EUVD-2026-83293

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header offset values...

CVE-2026-85058

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client-controlled Last Will message through publish2Subscribers without invoking the authorizator.canWrite check used by normal PUBLISH paths. When anonymous access is enabled and topic ACLs restrict...

CVE-2026-61550

Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2...

CVE-2026-1030

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data...

CVE-2026-11381

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution list structures...

CVE-2026-10747

IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow in protocol message processing before authentication...

CVE-2026-11381

IBM MQ is vulnerable to a heap-based buffer overflow (CWE-122) in the queue manager's message descriptor conversion when processing message distribution list structures . An authenticated network attacker can trigger a denial of service or potentially execute arbitrary code. IBM rates the severit...

CVE-2026-11381 IBM MQ for HPE NonStop is vulnerable to a denial of service issue

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution list structures...

EUVD-2026-83038

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution list structures...

EUVD-2026-83032

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths...

CVE-2026-10747

IBM MQ Appliance is vulnerable to a heap buffer overflow (CWE-122) in the queue manager's protocol message processing, exploitable before authentication over the network. An unauthenticated remote attacker with access to the listener port can trigger a denial of service or potentially achieve arb...

EUVD-2026-83138

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data...

CVE-2026-1030

CVE-2026-1030 affects IBM Common Licensing (Agent 9.0, 9.0.0.1, 9.0.0.2; ART 9.0, 9.0.0.1, 9.0.0.2), which generates error messages containing sensitive information about its environment, users, or associated data (CWE-209). The vulnerability requires low privileges and no user interaction, with ...

CVE-2021-30146

CVE-2021-30146 Seafile 7.0.5 永続的XSS 提案された説明: アプリケーション（サーバーバージョン: 7.0.5 Seafile）は、ライブラリ共有機能を介した永続的XSSに対して脆弱です。 脆弱性についてベンダーに通知しました。 発見者: Alexander Semenenko 概念実証:...

EUVD-2025-210933

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2026-8239

CVE-2026-8239 CVE-2026-8239 は、Concrete CMS 9.5.0 以前に影響する Insecure Direct Object Reference IDOR 脆弱性です。この脆弱性は /ccm/frontend/conversations/getrating エンドポイントに存在し、攻撃者が任意のメッセージ ID を指定することで、会話メッセージが存在するかどうかを判定し、その評価スコアを取得できるようにします。このエンドポイントは、要求された情報を返す前に適切な認可チェックを実行していません。 影響を受けるソフトウェア 製品: Concrete CMS...

kcatcher

Kafka 클러스터에 숨어 있는 것을 잡아내세요. 소개 Kcatcher는 Kafka 클러스터 설정을 열거하고 평가하기 위한 명령줄 유틸리티입니다. Apache Kafka 클러스터에 연결하여 브로커, 토픽, ACL 및 메시지 샘플에 대한 상세 정보를 검색합니다. 보안 감사, 인프라 평가 또는 Kafka 환경에서 실행 중인 항목을 이해하는 데 적합합니다. 데모 설치 Go Go 환경이 작동한다면 다음을 통해 설치할 수 있습니다: root@kitploit: go install...

CVE-2023-3897

CVE-2023-3897 Windows 배포에서 On-premise SureMDM 솔루션의 CAPTCHA 우회를 통해 사용자 이름 열거가 가능하며, 이를 통해 공격자가 오류 메시지를 통해 로컬 사용자 정보를 열거할 수 있습니다. 이 문제는 SureMDM On-premise 6.31 및 이하 버전에 영향을 미칩니다. https://nvd.nist.gov/vuln/detail/CVE-2023-3897...

CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC CheckPoint SNX VPN Linux 클라이언트를 통한 권한 있는 파일 읽기에 대한 개념 증명. 영향을 받는 버전 CheckPointVPNSNXLinux800007075.sh MD5 체크섬: 4372e9936e2dfb1d1ebcef3ed4dd7787 익스플로잇 익스플로잇을 수행하려면 -f 매개변수를 사용하여 모든 파일을 SNX 구성으로 로드하면 됩니다. 파일이 유효한 SNX 구성이 아닌 경우 오류가 발생하고 구문 오류를 표시하며, 문자열 종결자가 발견될 때까지...

POC-CVE-2018-4327-and-CVE-2018-4330

brokentooth CVE-2018-4327에 대한 POC 적어도 제 생각에는 그렇습니다. CVE-2018-4327과 CVE-2018-4330은 모두 @SparkZheng이 작성했지만 어떤 버그가 어떤 CVE에 해당하는지 명시되어 있지 않아서, 그가 먼저 설명한 이 버그를 가정하고 있습니다. Tested on iPhone 6S 11.3.1 Should work until 11.4 SpringBoard 및 일부 서비스에서 PCARM의 IP 레지스터 버전를 원하는 값으로 설정할 수 있습니다. 코드를 실행한 다음 설정의 블루투스...