자료가 있음에도 불구하고 여전히 배우기 어려운 기술로 남아 있습니다. 많은 학생들이 단순한 바이너리에서 조금만 진전을 이루는 데도 요구되는 배경 지식의 양에 대해 좌절감을 표현했습니다...

EUVD-2026-91060

Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader. Although the debug traces are physically severed during manufacturing, an attacker with physical access can restore the connection, interrupt the boot...

CVE-2026-102370

The TP-Link Kasa EC70 v4 and EC71 v4 devices are vulnerable because the production debug interface is not logically disabled at the firmware or chip level, and the bootloader remains unlocked. While debug traces are physically severed during manufacturing, an attacker with physical access can res...

Iot_Hacking_Camera_0day

IotHackingCamera0day IoT 카메라 0day AHD DVR ADN-448은 http 인터페이스를 통한 인증되지 않은 버퍼 오버플로우에 취약합니다. 웹 서버 인터페이스로 간단히 이동하여 username과 password에 엄청난 양의 데이터를 입력하면 카메라가 재부팅되는 것을 볼 수 있습니다. 꼭 영상을 시청하여 확인해 보세요 : 즐거운 IoT- 봇팅 하세요 : 취약한 펌웨어 버전은 업로드된 이미지에서 확인할 수 있습니다 다음은 PoC입니다:...

CVE-2026-14983

Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to achieve denial of service against Teledyne FLIR PackBot robots running this software via misuse of the reboot endpoint...

CVE-2026-55393 Local File Inclusion in Teledyne FLIR Robots running Aware2

Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows remote unauthenticated attackers to read configuration and security parameters on Teledyne FLIR PackBot and FirstLook robots running this software via path traversal...