FOLLINA-CVE-2022-30190

FOLLINA-CVE-2022-30190 FOLLINA-CVE-2022-30190 구현 이 저장소는 FOLLINA-CVE-2022-30190 취약점을 위한 익스플로잇 도구를 포함합니다. 면책 조항 이 도구는 보안 테스트 및 연구 목적으로 개발되었습니다. 이 도구를 클론/포크함으로써 원 개발자는 행위자의 행동에 대한 모든 책임을 지지 않습니다. 사전 요구 사항 1. 여기에서 CVE-2022-30190에 대해 읽어보세요. 2. 테스트 환경을 준비하세요 Virtual Box + Vagrant 사용을 권장합니다. VirtualBox를...

cve-2019-6453-poc

CVE-2019-6453: RCE в mIRC 7.55 с использованием внедрения аргументов через пользовательские обработчики URI-протоколов Мы обнаружили уязвимость удалённого выполнения кода в mIRC через обработчик URI-протокола irc://. Поскольку mIRC не использует никакого разделителя, например -- , для обозначения...

mIRC-CVE-2019-6453

CVE-2019-6453: Удалённое выполнение кода в mIRC 7.55 через внедрение аргументов с помощью обработчиков пользовательских URI-протоколов Ссылка на статью Мы обнаружили уязвимость удалённого выполнения кода в mIRC через обработчик URI-протокола irc://. Поскольку mIRC не использует никаких символов,...

CVE-2026-33829

CVE-2026-33829 Этот репозиторий содержит автоматизированный инструмент на Bash, предназначенный для пассивной и контролируемой проверки активов с операционной системой Windows на уязвимость к небезопасной обработке обработчика протокола search:. Скрипт действует как пассивный приёмник, используя...

MS-MSDT-Office-RCE-Follina

MS-MSDT-Office-RCE-Follina CVE-2022-30190 | MS-MSDT Follina Один клик 1. Создайте файл Docx. 2. В файле Docx: Вставка Объект Точечный рисунок Ок 3. В запущенном приложении Paint сохраните файл Paint. 4. Сохраните ваш файл Docx. 5. Откройте ваш файл как архив с помощью 7Zip; Правый клик 7Zip Откры...

CVE-2026-33829-Writeup

CVE-2026-33829 レポート 脆弱性ケーススタディ: CVE-2026-33829 Windows 切り取りツール NTLM 強制 概要 このレポートでは、CVE-2026-33829 の技術的な再現について詳しく説明します。これは、最新の Windows 切り取りツールアプリケーションフレームワークにおける情報漏洩の脆弱性です。カスタム URI プロトコルハンドラ内の未検証の入力パラメータを悪用することにより、リモートホストが未パッチの Windows マシンに発信 SMB 接続を強制し、ネットワーク上で Net-NTLMv2 認証ハッシュを漏洩させることができます。 URI...

CVE-2026-20841

CVE-2026-20841 이 콘텐츠는 PatchPoint 구독자를 위한 월간 보고서를 통해 제공되는 내용의 일부에 해당합니다. 개요 Microsoft는 2026년 2월 메모장의 RCE 취약점에 대한 패치를 공개했습니다. 이 취약점은 Windows 메모장의 마크다운 렌더링에서 Control 버튼과 함께 링크를 클릭할 때 트리거되는 명령 주입 취약점입니다. 이 취약점은 간단히 설명할 수 있습니다. 마크다운에서 Control+클릭을 통해 링크에 접근할 때 URI 스킴에 대한 필터링이 없어 해당 프로토콜의 처리기 애플리케이션이 실행...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Libwebsockets vulnerabilities (USN-8822-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8822-1 advisory. It was discovered that Libwebsockets incorrectly handled certain SSH protocol messages in its SSH protocol handler. A...

CVE-2026-95834

A flaw was found in kitty. A use-after-free vulnerability exists in the drag-and-drop protocol handler when an item transfer is prematurely aborted. A program running within the terminal window can supply a specially crafted byte stream to trigger an error path during data processing, causing the...

USN-8822-1 libwebsockets vulnerabilities

It was discovered that Libwebsockets incorrectly handled certain SSH protocol messages in its SSH protocol handler. A remote attacker could possibly use this issue to cause Libwebsockets to consume excessive resources, resulting in a denial of service. CVE-2026-10650 It was discovered that...

USN-8822-1: Libwebsockets vulnerabilities

It was discovered that Libwebsockets incorrectly handled certain SSH protocol messages in its SSH protocol handler. A remote attacker could possibly use this issue to cause Libwebsockets to consume excessive resources, resulting in a denial of service. CVE-2026-10650 It was discovered that...

CVE-2026-66067

A flaw was found in RabbitMQ. The stream protocol handler does not correctly enforce per-user and per-virtual host vhost connection limits. An authenticated user can exploit this by connecting through port 5552, bypassing the intended connection restrictions. This could lead to resource exhaustio...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: icmp: Fixed a NULL pointer dereferencing in icmptagvalidation. icmptagvalidation unconditionally dereferes the result of rcudereferenceinetprotosproto without checking for NULL. The inetprotos array is sparse—only about 15 out...

Astra Linux – Vulnerability in Firefox

Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler. This vulnerability affects Firefox versions earlier than 121...

Astra Linux – Vulnerability in Firefox

When opening a website using the firefox:// protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox versions 123...

Linux Distros Unpatched Vulnerability : CVE-2026-19503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's...

Missing Authentication for Critical Function

Overview org.apache.activemq:artemis-server is a server package for the ActiveMQ-Artemis project. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the CORE protocol handler. An attacker can manipulate broker state and create arbitrary durable...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the CORE protocol handler. An attacker can manipulate broker state and create arbitrary durable queues by sending unauthenticated requests. Remediation Upgrade...

CVE-2026-19503 Insufficient OIDC endpoint validation could invoke unintended local protocol handlers

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled...

CVE-2026-19503 Insufficient OIDC endpoint validation could invoke unintended local protocol handlers

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled...