CVE-2021-27289

🐝 CVE-2021-27289: Ksix Zigbee デバイスにおける再生保護バイパス 📑 目次 本題に入る前に この CVE の背景 脆弱性 影響を受けるデバイス 技術的詳細 攻撃シナリオ 影響 実証コード デモ動画 オリジナルブログ記事 研究者 Zigbee の基礎 背景と動機 初期の実験 発見 悪用 実験環境 関連研究 🎭 本題に入る前に 皆さん、こんにちは。 プロらしいやり方としては、このリポジトリのタイトルをまさに今のまま – 明確で説明的で、要点を突いたもの –...

Cloudflare-Bypass

Cloudflare-Bypass Cloudflare Bypass 도구 | PentestCore Cloudflare를 우회하여 사이트 서버의 마스터 IP를 얻는 데 사용할 수 있는 도구입니다. 사용 방법 Linux : 터미널에 아래 명령어를 입력하세요 : git clone https://github.com/pentestcore/Cloudflare-Bypass.git cd Cloudflare-Bypass PHP 설치 : apt-get install php 실행 : php Cloudflare-Bypass.php 웹사이트 URL을...

CloudUnflare

CloudUnflare...

CVE-2026-82358

RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO Service Data Object server implementation 'src/cosdoserver.c' that fails to properly validate write permissions when processing download-segment frames. An unauthenticated attacker on the CAN bus can initiate an SDO upload fo...

EUVD-2026-91024

RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO Service Data Object server implementation 'src/cosdoserver.c' that fails to properly validate write permissions when processing download-segment frames. An unauthenticated attacker on the CAN bus can initiate an SDO upload fo...

CVE-2026-82358

RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO server implementation (src/co_sdo_server.c ). The vulnerability occurs because the system fails to properly validate write permissions when processing download-segment frames . An unauthenticated attacker on the CAN bus can i...

CVE-2026-82358 RT-Labs AB C-Open CANopen SDO Server Write Protection Bypass

RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO Service Data Object server implementation 'src/cosdoserver.c' that fails to properly validate write permissions when processing download-segment frames. An unauthenticated attacker on the CAN bus can initiate an SDO upload fo...

CVE-2026-73270

A flaw was found in Erlang/OTP inets httpd. This vulnerability allows a remote, unauthenticated attacker to bypass directory protection and read sensitive files. The issue occurs on systems with case-insensitive filesystems, where an attacker can request files using different letter casing to...

CVE-2025-55752

🚨🚨 CVE-2025-55752 — Apache Tomcat: Rewrite Valve によるディレクトリ保護バイパス → PUT ベースの RCE🚨🚨 概要 CVE-2025-55752 は、Apache Tomcat においてバグ 60013 の修正中に導入されたセキュリティリグレッションです。Rewrite Valve が使用されている場合、Tomcat は URL デコード の前に パス正規化 を適用します。この誤った順序により、StandardContextValve.java で実装されている /WEB-INF/ や /META-INF/...

CVE-2026-5000

CVE-2026-5000 重要な情報 このCVEはCVE.orgおよびNVDによって承認されています。以下の参照リンクをご確認ください。 CVE.org - https://vulners.com/cve/CVE-2026-5000 NVD - https://nvd.nist.gov/vuln/detail/CVE-2026-5000 CVE-2026-5000 Windows Defender 脆弱性 PoC 説明 このリポジトリには、CVE-2026-5000として指定されたWindows...

AlmaLinux 9.2 [TuxCare] Security Update: postfix / postfix-cdb / postfix-ldap / postfix-lmdb / postfix-mysql / etc (ALMALINUX9.2:CLSA-2025:1738267482)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1738267482 advisory. - Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpddatarestrictions=rejectunauthpipelining and...

AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.2:CLSA-2024:1711648611)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1711648611 advisory. - The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an...

CVE-2026-47591

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to incorrect authorization, enabling write access to memory marked read-only. A successful exploit of this vulnerability might lead to code...

CVE-2026-47591

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to incorrect authorization, enabling write access to memory marked read-only. A successful exploit of this vulnerability might lead to code...

CVE-2026-87830 Apache WSS4J: Streaming WS-SecurityPolicy validation may skip element-protection checks.

In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XML element path. A remote SOAP peer may therefore send a required element without the expected signature or encryption. Users are recommend...

USN-8849-1 linux-nvidia-tegra-5.15 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

USN-8818-4 linux, linux-nvidia vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

Linux Distros Unpatched Vulnerability : CVE-2026-47591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to...

USN-8818-3: Linux kernel vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

CVE-2025-65318-and-CVE-2025-65319

CVE-2025-65318 および CVE-2025-65319 の PoC CVE-2025-65318 BDU:2025-13740: 添付ファイル操作機能を利用する際、Canary Mail 5.1.40 以下は Mark-of-the-Web タグなしでドキュメントをファイルシステムに保存するため、攻撃者は Windows OS およびサードパーティ製ソフトウェアの両方の組み込みファイル保護メカニズムを回避できます。 CVE-2025-65319 BDU:2025-13739: 添付ファイル操作機能を利用する際、Blue Mail 1.140.103 以下は...