log4shell-CVE-2021-44228

Log4Shell 直接影響フィクスチャ ShieldOps 向けの、意図的に脆弱でデプロイ不可の Java/Maven 入力です。ビルド、実行、デプロイはしないでください。 このプロジェクトは org.apache.logging.log4j:log4j-core:2.14.1 を固定しています。LoginAuditService.recordLoginAttempt は、認証されていない HTTP User-Agent の値を Log4j のメッセージパラメータに送信します。これが CVE-2021-44228 で説明されている、攻撃者が制御するメッセージの条件です。...

VanCleef

VanCleef Rancher 2.1.4 웹 파라미터 변조 CVE-2019-11881 ./vancleef.rb rancherip rancherport messagetodisplay double-quoted Example: ./vancleef.rb 192.168.0.1 8080 "Rancher is outdated. Please update following the instructions at http://192.168.0.25/rancher-updating" MITRE CVE 공지...

Bookly <=28.1 - IDOR Unauthenticated Sensitive Data Access

Bookly WordPress plugin = 28.1 contains an insecure direct object reference caused by missing validation on 'conversationid' parameter, letting unauthenticated attackers read and inject messages into any AI booking conversation, exploit requires no authentication. id: CVE-2026-89063 info: name:...

CVE-2022-25257

CVE-2022-25257 SAS Logon 9.4에서 경고 메시지 주입이 가능합니다. 발견일: 2022년 2월 15일 영향받는 버전: 9.4 POC 익스플로잇: SASLogon/csrf에는 "target"이라는 매개변수가 있습니다. 이 매개변수는 사용자가 열려고 했던 URL에 대한 경고 메시지에 영향을 미칩니다 하지만 출처를 알 수 없기 때문에 시스템이 차단합니다. 매개변수를 변경하면 인지하지 못한 사용자에게 영향을 줄 수 있는 긴 가짜 문장을 작성할 수 있습니다. 페이로드 예시:...

DEBIAN-CVE-2026-86345

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...

CVE-2026-86345

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...

Log4j_CVE-2021-44228

Log4j 취약점은 "Log4Shell" 또는 "CVE-2021-44228"로도 알려져 있으며, Apache Log4j 라이브러리의 치명적인 보안 결함입니다. Log4j는 개발자가 애플리케이션에서 파일, 데이터베이스, 콘솔 출력 등 다양한 대상으로 메시지를 로깅할 수 있도록 하는 널리 사용되는 Java 기반 로깅 프레임워크입니다. 이 취약점은 2021년 12월에 발견되었으며, 그 심각성과 악용 가능성으로 인해 상당한 주목을 받았습니다. Log4j 2.x 버전에 영향을 미치며, 경우에 따라 이전 버전에도 영향을 미칠 수 있습니다...

CVE-2018-10933

CVE-2018-10933 시나리오 재현 및 개선 설명 이것은 CVE-2018-10933libSSH 인증 우회에 대한 교육 목적입니다. libssh 버전 0.6 이상에는 서버 코드에 인증 우회 취약점이 있습니다. 공격자는 서버가 인증을 시작하기 위해 기대하는 SSH2MSGUSERAUTHREQUEST 메시지 대신 SSH2MSGUSERAUTHSUCCESS 메시지를 서버에 제시함으로써, 어떤 자격 증명 없이도 성공적으로 인증할 수 있습니다. "patch" 폴더에는 테스트 목적으로 서버의 수정된 코드가 포함되어 있습니다 어떤 인증 중...

AlmaLinux 9.2 [TuxCare] Security Update: bluez / bluez-cups / bluez-hid2hci / bluez-libs / bluez-libs-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1763031616)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1763031616 advisory. - BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows...

CVE-2026-95846

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will message without applying the canWrite authorization and reserved-topic checks used for a normal PUBLISH. A client can configure a Will for a topic that the client is not permitted to...

CVE-2026-95846

The Moquette lightweight Java MQTT broker is vulnerable to unauthorized message injection in versions prior to 0.18.1 . The PostOffice.publishWill function fails to apply canWrite authorization and reserved-topic checks when publishing a client's Last-Will message. This allows a client to configu...

CVE-2026-95846 Moquette publishes Last-Will messages without enforcing write authorization

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will message without applying the canWrite authorization and reserved-topic checks used for a normal PUBLISH. A client can configure a Will for a topic that the client is not permitted to...

EUVD-2026-85416

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will message without applying the canWrite authorization and reserved-topic checks used for a normal PUBLISH. A client can configure a Will for a topic that the client is not permitted to...

CVE-2026-95846 Moquette publishes Last-Will messages without enforcing write authorization

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will message without applying the canWrite authorization and reserved-topic checks used for a normal PUBLISH. A client can configure a Will for a topic that the client is not permitted to...

CVE-2026-95846 Moquette publishes Last-Will messages without enforcing write authorization

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will message without applying the canWrite authorization and reserved-topic checks used for a normal PUBLISH. A client can configure a Will for a topic that the client is not permitted to...

CVE-2026-95846: Missing Authorization

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will message without applying the canWrite authorization and reserved-topic checks used for a normal PUBLISH. A client can configure a Will for a topic that the client is not permitted to...

PT-2026-97397

Name of the Vulnerable Software and Affected Versions Moquette versions prior to 0.18.1 Description An issue exists where the PostOffice.publishWill function publishes a client's Last-Will message without applying the canWrite authorization and reserved-topic checks typically required for a norma...

CVE-2026-91847

The Online Scheduling and Appointment Booking System WordPress plugin before 28.2 does not verify that the requester owns the AI booking-assistant conversation named in its unauthenticated conversation actions, allowing any unauthenticated visitor to read another visitor's assistant messages and ...

CVE-2026-91847 Bookly < 28.2 - Unauthenticated AI Assistant Conversation Disclosure and Message Injection via IDOR

The Online Scheduling and Appointment Booking System WordPress plugin before 28.2 does not verify that the requester owns the AI booking-assistant conversation named in its unauthenticated conversation actions, allowing any unauthenticated visitor to read another visitor's assistant messages and ...

CVE-2026-91847

The Online Scheduling and Appointment Booking System (Bookly) WordPress plugin, in versions before 28.2 , is vulnerable to an Insecure Direct Object Reference (IDOR) . The root cause is a failure to verify that a requester owns the specific AI booking-assistant conversation named in unauthenticat...