activemq-cve-lab

ActiveMQ メッセージブローカー 概要 メッセージのインポート/エクスポート機能を備えた ActiveMQ メッセージブローカーアプリケーション。 バージョン: 5.11.1 機能 メッセージキューの管理 キューの統計とモニタリング メッセージファイルのインポート/エクスポート リアルタイムのブローカー状態表示 クイックスタート Docker root@kitploit: docker-compose up -d アクセス: http://localhost:8161/console/ ローカルビルド root@kitploit: mvn clean package...

CVE-2023-49988

CVE-2023-49988 Hotel Booking Management v1.0 - rooms.php の "npss" パラメータにおける SQLインジェクションの脆弱性 説明 : Hotel Booking Management のバージョン1には、SQLインジェクションの脆弱性が存在します。悪意のある攻撃者は、宿泊オプションの価格と割引を編集する際に、脆弱なパラメータ npss、dpss、npsd、dpsd、npds、dpds、npdd、dpdd、npdst、dpdst を通じて MySQL データベースに SQL コマンドを実行できます。 影響を受ける製品バージョン :...

ROS-20260921-73-0108

The vulnerability in golang-github-rancher-local-path-provisioner is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to increase their privileges...

CVE-2026-94214: URL Redirection to Untrusted Site

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the file /login.html of the component Management Service. Performing a manipulation of the argument Host results in open redirect. It is possible to...

The vulnerability of the crypto.setEngine() function in the vm2 package manager NPM allows a hacker to execute arbitrary code.

The vulnerability of the crypto.setEngine function in the vm2 package manager’s NPM library is related to improper management of processes. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerabilities of the functions cgx_lmac_write() and cgx_lmac_read() in the driver file drivers/net/ethernet/marvell/octeontx2/af/cgx.c of the Linux operating system’s network controller driver for Marvell OcteonTX2 AF cores allow a hacker to cause service failures.

The vulnerabilities of the functions cgxlmacwrite and cgxlmacread in the file drivers/net/ethernet/marvell/octeontx2/af/cgx.c of the network controller driver for the Marvell OcteonTX2 AF in the Linux operating system are related to insufficient resource management during its existence. Exploitin...

CVE-2026-94425: Improper Privilege Management

A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was...

CVE-2026-94496: Missing Authorization

jshERP through 3.6 fails to validate caller permissions in role management endpoints, allowing authenticated users to modify any role's data scope or delete roles. Attackers can exploit the /role/update and /role/delete endpoints to escalate privileges, change data visibility to all data, and...

CVE-2026-55625: Authorization Bypass Through User-Controlled Key

GoCD is a continuous deliver server. From 16.1.0 until 26.1.0, the internal material connection test APIs at /go/api/admin/internal/materialtest and /go/api/internal/configrepos//materialtest accept an arbitrary existing pipeline and pipeline-group context without sufficient validation. A pipelin...

Atlassian Jira Service Management Data Center and Server 10.0.x < 10.3.25 / 10.4.x < 11.3.11 (JSDSERVER-16751)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16751 advisory. - In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and UR...

CVE-2026-48826: Improper Privilege Management

HomeBox is a home inventory and organization system. Prior to 0.26.0, HandleWipeInventory in backend/app/api/handlers/v1/v1ctrlactions.go authorizes POST /v1/actions/wipe-inventory through the global ctx.User.IsOwner value instead of the caller's role in the active group, while the active group i...

CVE-2026-79317

A session invalidation flaw exists in x-ui 0.3.2 because the full user object is stored in a client-side signed cookie . The application's authentication mechanism only verifies that a user object can be retrieved from the cookie without re-validating against the database or checking a session ve...

ROS-20260921-73-0105

The vulnerability in perl-HTTP-Daemon is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-94145: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in xuxueli xxl-job up to 3.4.2/3.5.0. This vulnerability affects unknown code of the file xxl-job-admin/src/main/java/com/xxl/job/admin/business/controller/JobInfoController.java of the component Task Management Interface. The manipulation of the argument name/autho...

CVE-2026-94218: Missing Authorization

A flaw was found in the authentication session management of Keycloak, an identity and access management solution. The issue occurs when an administrator enforces a stronger authentication flow, such as mandatory two-factor authentication 2FA setup, through a client policy. A user can bypass this...

CVE-2026-94381: Improper Privilege Management

MISP has a security issue that can let a user gain more access than their API key is supposed to allow. A read-only API key should only let someone view information. However, after logging in with such a key, a specific MISP function could accidentally restore the user’s normal account permission...

The vulnerability of the functions copy_to_user_aead(), copy_to_user_ealg(), and copy_to_user_state_extra() in the net/xfrm/xfrm_user.c file of the XFRM/IPsec subsystem in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the functions copytouseraead, copytouserealg, and copytouserstateextra in the net/xfrm/xfrmuser.c sub-module of the XFRM/IPsec subsystem in Linux operating systems is related to insufficient control over resources with dynamic management. Exploitation of this vulnerability...

Atlassian Jira Service Management Data Center and Server 5.15.2 < 10.3.24 / 10.4.x < 11.3.7 (JSDSERVER-16596)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16596 advisory. - Impact: The fix for CVE-2021-23337 https://github.com/advisories/GHSA-35jh-r3h4-6jhm added validatio...

CVE-2024-7593

CVE-2024-7593 説明: CVE-2024-7593 は、Pulse Secure VPN を含む複数の Pulse Secure 製品に影響を与える重大な脆弱性です。この脆弱性により、管理インターフェースにアクセスできる認証済みの攻撃者が、影響を受けるサーバー上で任意のコマンドを実行できる可能性があります。これにより、悪意のあるコードが実行され、システムの整合性と可用性が損なわれる可能性があります。 技術的詳細 種類: リモートコード実行 RCE。 深刻度: 重大 CVSS: 9.8。 影響を受けるバージョン: Pulse Secure VPN...

puppet-os-hardening

Puppet OS hardening 目次 1. モジュールの説明 - モジュールの機能と有用性 2. セットアップ - oshardening の基本 セットアップ要件 oshardening の導入 3. 使用方法 - 設定オプションと追加機能 Puppet Enterprise に関する重要事項 パラメータ Hiera での使用方法 導入・削除したいパッケージと無効化するサービスに関する注意事項 4. 制限事項 - OS 互換性など 5. 開発 - モジュールへの貢献ガイド 6. テスト - コード変更に対する品質ゲート ローカルテスト PDK テスト 統合テスト（Docker）...