ROOT-OS-DEBIAN-12-CVE-2024-7531 CVE-2024-7531 in nss - Patched by Root

Root has patched CVE-2024-7531 in the nss package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-28162 CVE-2025-28162 in libpng1.6 - Patched by Root

Root has patched CVE-2025-28162 in the libpng1.6 package for Root:Debian:12. Multiple fixed versions available...

MS-SharePoint-July-Patch-RCE-PoC

MS-SharePoint-July-Patch-RCE-PoC PoC 対象: CVE-2024-38094 CVE-2024-38024 CVE-2024-38023 PoC 動画: https://youtu.be/u8mccaakISw...

Vulnerability-Disclosure-Policy

취약점 공개 정책 우리는 취약점 공개가 양방향 소통이라고 믿습니다. 연구자뿐만 아니라 공급업체도 조정된 취약점 공개에 참여해야 합니다. Enable Security는 자체 연구를 통해 취약점을 발견하면 해당 취약점을 공급업체에 통지하며, 첫 접촉 후 90일이 지난 뒤 또는 공급업체가 수정 사항을 더 일찍 출시하는 경우에는 그 이전에 상세 정보를 방어 커뮤니티에 공개합니다. Enable Security는 공급업체와 기밀 통신을 구축하기 위해 합리적인 노력을 기울일 것입니다. 공급업체의 보안 팀 또는 지정된 연락처와 연락이 닿으면...

Sherlock

Deprecated. Have a look at Watson instead. Sherlock PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities. Currently looks for: MS10-015 : User Mode to Ring KiTrap0D MS10-092 : Task Scheduler MS13-053 : NTUserMessageCall Win32k Kernel Pool...

python-patrol

Python Patrol Scan for python installations on macOS, and run CVE-2015-20107.py script to report if patching is needed Several of these scripts need Full Disk Access permissions and must be run as root so it can scan the entire macOS filesystem except the areas restricted by macOS Make sure to ru...

CVE-2023-52251-POC

CVE-2023-52251-POC provectus/kafka-ui에 원격 코드 실행RCE 취약점이 있습니다. 이 글을 작성하는 시점에는 패치가 없지만, 공급업체에는 저희와 VINCE 팀이 통보했지만 응답이 없었습니다. 보고서는 2023년 9월 27일에 이메일과 GitHub security를 통해 provectus에 전송되었습니다. 해결 방법 최소한 전체 groovy 필터 함수를 주석 처리하거나 인증을 추가할 것을 제안합니다. 메타데이터 제목| 값 ---|--- CVSS 문자열|...

Windows-Exploit-Suggester

DESCRIPTION This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. It requires the...

ROOT-OS-DEBIAN-12-CVE-2026-11972 CVE-2026-11972 in python3.11 - Patched by Root

Root has patched CVE-2026-11972 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-12781 CVE-2025-12781 in python3.11 - Patched by Root

Root has patched CVE-2025-12781 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-33997 CVE-2026-33997 in github.com/docker/docker - Patched by Root

Root has patched CVE-2026-33997 in the github.com/docker/docker package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-42306 CVE-2026-42306 in github.com/docker/docker - Patched by Root

Root has patched CVE-2026-42306 in the github.com/docker/docker package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-34040 CVE-2026-34040 in github.com/docker/docker - Patched by Root

Root has patched CVE-2026-34040 in the github.com/docker/docker package for Root:Go. Multiple fixed versions available...

SolarView 6.00 - Remote Command Execution

SolarView Compact 6.00 is vulnerable to a command injection via networktest.php. id: CVE-2022-40881 info: name: SolarView 6.00 - Remote Command Execution author: For3stCo1d severity: critical description: | SolarView Compact 6.00 is vulnerable to a command injection via networktest.php. impact: |...

Nagios 5.5.6-5.7.5 - Authenticated Remote Command Injection

Nagios XI 5.5.6 through 5.7.5 is susceptible to authenticated remote command injection. There is improper sanitization of authenticated user-controlled input by a single HTTP request via the file /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php. This in turn can lead to remot...

Jira - Incorrect Authorization

Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 is susceptible to an incorrect authorization check in the /rest/api/2/user/picker rest resource, enabling an attacker to enumerate usernames and gain improper access. id: CVE-2019-3403...

MetInfo 7.0.0 beta - SQL Injection

MetInfo 7.0.0 beta is susceptible to SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter a different issue than CVE-2019-16997. id: CVE-2019-17418 info: name: MetInfo 7.0.0 beta - SQL Injection author: ritikchaddha severity: high description: | MetInfo...

WordPress PhonePe Payment Solutions <=1.0.15 - Server-Side Request Forgery

WordPress PhonePe Payment Solutions plugin through 1.0.15 is susceptible to server-side request forgery. An attacker can cause a website to execute website requests to an arbitrary domain, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized...

Apache ShenYu Admin JWT - Authentication Bypass

Apache ShenYu 2.3.0 and 2.4.0 allow Admin access without proper authentication. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. id: CVE-2021-37580 info: name: Apache ShenYu Admin JWT - Authentication Bypass author: pdteam severity: critical descriptio...

Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload

Cisco ISE and Cisco ISE-PIC contain an unrestricted file upload vulnerability caused by lack of file validation in an internal API, letting unauthenticated remote attackers upload and execute files as root, exploit requires crafted file upload. id: CVE-2025-20282 info: name: Cisco ISE 3.4P2 -...