CVE-2022-24760

CVE-2022-24760 flow 기본적으로 db에 클래스를 추가/삭제/수정할 때 key가 필요하지 않음 Diff commit https://github.com/parse-community/parse-server/commit/886bfd7cac69496e3f73d4bb536f0eec3cba0e4d Prototype pollution은 expandResultOnKeyPath 함수에서 발생 DatabaseController.js sanitizeDatabaseResult - expandResultOnKeyPath...

CVE-2026-107363

In OpenStack Zaqar before version 23.0.1 , a vulnerability exists in the WebSocket transport where it fails to bind the project identifier in subsequent requests to the project authenticated by the Keystone token . An authenticated user with a valid token for one project can substitute another pr...

CVE-2026-107363

In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests to the project authenticated by the Keystone token. An authenticated user with a valid token for one project may substitute another project's UUID to enumerate, inspect, create, o...

CVE-2026-107363

In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests to the project authenticated by the Keystone token. An authenticated user with a valid token for one project may substitute another project's UUID to enumerate, inspect, create, o...

CVE-2026-107363

In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests to the project authenticated by the Keystone token. An authenticated user with a valid token for one project may substitute another project's UUID to enumerate, inspect, create, o...

CVE-2022-30525_check

CVE-2022-30525check 설명: 이 스크립트는 펌웨어 버전 5.005.21 Patch 1을 실행하는 Zyxel USG FLEX 장치에서 OS 명령 주입 취약점CVE-2022-30525의 존재 여부를 확인합니다. 이 취약점으로 인해 공격자는 취약한 장치에서 특정 파일을 수정하고 OS 명령을 실행할 수 있습니다. 사용 방법: 시스템에 Python 3이 설치되어 있는지 확인하세요 스크립트를 다운로드하여 로컬 컴퓨터에 저장하세요 명령 프롬프트 또는 터미널 창을 열고 스크립트가 저장된 디렉터리로 이동하세요 다음 명령으로...

CVE-2026-86684

A flaw was found in Gitea. An improper authorization check in the push mirror API allows an authenticated repository administrator to bypass local file system access restrictions. When a repository owner has permission to use local paths, an administrator lacking that privilege can configure a pu...

CVE-2026-84654

A flaw was found in Stapler, a web framework used by Jenkins. This vulnerability allows an attacker, who can submit configuration forms, to modify public static fields of configuration objects. This modification can lead to changes that apply globally across the entire Jenkins instance, potential...

CVE-2026-107174

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2022-1421

CVE-2022-1421 CVE-2022-1421에 대한 개념 증명PoC Discy 참고 자료 https://wpscan.com/vulnerability/a7a24e8e-9056-4967-bcad-b96cc0c5b249 https://vulners.com/cve/CVE-2022-1421...

CVE-2026-107174

A security boundary bypass vulnerability exists in source-to-image due to improper sanitization of symbolic links during archive unpacking. An attacker providing a malicious builder image can embed absolute symbolic links pointing outside the extraction directory. This flaw allows the attacker to...

EUVD-2026-94367

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107174 Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107174

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-103435

A flaw was found in claude-code. An attacker with write access to a shared workspace can achieve arbitrary file modification and privilege escalation by exploiting a time-of-check to time-of-use TOCTOU race condition. By replacing a project file with a symbolic link between the permission check a...

CVE-2026-106486

A flaw was found in the Backstage Bitbucket Scaffolder backend modules. The Bitbucket pull request Scaffolder actions do not properly validate filesystem paths. An authenticated attacker who can execute an eligible template and influence an allowed repository can manipulate files outside the...

WordPress Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin <= 5.6.9 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Customer PII Modification vulnerability

Authenticated Subscriber+ Insecure Direct Object Reference to Arbitrary Customer PII Modification vulnerability discovered by owlmind in WordPress Plugin LatePoint versions = 5.6.9...

CVE-2026-104678

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

EUVD-2026-94183

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

CVE-2026-106471

A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of multiple @Verify-annotated parameters is accessible, instead of requiring access to every verified entity. A low-privilege authenticated attacker who can access the first referenced object ca...