1579 matches found
CVE-2026-108268
Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to th...
CVE-2026-108265
Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS...
CVE-2026-108269
Prior to version 0.5.0 , the Rust and Go challenge verifiers in Remote Attestation TLS Clients are vulnerable to an Origin Validation Error (CWE-346). The flaw exists because the verifiers accepted quote ReportData bound only to the certificate public key and client nonce, rather than the active ...
EUVD-2026-96019
Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before...
CVE-2026-108268
Enclave OS Virtual contains a vulnerability where the TDX/GPU RA-TLS certificate issuer fails to include a value bound to the active TLS session within the quote ReportData . This omission allows an attacker who possesses an enclave TLS private key to relay a genuine quote to a different connecti...
CVE-2026-108267
The Privasys Go programming language fork, which provides RA-TLS support for crypto/tls , is vulnerable in versions prior to privasys-v0.5.1-go1.26.5 . In challenge-mode RA-TLS, certificates failed to bind quote ReportData to the active TLS session, binding it only to the certificate public key a...
CVE-2026-108265 enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session
Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS...
CVE-2026-108265
The Enclave OS Mini Rust-based runtime for Intel SGX enclaves contains a vulnerability in the RA-TLS challenge certificate path (prior to wasm-v0.40.0 ). The issue stems from the runtime placing the certificate public-key hash and client nonce in the quote ReportData while failing to include a va...
EUVD-2026-95996
Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS...
cve-2023-1671
Сve-2023-1671 How does cve-2023-1671https://vulners.com/cve/CVE-2023-1671 work? /opt/ws/bin/ftsblistpack은 /opt/ws/bin/sblistpack을 호출하는 Perl 스크립트입니다. sblistpack 역시 Perl 스크립트입니다. 셸 명령 인자는 작은따옴표로 묶여 있습니다: $rc += system"$sblistpack '$uri' '$user' '$filetype' '$filein' '$fileout'"; 이것은 나중에 취약점으로 이어질 중...
CVE-2026-18143
CVE-2026-18143 — Request a Quote for WooCommerce Addify 任意ファイルアップロード Request a Quote for WooCommercewoocommerce-request-a-quote、Addify / WooCommerce.comにおける CVE-2026-18143 のPython 3 PoCです。 説明 PoCbit / GitHub CVE-2026-18143 — Request a Quote for WooCommerce ≤ 2.9.2 は、afrfqsubmitquoteviapopup を介した...
CVE-2019-12189
CVE-2019-12189 - Zoho ManageEngine ServiceDesk Plus 9.3 XSS 취약점 정보 설명: ManageEngine ServiceDesk Plus 버전에서 XSS가 발견되었습니다. 영향받는 버전: 9.3 연구자: Dang The Tuyen 개념 증명PoC 이 취약점은 URL의 쿼리 문자열에서 작은따옴표와 세미콜론이 혼동되어 발생합니다. payload: ';alert'XSS';' 공격 벡터: http:///SearchN.do 스크린샷...
CVE-2026-102422
A flaw was found in shell-quote. This vulnerability allows an attacker to achieve arbitrary command execution by supplying crafted input containing line break characters after a comment marker. When input is quoted, the comment marker comments out subsequent quotes until a newline is encountered,...
CVE-2026-22226
CVE-2026-22226 CVE-2026-22226에 대한 개념 증명 TP-Link Archer Wi-Fi 라우터 VPN 클라이언트의 인증된 LAN 측 OS 명령 삽입 취약점 개요 VPN 클라이언트 컨트롤러는 사용자가 제어하는 항목 설명des을 약한 검증 정규식을 사용하여 UCI 구성에 저장합니다. 나중에 항목을 다시 읽을 때WebUI에서 편집 중, getovpndata는 des를 인용된 셸 명령에 보간하여 추가 소독 없이 os.execute에 전달합니다: -- getovpndata in vpn.lua...
CVE-2024-24576-PoC-Python
CVE-2024-24576-PoC-파이썬 여기에 공개된 취약점의 빠른 PoC: https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ 스크립트를 실행하면 BAT 파일에 전달할 인수를 요청합니다. 스크린샷에서 볼 수 있듯이, "를 추가하면 Windows에서 cmd를 호출하는 기본 API를 이스케이프하여 임의 명령 실행이 가능해집니다. 이 경우에는 calc.exe가 실행되었습니다. 물론 이 코드 자체는 악성 코드가 아닙니다...
EUVD-2026-95304
jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the default-enabled TextStyle filter that inserts unvalidated URLs into anchor href attributes. Authenticated attackers can post messages with javascript: links or quote-breaking URLs to...
CVE-2026-107798 Jivejdon through commit ee67a65e Stored XSS via Markdown Links in TextStyle Rendering Filter
jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the default-enabled TextStyle filter that inserts unvalidated URLs into anchor href attributes. Authenticated attackers can post messages with javascript: links or quote-breaking URLs to...
CVE-2026-3288-lab
CVE-2026-3288 취약 실습 환경 Docker NGINX Ingress Controller 구성 주입 ⚠️ 경고 : 이 실습 환경은 공인된 보안 교육 목적으로만 의도적으로 취약하게 구성되어 있습니다. 취약점 개요 CVE-2026-3288 CVSS 8.8 높음 - NGINX Ingress Controller의 구성 주입 영향 버전 : v1.13.8, v1.14.4, v1.15.0 공격 벡터 : 경로 구성의 큰따옴표" 주입 영향 : 원격 코드 실행, 비밀 노출, 자격 증명 탈취 관련 취약점 : CVE-2026-24512 유사...
CVE-2026-65321-pyathena
CVE-2026-65321: 非SELECTステートメント向けバックスラッシュ引用符エスケープを介したPyAthenaにおけるSQLインジェクション 深刻度: 緊急、CVSS v4.0 9.3 / CVSS v3.1 9.8 CNAであるVulnCheckが割り当て ベクター v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N ベクター v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 影響を受けるバージョン: PyAthena...
