cve-2026-9082-drupal-postgresql-rce

CVE-2026-9082 Drupal PostgreSQL SQLi를 RCE로 이 저장소에는 Ambionics 기사에서 설명된 Drupal JSON:API PostgreSQL SQL 인젝션을 위한 로컬 랩과 간단한 익스플로잇이 포함되어 있습니다. 익스플로잇의 중요한 부분은 PostgreSQL 권한 상승입니다: 인젝션이 PostgreSQL 슈퍼유저로 SELECT 표현식을 평가할 수 있게 되면, 대형 객체를 통해 네이티브 프리로드 라이브러리를 작성하고, postgresql.auto.conf를 다시 로드하며,...

cve-2025-4664

CVE-2025-4664 이 저장소는 Chromium 기반 브라우저가 Link 헤더 프리로드 요청을 통해 민감한 URL 매개변수를 유출하는 취약점인 CVE-2025-4664를 악용하기 위한 PoC를 포함하고 있습니다. 리소스 이 익스플로잇이 어떻게 동작하는지 자세한 설명은 블로그 게시물에서 읽어보세요: https://amalmurali.me/posts/cve-2025-4664e. 흐름을 이해하려면 이 비디오를 시청하세요: 파일 target.py - 취약한 웹 애플리케이션 idp.py - SSO ID 공급자 attacker.py...

CVE-2026-104848

The Tinypool minimal Node.js worker thread pool implementation is vulnerable to a Prototype Pollution gadget in versions prior to 2.1.1 . The root cause is located in dist/index.js, where the software constructs ThreadPool.options from a normal options object and reads execArgv and env worker opt...

CVE-2026-102677

A flaw was found in Electron. The cache mechanism for sandboxed preload scripts fails to verify that cached entries match the requested script. In applications that load untrusted web content, an attacker with a compromised renderer process can write malicious data into the cache to be reused on...

CVE-2025-13401-XSS-Stored

개념 증명: Autoptimize 태그를 생성하는 역할을 합니다. 버전 3.1.13에서 이 함수는 원래 태그를 태그로 변환하기 전에 title, alt, class, id, width, height 같은 특정 속성을 제거하기 위해 "블랙리스트" 방식pregreplace 사용을 사용합니다. 그러나 onload나 onerror 같은 이벤트 핸들러 속성은 제거하지 못합니다. 인증된 공격자최소 Contributor 역할 보유는 게시물에 악성 태그를 삽입할 수 있습니다. 플러그인이 이 게시물을 처리하여 사전 로드 링크를 생성하면 악성...

CVE-2026-102677

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer...

NPM: Electron: Sandboxed preload code cache can be poisoned by a compromised renderer

NPM: Electron: Sandboxed preload code cache can be poisoned by a compromised renderer vulnerability discovered by ? in WordPress Npm electron versions = 42.3.3, 42.10.0...

Protection Mechanism Failure

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Protection Mechanism Failure via insufficient keying of sandboxed preload script code cache entries, allowing a renderer...

Electron: Sandboxed preload code cache can be poisoned by a compromised renderer

Impact The cache Electron keeps for sandboxed preload scripts did not verify that a cached entry matched the preload it was served for. A compromised renderer could use this to run its own code in the preload context on a later load. Apps are only affected if they load untrusted content. Apps tha...

EUVD-2026-89179

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer...

CVE-2026-102677 Electron: Sandboxed preload code cache can be poisoned by a compromised renderer

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer...

CVE-2026-102677

The Electron framework (versions 42.3.3 to 42.10.0 , 43.5.0 , and 44.0.0-beta.6 ) is vulnerable to a sandboxed preload code cache poisoning issue. The root cause is a lack of verification ensuring that a cached entry matches the preload it was originally served for. A compromised renderer can inj...

CVE-2026-102677 Electron: Sandboxed preload code cache can be poisoned by a compromised renderer

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer...

PT-2026-102756

Name of the Vulnerable Software and Affected Versions Electron versions 42.3.3 through 42.9.9 Electron versions 43.0.0 through 43.4.9 Electron versions 44.0.0-beta.0 through 44.0.0-beta.5 Description The sandboxed preload code cache fails to verify that a cached entry matches the preload it was...

CVE-2026-102677: Improper Input Validation

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer...

CVE-2026-43499-T807D

T807D 최종 산출물—소스 일대일 대응 복구 패키지 생성일: 2026-08-08 결론 이 디렉터리에는 현재 프로젝트에서 복구할 수 있는 완전한 popsicle 소스 트리, 필수 헤더 파일, 임베디드 su 페이로드, 프로덕션 바이너리 및 실행 스크립트가 정리되어 있습니다. 반드시 구분해야 할 점: 1. r562 SO와 r557 helper의 프로덕션 바이너리는 완전히 보존되어 있으며 해시를 재검증할 수 있습니다. 2. 프로젝트에는 이 두 프로덕션 바이너리 컴파일 이전의 구 소스 스냅샷, 목적 파일 또는 DWARF가 포함된 완전...

PT-2026-96263

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.6-lts Description The ToolExecutor LD PRELOAD sandbox fails to hook the fexecve function, although it hooks execve, execvpe, and execveat to prevent subprocess creation. An authenticated attacker with the ability t...

PT-2026-96264

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.6-lts Description Function-library code running under the LD PRELOAD sandbox can invoke ctypes.CDLL from an importlib.abc.MetaPathFinder callback. This allows the dlopen call-stack heuristic to identify a Python...

SUSE CVE-2026-72293

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: Add missing radixtreepreload in gaccessshadowfault Add missing radixtreepreload in gaccessshadowfault to guarantee forward progress. The core of gaccessshadowfault has been split into gaccessshadowfault in order ...

Chromium: CVE-2026-79110 Missing authorization in Preload

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...