CVE-2024-38063

CVE-2024-38063 - Windows TCP/IP リモートコード実行の脆弱性。BSOD の発生が RCE につながる可能性がありますが、私のコードは BSOD のみを引き起こします。私はパッチの分析とターゲットシステムでの RCE 発生につながるテストを継続的に行っています。 スター履歴 概要 CVE-2024-38063 は、Windows TCP/IP スタックにおける重大なセキュリティ脆弱性であり、リモートコード実行 RCE を可能にします。この脆弱性は、Windows が IPv6...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 編集：Oracleは新しい脆弱性CVE-2025-61884を開示しました。この脆弱性の検出スクリプトは、このリポジトリまたは元の場所（https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550）にあります。 Oracleのセキュリティアドバイザリからの引用： このセキュリティアラートは、Oracle E-Business...

NetCrackPi

NetCrackPi 이 저장소는 라즈베리 파이를 네트워크 익스플로잇 유틸리티로 변환하기 위한 집단 다운로드 후보입니다 물론 교육 목적으로. NetCrackPi의 기능으로는 워드라이빙, WEP, WPA, WPA2 크래킹, 패킷 스니핑, ARP 스푸핑, MiTM 공격, NIDS, WPS Pixie-Dust 공격, AP 스푸핑, 네트워크 감사 등이 포함됩니다. 기능 네트워크 크래킹 Airsuite-ng - 탐지기, 패킷 스니퍼, WEP 및 WPA/WPA2-PSK 크래커 및 분석 도구를 포함한 소프트웨어 제품군 Wash & Reave...

Astra Linux – Vulnerability in edk2

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage function. An attacker may cause memory corruption due to an overflow through an adjacent network. Successful exploitation of this vulnerability could result in a loss of confidentiality, integrity, and/or availability...

CVE-2026-78510

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

CVE-2026-69418

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73775

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...

CVE-2026-69349

CVE-2026-69349 is an information disclosure vulnerability in Windows Management Instrumentation (WMI) caused by use of an uninitialized resource . An authorized attacker can exploit it over a network to disclose information, with high confidentiality impact but no integrity or availability impact...

Microsoft Office Outlook Remote Code Execution Vulnerability

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread could occur in the freerdpimagecopyfromicondata function libfreerdp/codec/color.c, due to malicious RDP window icon TSICONINFO data. This bug could be exploited over the network when a clie...

dotnet: .NET Framework: Denial of Service via network-based buffer overflow

A flaw was found in .NET Framework. This vulnerability, a stack-based buffer overflow, allows an unauthorized attacker to remotely exploit the system over a network. Successful exploitation can lead to a denial of service DoS, making the affected system unavailable to legitimate users...

ASP.NET Core: ASP.NET Core: Privilege Escalation via Incorrect Authentication Algorithm

A flaw was found in ASP.NET Core. An authorized attacker can exploit an incorrect implementation of the authentication algorithm over a network. This vulnerability allows the attacker to elevate their privileges, potentially gaining unauthorized access to sensitive resources or performing actions...

CVE-2026-73911

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

CVE-2026-71036

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-71016

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2026-70923

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks require...

CVE-2026-70875

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70844

Vulnerability in the Oracle Loans product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Loans. Successful attacks...

CVE-2026-70805

Vulnerability in the Oracle Project Planning and Control product of Oracle E-Business Suite component: Change Management. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-62612

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report...