CVE-2026-10243-AUTH

Smart Parking System 1.0 - 인증되지 않은 관리자 핵심 기능 접근 취약점 정보 필드| 세부 정보 ---|--- 제품| Smart Parking System 공급업체| code-projects.org 버전| 1.0 취약점 클래스| 중요 기능에 대한 인증 누락 CWE-306 CVE ID| 대기 중 CVSS 점수| 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 필요한 인증| 없음 영향을 받는 파일| attendant.php, edit.php, basictable.php,...

CVE-2025-55972-Remote-Unauthenticated-Denial-of-Service-DoS-in-TCL-Smart-TV-UPnP-DLNA-AVTransport

CVE-2025-55972-Remote-Unauthenticated-Denial-of-Service-DoS-in-TCL-Smart-TV-UPnP-DLNA-AVTransport 취약한 UPnP/DLNA MediaRenderer 구현을 실행하는 TCL 스마트 TV가 원격, 비인증 서비스 거부DoS의 영향을 받습니다. 공급업체: TCL Technology Group Corporation 제품: TCL 스마트 TV테스트 모델: 65C655 취약점 유형: UPnP/DLNA MediaRendererAVTransport의 원격 서비스...

CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport

CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport TCL 65C655 스마트 TV펌웨어 버전 V8-R75PT01-LF1V269.001116, Android TV, Kernel 5.4.242+는 UPnP MediaRenderer 서비스AVTransport를 통해 블라인드blind, 비인증 서버 측 요청 위조SSRF에 취약합니다. 공급업체: TCL Technology Group Corporation 제품: TCL 스마트 TV테스트 모델:...

CVE-2025-60500

CVE-2025-60500 — 안전하지 않은 파일 업로드 / QDocs Smart School의 로직 결함 Smart School 7.1 공개일: 2025-10-17 작성자 / 발견자: Lebas Vivien 상태: 예약됨 CVE: CVE-2025-60500 예약됨 요약 QDocs Smart School — School Management System 7.1 의 안전하지 않은 파일 업로드 / 로직 결함으로 인해 회계accountant , 관리자admin , 또는 최고 관리자superadmin 와 같은 역할을 가진 인증된 사용자...

GlacierCTF2023_writeups

Glacierctf 2023 설명 CTF 날짜: 24.11.2023 - 26.11.2023 기간: 48시간 CTF Time: https://ctftime.org/event/1992 GlacierCTF 2023은 LosFuzzys가 주최한 jeopardy 스타일 CTF의 두 번째 에디션이었습니다. 이 CTF는 pwn, rev, web, crypto, smart contracts, misc를 포함한 다양한 카테고리의 챌린지를 제공했습니다. 2023 GlacierCTF 저장소에는 모든 챌린지와 솔루션/라이트업이 포함되어 있습니다. ...

CVE-2026-67687-ICS-Park-Smart-Park-Management-System-v2.0

이 저장소에는 README가 없습니다...

pwnfb50

pwnfb50 모든 FB50 스마트 잠금장치의 소유권을 자신에게 이전 CVE-2019-13143 PoC 영상 사용법 $ python3 pwnfb50.py id mac 여기서 id는 사용자 ID이고, mac은 잠금장치의 MAC 주소입니다...

CVE-2023-20110

CVE-2023-20110 CVE-2023-20110의 PoC 스크립트 - Cisco Smart Software Manager On-Prem SQL Injection 취약점 사용법 1. 스크립트에서 IP 주소와 관리자 쿠키를 업데이트하세요. 2. 다음 명령어로 스크립트를 실행하세요: python3 exploit.py...

raptor

Raptor Raptor — это фреймворк для аудита экосистемы блокчейна контрактов, протоколов и т.д.. Обзор Raptor предоставляет структурированные подходы и инструменты для выявления уязвимостей безопасности в смарт-контрактах и блокчейн-протоколах. Фреймворк помогает аудиторам последовательно...

WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Smart Casa versions = 1.0.12...

CVE-2026-107450

In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations crates/graphql/src/mutation/smartlists.rs depend only on the shared AccessSmartList permission and resolve the target list at Reader access lacking a creator check. Any authenticated user with that permission can...

CVE-2026-107450

In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations crates/graphql/src/mutation/smartlists.rs depend only on the shared AccessSmartList permission and resolve the target list at Reader access lacking a creator check. Any authenticated user with that permission can...

CVE-2026-107450

In Stump versions through 0.1.10 , an authorization flaw in the updateSmartList and deleteSmartList GraphQL mutations (located in crates/graphql/src/mutation/smart_lists.rs) allows for unauthorized data manipulation. The vulnerability exists because these mutations rely solely on the shared Acces...

EUVD-2026-94730

In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations crates/graphql/src/mutation/smartlists.rs depend only on the shared AccessSmartList permission and resolve the target list at Reader access lacking a creator check. Any authenticated user with that permission can...

Dahua Smart Park Management - Arbitrary File Upload

Dahua wisdom park integrated management platform is a comprehensive management platform, a park operations,resource allocation, and intelligence services,and other functions, including/emap/devicePointaddImgIco?. id: CVE-2023-3836 info: name: Dahua Smart Park Management - Arbitrary File Upload...

CVE-2026-76454

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This...

CVE-2026-76454

A vulnerability exists in the Cisco Smart Licensing Utility API of Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem). Due to improper input validation and a lack of authentication in the management API, an unauthenticated remote attacker can send a crafted request to write arb...

CVE-2026-76454 Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This...

EUVD-2026-94454

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This...

Cisco License (Smart Software Manager) On-Prem Vulnerabilities

Multiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow a remote attacker to gain unauthorized access, access sensitive information, cause a denial of service DoS condition, o...