CVE-2024-23897

CVE-2024-23897 — HTTPS + CSRF-crumb対応PoC cve-2024-23897-crumb.py — Jenkins file --http --port N python3 cve-2024-23897-crumb.py jenkins.example.com python3 cve-2024-23897-crumb.py jenkins.example.com /etc/shells python3 cve-2024-23897-crumb.py 10.0.0.5 /etc/passwd --http --port 8080 Python...

CVE-2026-98241

A flaw was found in the Linux kernel's IPv6 IPsec XFRM networking framework. When handling TCP connection handshakes routed through an IPsec tunnel with a reduced Maximum Transmission Unit MTU, the kernel's local error-handling path incorrectly treats incomplete connection request sockets as full...

CVE-2026-107837

The RIOT open-source microcontroller operating system (versions 2026.07 and earlier ) contains an out-of-bounds read vulnerability in the _receive() function located within sys/net/gnrc/network_layer/sixlowpan/gnrc_sixlowpan.c. The root cause is insufficient validation; the system routes undersiz...

checker-CVE-2020-5902

Checker CVE-2020-5902 Checker CVE-2020-5902: BIG-IP versions 15.0.0 through 15.1.0.3, 14.1.0 through 14.1.2.5, 13.1.0 through 13.1.3.3, 12.1.0 through 12.1.5.1, and 11.6.1 through 11.6.5.1 suffer from Traffic Management User Interface TMUI arbitrary file read and command execution vulnerabilities...

CVE-2024-24919

Check Point Security Gateway RCE 익스플로잇 도구 CVE-2024-24919 개요 이 저장소는 Check Point Security Gateways의 CVE-2024-24919 취약점을 악용하기 위한 도구를 포함하고 있습니다. 이 도구는 취약한 장치를 식별할 수 있는 멀티 스캐너이자, 영향을 받는 장치를 완전히 제어할 수 있는 단일 대상 익스플로잇입니다. CVE-2024-24919 는 공격자가 Check Point Security Gateway에서 원격으로 임의의 파일을 읽을 수 있게 하는 높은 심각도...

WordPress SiteOrigin Widgets Bundle plugin <= 1.74.3 - Authenticated (Contributor+) Arbitrary File Read vulnerability

Authenticated Contributor+ Arbitrary File Read vulnerability discovered by Wordfence PRISM in WordPress Plugin SiteOrigin Widgets Bundle versions = 1.74.3...

WordPress Post Export Import with Media plugin <= 1.17.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read vulnerability

Authenticated Administrator+ Path Traversal to Arbitrary File Read vulnerability discovered by Wordfence PRISM in WordPress Plugin Post Export Import with Media versions = 1.17.1...

CVE-2026-107821 MariaDB: insufficient validation of binary frm data when opening a table

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...

CVE-2026-107821

The MariaDB server is vulnerable to an issue where it insufficiently validates counts, offsets, lengths, and field boundaries within FRM metadata when opening binary FRM files. Affected versions include 10.6.1 to 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2. An attacker capable of placi...

CVE-2026-107821 MariaDB: insufficient validation of binary frm data when opening a table

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...

ESCepcion

🛡️ ESCepcion Active Directory Certificate Services 감사 도구 ESCepcion은 Active Directory Certificate ServicesAD CS 인프라에서 취약점 감사 및 평가를 위한 오픈 소스 도구입니다. 기업 및 하이브리드 환경에서 거짓 양성false positive을 엄격히 줄이는 데 초점을 맞추고 권한 상승 경로ESC 탐지를 자동화하도록 설계되었습니다. 다른 도구와 달리 ESCepcion은 Active Directory의 어떤 개체도 악용하거나 수정하거나 쓰지 않습니다...

vucsa

Vulnerable Client-Server Application VuCSA Vulnerable client-server application VuCSA is made for learning/presenting how to perform penetration tests of non-http client-server applications. It is written in Java with JavaFX graphical user interface. Currently, the vulnerable application contains...

CVE-2026-107816

The MariaDB server contains an out-of-bounds (OOB) read vulnerability in the qc_info plugin affecting versions 10.6.1 through 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2. The root cause is that the plugin can be confused by queries containing embedded null bytes . If such a query is ca...

CyBroHttpServer-v1.0.3-Directory-Traversal

CyBroHttpServer-v1.0.3-디렉터리-트래버설 CyBroHttpServer v1.0.3의 디렉터리 트래버설Directory Traversal 취약점으로 인해 공격자가 민감한 정보를 읽을 수 있습니다. CVE-2018-16133 https://vulners.com/cve/CVE-2018-16133 PoC 취약점을 악용하기 위해 공격자는 'http://host/../../../../../../../../' 요청을 사용하여 대상으로부터 일부 정보를 얻을 수 있습니다. 예를 들어:...

CVE-2026-108158

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then...

CVE-2018-3760

CVE-2018-3760 Rails Asset Pipeline 目录遍历漏洞 由 Orange Tsai 发现 注意 ：默认情况下，以生产模式运行的 Rails 应用不受此漏洞影响。 漏洞利用： curl -v http://127.0.0.1:3000/assets/file:%2f%2f/usr/src/blog/app/assets/images/%252e%252e/%252e%252e/%252e%252e/config/secrets.yml%3ftype=text/yaml 安全分析...

CVE-2025-43919-POC

🚨 CVE-2025-43919: GNU Mailman 2.1.39 cPanel/WHM의 디렉토리 트래버설 GNU Mailman 2.1.39cPanel/WHM 번들 버전에서 새로운 취약점이 발견되었습니다. 인증되지 않은 원격 공격자가 디렉토리 트래버설 결함을 통해 서버의 임의 파일을 읽을 수 있습니다. 📌 취약점 요약: 유형 : 디렉토리 트래버설 인증 불필요 구성 요소 : private.py CGI 스크립트 영향받는 엔드포인트 : /mailman/private/mailman 영향 : /etc/passwd, .mbox 아카이브,...

CVE-2025-10952-ml-logger-AFR

CVE-2025-10952 — ml-logger streamhandler 任意文件读取 このリポジトリは、ml-logger の streamhandler における認証不要の任意ファイル読み取り脆弱性を悪用し、/glob エンドポイントと連鎖させてファイルシステムを列挙するスタンドアロンのPythonスクリプト CVE-2025-10952.py を提供します。 脆弱性のある ml-logger インスタンスに対して実行すると、以下の動作を行います: /glob エンドポイントを介してターゲットホスト上のファイルを列挙します（認証不要、意図されたスコープ外へのパス制限なし）。...

cgiemail-exploit

Cgiemail - 소스 코드 노출/로컬 파일 포함 익스플로잇 cgiecho는 cgiemail에 포함된 스크립트로, 파일에 대괄호가 포함되어 있고 대괄호 안의 텍스트를 추측할 수 있다면 웹사이트 문서 루트 아래의 모든 파일을 반환합니다. cgiemail은 현재 cPanel과 함께 제공되며 기본적으로 활성화되어 있습니다. 예제 페이지의 경우: Success Processed form looks like this: ?php // http://hostname/login.php if$GET == 'admin' && $GET'pass'...

goBox

goBox GO sandbox to run untrusted code. goBox uses Ptrace to hook into READ syscalls, giving you the option to accept or deny syscalls before they are executed. Usage Usage of ./gobox: gobox FLAGS command flags: -h Print Usage. -n value A glob pattern for automatically blocking file reads. -y val...