156593 matches found
Important: resteasy security update
RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful Java applications. It is a fully certified and portable implementation of the JAX-RS specification. Security Fixes: resteasy-core: RESTeasy SourceProvider remote unauthenticated file read...
ALSA-2026:72279 Critical: ipa security, bug fix, and enhancement update
AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request Body Read CVE-2026-73198 ip...
CVE-2026-101902: Improperly Controlled Modification of Object Prototype Attributes
Axios is a promise-based HTTP client for the browser and Node.js. From 0.27.2 until 0.34.0 and 1.20.0, Axios default-instance requests that omit an explicit method can read an inherited method value from Object.prototype. If another vulnerability in the same process pollutes...
ALSA-2026:72467 Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: fbcon: Set fbdisplayi-mode to NULL when the mode is released CVE-2025-40323 kernel: ext4: fix e4b bitmap inconsistency reports...
ALSA-2026:72424 Important: resteasy security update
RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful Java applications. It is a fully certified and portable implementation of the JAX-RS specification. Security Fixes: resteasy-core: RESTeasy SourceProvider remote unauthenticated file read...
RHEL 8 : qt5-qtbase (RHSA-2026:72378)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72378 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security...
CVE-2026-94284: Out-of-bounds Read
An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...
Medium: ImageMagick
Issue Overview: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read, potentially resulting in a crash. This...
PT-2026-102390
Name of the Vulnerable Software and Affected Versions FastStone Image Viewer versions prior to 8.4 Description A remote out-of-bounds read can be triggered within the PCX Decoder component. This occurs when the software processes a specially crafted file, allowing an attacker to read memory outsi...
RHEL 8 : qt5-qtbase (RHSA-2026:72376)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72376 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security...
CVE-2019-19203
CVE-2019-19203 Oniguruma 6.x, 6.9.4rc2 이전 버전에서 문제가 발견되었습니다. gb18030.c 파일의 gb18030mbcenclen 함수에서 UChar 포인터가 일치하는 문자열의 끝을 지났는지 확인하지 않고 역참조됩니다. 이로 인해 힙 기반 버퍼 오버리드heap-based buffer over-read가 발생합니다. 연구자: ManhND of The Tarantula Team, VinCSS Vingroup의 계열사 Oniguruma란? K. Kosako가 개발한 Oniguruma는 다양한 문자...
CVE-2024-23897
현재 사용자에게 읽기 권한이 있는 시스템의 모든 파일의 처음 3줄을 읽습니다. 이 스크립트는 내부적으로 proxychains를 사용합니다. 사용법: python CVE-2024-23897.py 예시: python CVE-2024-23897.py /mnt/hgfs/Share/jenkins-cli.jar http://10.10.14.8:8080/ /var/lib/jenkins/secrets/master.key...
CVE-2024-57785
CVE-2024-57785 Exploit Title: Authenticated File Inclusion Vulnerability on Zenitel AlphaWeb XE Version 11.2.3.10 Date: 08/02/2025 Exploit Author: Safvan Parakkal Vendor Website: https://www.zenitel.com/ CVE: CVE-2024-57785 Usage: CVE-2024-57785.py -h -u URL -f FILE optional arguments: -h, --help...
CVE-2024-38819-POC2
CVE-2024-38819: 개념 증명PoC 이것은 제가 보고한 CVE-2024-38819 취약점에 대한 개념 증명PoC으로, 경로 탐색path traversal 공격을 시연합니다. 실행 단계 1. Docker 이미지를 빌드합니다 Spring Boot 3.3.4, Spring Framework 6.1.13 기반 cd vuln docker build -t cve-2024-38819-poc . 2. 컨테이너를 실행하고 포트 8080을 호스트 머신에 노출합니다 docker run -d -p 8080:8080 --name...
CVE-2026-96284
A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the system helper follow symlinks when importing OCI images that are under the user's control...
DEBIAN-CVE-2026-96284
A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the system helper follow symlinks when importing OCI images that are under the user's control...
CVE-2026-78938
CVE-2026-78938 — V8 TurboFan CheckMaps 인스턴스 마이그레이션 타입 혼동 CVE-2026-78938에 대한 근본 원인 분석 및 익스플로잇입니다. 이는 Chrome 152.0.7977.64V8 15.2.124.18에서 수정된 V8 TurboFan 로드 제거load elimination의 타입 혼동 취약점입니다. 이 버그는 실제 환경에서 악용된 것으로 보고되었습니다. 이 익스플로잇은 버그를 out-of-bounds Float64Array로 변환한 다음, 이를 통해 addrof/fakeobj 및 V8 압...
CVE-2020-1938
CVE-2020-1938 해당 CVE-2020-1938은 https://github.com/Hancheng-Lei/Hacking-Vulnerability-CVE-2020-1938-Ghostcat.git의 PoC의 오류를 수정하였으며 Apache Tomcat/8.0.43 버전에서의 동작을 확인하였습니다. 실습 방법 1. docker-compose.yml 생성 2. docker compose up -d 3. python3 CVE-2020-1938.py -p 8009 -f WEB-INF/web.xml 최종 결과...
CVE-2026-85706-gitlab-poc
CVE-2026-85706 설명 GitLab CE/EE 인증되지 않은 임의 파일 읽기 취약점 CVE-2026-85706. 영향받는 버전: GitLab CE/EE 18.7 – 19.1.7 GitLab CE/EE 19.2.0 – 19.2.5 GitLab CE/EE 19.3.0 – 19.3.1 패치된 버전: GitLab 19.1.8 GitLab 19.2.6 GitLab 19.3.2 취약점 세부 정보 이 취약점은 GitLab의 Workhorse 컴포넌트에 존재합니다. Workhorse 정규식은 인코딩된 경로를 보는 반면, Puma는 ...