CVE-2022-21907

CVE-2022-21907 설명 - CVE-2022-21907의 POC: HTTP 프로토콜 스택 원격 코드 실행 취약점. - 2022-01-17에 antx가 작성. 상세 - HTTP 프로토콜 스택 원격 코드 실행 취약점. - https://github.com/antx-code/CVE-2021-31166CVE-2021-31166과 유사. - 이 문제는 작년에 https://github.com/antx-code/CVE-2021-31166CVE-2021-31166에서 보고된 이후로도 여전히 존재합니다. CVE 심각도 -...

CVE-2026-21962

🔥 CVE-2026-21962 — Oracle HTTP Server 検出ツールキット CVE-2026-21962 の影響を受ける Oracle HTTP Server および WebLogic Proxy Plug-in インスタンスを識別するための、安全で悪用を伴わない検出ツールです。 🧠 脆弱性の概要 CVE: CVE-2026-21962 深刻度: Critical 攻撃ベクトル: Network 認証要件: 不要 この脆弱性により、リモートの認証されていない攻撃者が機密性と完全性を侵害し、システム全体の完全な侵害につながる可能性があります。 🎯 影響を受けるバージョン...

windows-smb-vulnerability-framework-cve-2025-33073

Windows SMB クライアント脆弱性研究フレームワーク 著者: cyberseallll 作成日: 2025 概要 私は、Windows SMB クライアントの特権昇格の重大な脆弱性である CVE-2025-33073 を分析・理解するために、この研究フレームワークを開発しました。この実装は、脆弱性研究と制御されたテスト環境のための包括的なツールを提供します。 脆弱性の詳細 CVE-2025-33073 は、Windows SMB クライアントの実装に影響を与える、ネットワークからアクセス可能な特権昇格の脆弱性です。この脆弱性は、SMB...

CVE-2026-50751

CVE-2026-50751 Check Point IKEv1 스캐너 Check Point Quantum Security Gateways에 영향을 주는 치명적인 IKEv1 인증 우회 취약점인 CVE-2026-50751 용 멀티스레드 취약점 스캐너입니다. 개요 IKEv1이 활성화된 Check Point 원격 액세스 VPN 시스템은 인증 우회 공격에 취약합니다. 이 도구는 대상 시스템에서 IKEv1이 활성화되어 있는지 탐지합니다. CVE-2026-50751 세부 정보: CVSS 점수 : 9.8 치명적 취약점 : Check Point...

CVE-2022-21907

CVE-2022-21907 説明 CVE-2022-21907 の POC: HTTP プロトコル スタックのリモート コード実行の脆弱性。 Malwareman により 2022-09-17 に作成。 詳細 HTTP プロトコル スタックのリモート コード実行の脆弱性。 https://github.com/antx-code/CVE-2021-31166CVE-2021-31166 に類似。 この問題は、昨年 https://github.com/antx-code/CVE-2021-31166CVE-2021-31166 として報告されて以降も存在し続けています。 CVE 深刻度...

CVE-2021-44228

CVE-2021-44228 2021년 12월 9일, 세계는 Log4J 관련 새로운 보안 결함을 알게 되었습니다. 이 취약점의 CVSSv3 Common Vulnerability Scoring System 점수는 10으로 평가되어 치명적 수준입니다https://nvd.nist.gov/vuln/detail/CVE-2021-44228. CVSSv3 해당 CVSSv3 벡터는 다음과 같습니다: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. 평가 이유를 완전히 이해할 수 있도록 각 값에 대해 설명하겠습니...

CVE-2026-83206

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2026-78439

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

EUVD-2026-73241

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73047

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...

CVE-2026-69875

CVE-2026-69875 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker (low privileges, user interaction required) to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) with impacts of High across confidentiality, integrity, and...

EUVD-2026-73041

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

CVE-2026-69491

CVE-2026-69491 is a heap-based buffer overflow in Windows Microsoft DirectMusic that allows an unauthorized, network-based attacker to achieve remote code execution without user interaction or prior privileges. The vulnerability is rated CVSS 9.8 (Critical) with high impact to confidentiality, in...

EUVD-2026-73219

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

Raw Image Extension Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

PT-2026-87433

Name of the Vulnerable Software and Affected Versions Windows NDIS affected versions not specified Description A use-after-free issue in Windows NDIS allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption flaw that occurs when an application...

PT-2026-87400

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

snphost-0.7.0-3.1 on GA media (moderate)

snphost-0.7.0-3.1 on GA media Announcement ID: openSUSE-SU-2026:11654-1 Rating: moderate Cross-References: CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662 CVE-2026-45784 CVSS scores: CVE-2026-41677 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N...

Linux Distros Unpatched Vulnerability : CVE-2026-82209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute...

Fedora 44 : subfinder (2026-6f9cef7bfe)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6f9cef7bfe advisory. Update to 2.16.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...