cctv

CCTV — HackTheBox ウォークスルー プラットフォーム: HackTheBox | OS: Linux 攻撃チェーン CVE-2024-51482 を悪用した ZoneMinder の SQL インジェクションにより、データベースから bcrypt ハッシュが漏洩する。hashcat でクラックすると SSH アクセスが得られる。ポートフォワーディングで露出した内部の motionEye インスタンスは CVE-2025-60787 に脆弱であり、root シェルを取得できる。 列挙 root@kitploit: nmap -sV -sC 10.129.53.160 -Pn...

CVE-2026-18869

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

EUVD-2026-83299

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

CVE-2026-18869 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

CVE-2026-18869 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

CVE-2026-18869

IBM i versions 7.3 through 7.6 are affected by a Server-Side Request Forgery (SSRF) vulnerability in the FTP service. Improper validation of PORT and EPRT commands allows a remote authenticated attacker to bypass security restrictions and access internal network services . The CVSS 3.1 base score...

CVE-2026-61551

Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The affected JSON parsing paths are reachable by unauthenticated network clients through the Icinga 2 service on TCP port...

cisco-sa-sma-attack-N9bf4

Vérification d'exposition Cisco SMA Petit script Python 3 en un seul fichier pour sonder rapidement un hôte ou un domaine à la recherche de ports de gestion et de quarantaine ouverts pour Cisco Secure Email/Secure Malware Analytics indicateurs d'exposition CVE-2025-20393. Utilisation Installez...

EUVD-2026-83209

Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The affected JSON parsing paths are reachable by unauthenticated network clients through the Icinga 2 service on TCP port...

CVE-2026-61551

Icinga 2 , an open source monitoring system, is affected by a stack overflow in its JSON parsing paths prior to versions 2.14.9 , 2.15.4 , and 2.16.2 . The root cause is that nesting depth is not bounded, so deeply nested JSON objects exhaust the call stack. The vulnerable paths are reachable by ...

CVE-2026-61551 Icinga 2: Stack overflow via deeply nested JSON objects

Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The affected JSON parsing paths are reachable by unauthenticated network clients through the Icinga 2 service on TCP port...

CVE-2026-61551: Uncontrolled Recursion

Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The affected JSON parsing paths are reachable by unauthenticated network clients through the Icinga 2 service on TCP port...

PT-2026-95630

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description The Change Audit System CAS listener is subject to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch. A network attacker with access to TCP port...

Linux Distros Unpatched Vulnerability : CVE-2026-90141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: fix integer overflow in ftp helper port/address parsing ipvsftpgetaddrport accumulates decimal digits into a u16 hport and into unsigned char p without...

MiracleLinux 9 : unbound-1.24.2-3.el9_8.6 (AXSA:2026-1876:12)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1876:12 advisory. unbound: Unbound: DNS cache poisoning via UDP source port predictability CVE-2026-50252 Tenable has extracted the preceding description block directly from t...

CVE-2026-18869: Server-Side Request Forgery (SSRF)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

CVE-2026-61550: Missing Authorization

Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and...

CVE-2026-54253

TS3 Manager , a web interface for maintaining TeamSpeak 3 servers, is vulnerable to a reflected XSS in the /api/download handler prior to version 2.2.6 . The attacker-controlled port query parameter is passed to socket.connect(port, host), and the resulting error.message is returned as text/html ...

CVE-2026-54253 TS3 Manager: Reflected XSS via /api/download port parameter steals operator session

TS3 Manager is modern web interface for maintaining Teamspeak3 servers. Prior to 2.2.6, the /api/download handler in packages/server/routes/api.js passes the attacker-controlled port query parameter to socket.connectport, host and returns the resulting error.message through...

CVE-2026-54253 TS3 Manager: Reflected XSS via /api/download port parameter steals operator session

TS3 Manager is modern web interface for maintaining Teamspeak3 servers. Prior to 2.2.6, the /api/download handler in packages/server/routes/api.js passes the attacker-controlled port query parameter to socket.connectport, host and returns the resulting error.message through...