CVE-2009-2265

CVE-2009-2265 - Adobe ColdFusion 8 파일 업로드 RCE CVE-2009-2265 익스플로잇에 대한 POC의 Rust 구현, Adobe ColdFusion 8을 대상으로 합니다. 취약점 개요 이 취약점은 인증되지 않은 공격자가 Adobe ColdFusion 8을 실행하는 서버의 웹 접근 가능 디렉터리에 임의의 파일을 업로드하여 원격 코드 실행RCE을 유발할 수 있게 합니다. 기술적 세부사항 취약점 : 널 바이트 주입을 통한 디렉터리 트래버설 구성 요소 : FCKeditor upload.cfm 커넥터...

CVE-2026-34159-Vulnerability-Research-Analysis-Detection

CVE-2026-34159-취약점-연구-분석-탐지 deserializetensor의 치명적인 버퍼 검증 우회 llama.cpp b8492. Null 텐서 버퍼가 경계 검사를 건너뛰어 GRAPHCOMPUTE를 통한 인증 없는 임의 읽기/쓰기를 가능하게 합니다. ASLR 우회 + TCP 50052를 통한 RCE. 포함 내용: 기술 분석 및 익스플로잇 체인 전체 Wireshark PCAP HELLO→BUFFERCLEAR Suricata/Snort 시그니처 랩 재현 Windows b8487 + WSL PoC 탐지/완화 전략...

testanull-CVE-2021-22005.py

이 저장소에는 README가 없습니다...

CVE-2025-4476-Exploit

CVE-2025-4476-Exploit 과도하게 큰 Authorization: Basic 헤더와 함께 HTTP GET 요청을 보내는 작은 Python 테스트 클라이언트입니다. 이 도구는 헤더 파싱 문제예: libsoup의 CVE-2025-4476과 같은 null-dereference/크래시 버그에 대한 랩 테스트 및 연구를 위해 제작되었습니다. 잘못된 형식의 헤더가 포함된 클라이언트-서버 교환이 어떻게 파싱 오류를 유발할 수 있는지 보여주며, 익스플로잇 프레임워크가 아닙니다. 사용법: 로컬 또는 승인된 테스트 대상에 대해서만...

CVE-2026-23398

CVE-2026-23398 Linuxカーネル icmptagvalidation ヌルポインタ参照（リモートDoS） 説明 net/ipv4/icmp.c の icmptagvalidation は、inetprotosproto をNULLチェックなしで参照します。リモートの攻撃者は、未登録の内部プロトコル番号を持つ単一の細工されたICMP Fragmentation Neededパケットを送信することで、softirqコンテキストでカーネルをクラッシュさせることができます。 影響を受けるバージョン: コミット 614aefe56af8（mainline）/...

cve-2026-43512-poc

CVE-2026-43512 — Apache Tomcat DIGEST 인증 우회 익스플로잇 가능성 분석 결과: 근본 원인이 확인되었습니다. 표준 UserDatabaseRealm 배포에 대한 종단 간 익스플로잇은 재현되지 않습니다. 자세한 내용은 분석을 참조하세요. 목차 개요 영향받는 버전 근본 원인 분석 저장소 구조 요구 사항 사용법 예상 출력 참고 자료 면책 조항 개요 CVE-2026-43512는 Apache Tomcat의 HTTP DIGEST 인증 메커니즘의 취약점입니다. RealmBase.getDigest 메서드는 A1 해...

UBUNTU-CVE-2026-89780

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb-dev on deaggregated frames rmnetmapdeaggregate allocates each sub-frame with allocskb and leaves skb-dev NULL. rmnetmapingresshandler assigns skb-dev = ep-egressdev only on the data path, but a M...

UBUNTU-CVE-2026-89784

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpcsockaddr2uaddr return value in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking it for NULL. rpcsockaddr2uaddr returns NULL when it...

CVE-2026-89780

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb-dev on deaggregated frames rmnetmapdeaggregate allocates each sub-frame with allocskb and leaves skb-dev NULL. rmnetmapingresshandler assigns skb-dev = ep-egressdev only on the data path, but a M...

Linux Distros Unpatched Vulnerability : CVE-2026-92413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file...

CVE-2026-89784

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpcsockaddr2uaddr return value in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking it for NULL. rpcsockaddr2uaddr returns NULL when it...

CVE-2026-89912

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for ARM64 architecture, specifically within the vgic-its component. A malicious guest virtual machine could trigger a null pointer dereference on the host system during a migration save operation. This could lead to a denial ...

CVE-2026-31431

CVE-2026-31431 — NULL 포인터에서 루트 권한까지: Linux 커널의 AFALG AEAD 익스플로잇 버그 클래스: NULL 포인터 역참조 → 힙 OOB 쓰기 → 자격 증명cred 덮어쓰기 영향받는 서브시스템: net/alg/afalg.c 영향: 로컬 권한 상승비특권 사용자 → root 영향받는 커널: Linux 4.4 – 4.9패치 전 요약 커널이 사용자 공간 주소를 기대하는 위치에 NULL 포인터를 전달하면서 setsockopt를 호출합니다. 커널은 주소 0x00000000에서 읽어옵니다. 그리고 제로 페이지를...

CVE-2026-92413

A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer dereference. The attack can be launched...

CVE-2026-92417

CVE-2026-92417 is a null pointer dereference in Open5GS (up to version 2.8.0), located in the function ogs_pfcp_parse_volume_measurement within lib/pfcp/types.c of the PFCP Handler component. A remote attacker with low privileges can trigger the defect, resulting in a denial of service (high avai...

EUVD-2026-80936

A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogspfcpparsevolumemeasurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation results in null pointer dereference. The attack may be launched remotely. The patch is identified as...

CVE-2026-92417 Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereference

A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogspfcpparsevolumemeasurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation results in null pointer dereference. The attack may be launched remotely. The patch is identified as...

CVE-2026-92413 Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference

A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer dereference. The attack can be launched...

CVE-2026-92413

Artifex MuPDF (up to commit b6d17493700c621c0e70036980a6ebd06d2202c9) is affected by a null pointer dereference in the function pdf_open_filter within the file pdf-stream.c , part of the PDF Xref Loading component. The vulnerability is remotely exploitable but requires user interaction to trigger...

EUVD-2026-80896

A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer dereference. The attack can be launched...