CVE-2024-57241

CVE-2024-57241CNNVD-2024-34500830 DEDECMS 5.71SP1 및 이전 버전을 사용하는 웹 애플리케이션의 경우, CMS의 소스 코드 논리 오류로 인해 입력된 GET 요청을 판단하지 못하여 URL 리디렉션이 발생합니다. dedecms 5.71sp1 및 이하 버전을 사용하는 웹 애플리케이션에서 CMS 소스 코드 논리 오류로 인해 입력된 GET 요청을 판단하지 못하여 URL 리디렉션이 발생합니다. POC 사용 방법 poc 사용 방법 target.txt의 도메인 이름만 변경하세요 target.txt의 도메인...

Guide-and-theoretical-code-for-CVE-2023-35674

CVE-2023-35674를 위한 가이드 및 이론적 코드 CVE-2023-35674에 대한 가이드 및 이론적 코드 Android는 제 실력 밖이니, 이 글은 제 관점에서 이 CVE를 어떻게 익스플로잇할지에 대한 개괄적인 개요로 봐주세요. 코드 스니펫은 그냥 뼈대일 뿐입니다. 도와주세요 : 우선 CVE-2023-35674만으로는 익스플로잇할 수 없습니다. 왜냐하면 CVE-2023-35674는 논리 오류로 인해 백그라운드 액티비티를 시작하는 것만 허용하기 때문입니다. 그래서 본질적으로 이 CVE를 사용해 앱을 백그라운드에서 실행하...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0006 2026-03-02 In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

poc-CVE-2026-0073

CVE-2026-0073 PoC 무선 ADB TLS 인증 우회 이 디렉토리에는 CVE-2026-0073에 대한 Python 개념 증명PoC이 포함되어 있습니다. 이 스크립트는 AI 지원 코드 생성 기법을 사용하여 생성되었습니다. 요약 CVE-2026-0073은 ADB 데몬 인증서 검증auth.cpp의 adbdtlsverifycert의 논리적 결함입니다. 취약한 검증 로직은 EVPPKEYcmp...의 0이 아닌 모든 반환 값을 성공적인 일치로 처리합니다. 예상되는 비교 결과 처리는 다음과 같아야 합니다: 1 = 키 일치 0 = ...

CVE-2026-35570

샌드박스 탈출: openclaude에서 심각한 경로 탐색 우회를 발견한 방법 CVE-2026-35570 | CVSS 8.4 High | openclaude v0.1.7 모든 취약점이 정교한 익스플로잇 체인을 요구하는 것은 아닙니다. 때로는 잘못 배치된 return 문 하나만으로 보안 모델에 구멍을 뚫을 수 있습니다. 이것이 바로 CVE-2026-35570입니다. 이 글은 openclaude v0.1.7에서 발견한 샌드박스 우회에 대한 분석입니다. 파일시스템 격리 계층을 검사 없이 통과하는 경로 탐색 페이로드를 가능하게 하는 로...

cve-2026-0013-exploit

This repository does not have a README...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Уязвимость DoS на подавление RADIUS в Cisco ISE 🌐 ⚠️ Обзор 🚨 Высокий уровень опасности — отказ в обслуживании DoS в Cisco Identity Services Engine ISE! 💥 Неаутентифицированный удаленный злоумышленник может вызвать сбой устройства с помощью специально сформированных RADIUS-пакетов...

CLEANSTART-2026-WY70417 logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem

Security vulnerability affects the util-linux package. A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem...

NPM: ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range

NPM: ip-address: isInSubnet and isHostInSubnet compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range vulnerability discovered by ? in WordPress Npm ip-address versions = 10.7.0...

SUSE CVE-2026-101912

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

CVE-2025-26465

CVE-2025-26465 OpenSSH 클라이언트는 6.8p1 9.9p1포함 버전 사이에 논리 오류가 있어, VerifyHostKeyDNS 옵션이 활성화된 경우 능동적 MitM 공격에 취약해집니다. 이로 인해 악의적인 침입자가 클라이언트가 연결을 시도할 때 합법적인 서버로 위장할 수 있습니다. 이 탐지 방법은 어떻게 작동하나요? 이 템플릿은 다음 취약한 버전을 매칭합니다: - "SSH-2.0-OpenSSH6.8p1" - "SSH-2.0-OpenSSH6.9p1" - "SSH-2.0-OpenSSH7.0p1" -...

CVE-2026-101912

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

DEBIAN-CVE-2026-101912

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

CVE-2026-101913

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.5.1, the Address6 isLinkLocal method in src/ipv6.ts recognizes only fe80::/64 instead of the complete fe80::/10 IPv6 link-local range. An attacker-controlled address elsewhere in fe80::/10 can...

CVE-2026-101912

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

CVE-2026-101912 ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

GO-2026-6488 OpenFGA: ListUsers returns a deliberately-excluded user when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user in github.com/openfga/openfga

OpenFGA: ListUsers returns a deliberately-excluded user when a but not exclusion under a type-bound wildcard is intersected and with another relation that also grants that user in github.com/openfga/openfga...

CVE-2026-90176

A flaw was found in ksmbd, a server message block SMB protocol implementation within the Linux kernel. A logic error in the checklockrange function, which is responsible for enforcing file locks, causes it to bypass mandatory byte-range lock checks for single-byte operations. This allows an...

CVE-2026-100598 OpenClaw before 2026.7.1 Approval Binding Logic Error

OpenClaw npm package openclaw before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured approval request could instead attach to ordinary outbound text when unrelated outbound messages and a pending approval are present in the...

CVE-2026-100598 OpenClaw before 2026.7.1 Approval Binding Logic Error

OpenClaw npm package openclaw before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured approval request could instead attach to ordinary outbound text when unrelated outbound messages and a pending approval are present in the...