cve-2026-31431

CVE-2026-31431（Copy Fail）テスト このリポジトリには、アクションランナーがCVE-2026-31431の影響を受けるかどうかをテストするためのGitHub Actionsワークフローファイルが含まれています。 自分でテストを行うこともできます。このテンプレートを使用してリポジトリを作成し、test.ymlワークフローを手動でトリガーしてください（onフィールドをテスト対象に変更することを忘れないでください）。 結論だけ教えてもらえますか？ はい、2026年4月30日10:43（UTC+8）にubuntu-latestイメージに基づく公式ランナーで実行しました。 結...

root-my-webos-tv

Root my webOS TV Простой скрипт на Python, который запускает telnet-сервер на уязвимых устройствах webOS с правами root. Проверенные телевизоры webOS 4.9.7 - 5.30.40 модель LG43UM7000PLA webOS 5.5.0 - 04.50.51 модель OLED55CXPUA webOS 6.3.3-442 kisscurl-kinglake - 03.36.50 модель OLED48C1PUB webO...

GNU-Inetutils-telnet-CVE-2026-24061-

CVE-2026-24061 GNU Inetutils Telnetd 認証バイパス脆弱性検出ツール 📋 プロジェクト概要 これはGNU Inetutils Telnetdの認証バイパス脆弱性 CVE-2026-24061 を検出するための高度な検出ツールです。この脆弱性のCVSSスコアは9.8で、攻撃者は環境変数インジェクションを通じて認証なしでroot権限を取得できます。 🚨 脆弱性情報 CVE番号 : CVE-2026-24061 CVSSスコア : 9.8 深刻 影響範囲 : GNU Inetutils 1.9.3 - 2.7 脆弱性タイプ : 認証バイパス 技術原理 : RF...

FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — Nicht authentifizierte SQLi zu Root-RCE Schweregrad: Critical Typ: Nicht authentifizierte SQL Injection → Remote-Codeausführung Betroffene Software: FreePBX endpoint-Modul Getestet auf: FreePBX on CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Übersicht In der...

CVE-2025-20393

CVE-2025-20393 📌 Überblick CVE-2025-20393 ist eine kritische Schwachstelle zur Remote-Codeausführung RCE , die Cisco Secure Email Gateway SEG - und Cisco Secure Email and Web Manager SEWM -Appliances betrifft, die Cisco AsyncOS ausführen. Die Schwachstelle existiert aufgrund unsachgemäßer...

D-Link DIR820LA1_FW105B03 'ping_addr' - OS Command Injection

OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload with the pingaddr parameter to ping.ccp. id: CVE-2023-25280 info: name: D-Link DIR820LA1FW105B03 'pingaddr' - OS Command Injection author: pussycat0x severity:...

EUVD-2026-64985

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitization of the username, password, and location fields before command execution. A remote attacker can trigger this vulnerability via crafted...

CVE-2026-9645-ScadaBR-Analysis

CVE-2026-9645 — Analisi della vulnerabilità ScadaBR Analisi tecnica della vulnerabilità e briefing CVE per CVE-2026-9645 , che interessa la piattaforma open-source ScadaBR SCADA/HMI. Panoramica CVE-2026-9645 è una vulnerabilità critica di esecuzione remota di codice autenticata in ScadaBR. Second...

SmmBackdoor

Backdoor SMM per piattaforme basate su UEFI !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Questo è un progetto legacy abbandonato, per la versione corrente della backdoor consulta la pagina del progetto SMM Backdoor Next Gen e la sua documentazione:...

CVE-2026-76156

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

CVE-2026-76156 Datiphy Data Management Center - Improper Neutralization of Special Elements used in an OS Command

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

CVE-2026-18269

Kenwood DNR1007XR tchdrbytestreamread Out-Of-Bounds Write Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specif...

EUVD-2026-63420

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged...

EUVD-2026-63413

Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw...

PT-2026-79033

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A time-of-check to time-of-use TOCTOU race condition exists, which could allow a local attacker to gain root privileges. A TOCTOU race condition occurs when a...

EUVD-2026-62514

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication...

PT-2026-78447

Name of the Vulnerable Software and Affected Versions Cudy WR3000 2.0 versions prior to 2.5.24 Description Authenticated attackers can execute arbitrary OS commands with root privileges by sending unsanitized input through the mesh MQTT command interface. The sync command binary forwards this inp...

EUVD-2026-58802

PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability...

CVE-2026-19908

CVE-2026-19908 affects the PAX Technology Q80 XCB Daemon. The flaw arises from a lack of authentication before accessing daemon functionality, allowing network-adjacent attackers to disclose sensitive information and modify configurations. The description also notes potential to execute arbitrary...

CVE-2026-19909 PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The specific flaw...