CVE-2024-28752

Apache CXF CVE-2024-28752 재현 환경 취약점 공지: https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt 환경 시작 samples/javafirstjaxwsfactorybean IDEA ServerStarter.java를 통해 웹서비스 시작 빌드 JDK8 사용 mvn clean package java -jar target/cxf.jar 취약점 악용 BurpSuite를 사용하여 다음 요청을 보내면 트리거됩니다. POST /test HTTP/1....

CVE-2025-55972-Remote-Unauthenticated-Denial-of-Service-DoS-in-TCL-Smart-TV-UPnP-DLNA-AVTransport

CVE-2025-55972-Remote-Unauthenticated-Denial-of-Service-DoS-in-TCL-Smart-TV-UPnP-DLNA-AVTransport 脆弱なUPnP/DLNA MediaRenderer実装を実行しているTCL Smart TVは、リモートかつ認証不要のサービス拒否（DoS）の影響を受けます。 ベンダー: TCL Technology Group Corporation 製品: TCL Smart TV（テスト済み: 65C655） 脆弱性の種類: UPnP/DLNA...

CNVD-C-2019-48814-CNNVD-201904-961

CNVD-C-2019-48814 및 CNNVD-201904-961 t00ls-ximcx0101님께서 스크립트를 제공해 주셔서 감사합니다. CNVD-C-2019-48814 POC 요약 관련 링크는 다음과 같습니다: 청수천치清水川崎 님의 간서简书: https://www.jianshu.com/p/c4982a845f55 안전조사安全祖师爷 님의 전재: https://dwz.cn/2GQvbUae 환경 요인으로 인해 경로가 변경될 수 있습니다: 기본 업로드 경로:...

Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725

CVE-2019-2725 – Oracle WebLogic 무인증 원격 코드 실행 Oracle Fusion Middleware의 Oracle WebLogic Server 구성 요소하위 구성 요소: Web Services의 취약점입니다. 영향을 받는 지원 버전은 10.3.6.0.0 및 12.1.3.0.0입니다. 쉽게 악용할 수 있는 이 취약점으로 인해 HTTP를 통한 네트워크 접근 권한이 있는 무인증 공격자가 Oracle WebLogic Server를 손상시킬 수 있습니다. 취약점 개요 CVE ID: CVE-2019-2725 심각...

SAP Solution Manager 7.2 - Remote Command Execution

SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...

POC-CVE-2026-56164-exploit

CVE-2026-56164 — Microsoft SharePoint Server 認証バイパスエクスプロイト 緊急 CVSS 9.8 — Microsoft SharePoint Server における未認証の特権昇格によるファーム管理者権限の取得 目次 概要 脆弱性の詳細 影響を受けるバージョン アーキテクチャ図 プロジェクト構成 インストール スキャナーの使用方法 — ステップバイステップ エクスプロイトの使用方法 — ステップバイステップ ペイロード設計 緩和策 免責事項 概要 CVE-2026-56164 は、Microsoft SharePoint Server...

CVE-2026-79393

A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote unauthenticated attackers to cause a denial of service or potentially execute arbitrary cod...

CVE-2026-79393

A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote unauthenticated attackers to cause a denial of service or potentially execute arbitrary cod...

CVE-2026-79395

The Xiongmai IP Camera XM530 (firmware HMT.CM2005-v220608.1837 and earlier) is vulnerable to an improper authentication flaw in the Sofia IPC daemon . The vulnerability exists within the WS-Security (wsse:UsernameToken) verification routine, allowing remote attackers to bypass authentication by s...

CVE-2026-79393

A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote unauthenticated attackers to cause a denial of service or potentially execute arbitrary cod...

PT-2026-90044

Name of the Vulnerable Software and Affected Versions Xiongmai IP Camera XM530 versions prior to HMT.CM2005-v220608.1837 Description A heap-based buffer overflow occurs in the WS-Addressing Action transformation function within the Sofia IPC daemon. Remote unauthenticated attackers can trigger th...

CVE-2026-79395: Improper Authentication

An improper authentication vulnerability in the WS-Security wsse:UsernameToken verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote attackers to bypass authentication and execute privileged ONVIF actions including...

CVE-2026-79393

The Xiongmai IP Camera XM530 (firmware HMT.CM2005-v220608.1837 and earlier) is vulnerable to a heap-based buffer overflow in the Sofia IPC daemon . The flaw exists within the WS-Addressing Action transformation function , where a crafted SOAP request containing a wsa5:Action string exceeding 128 ...

EUVD-2026-67935

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a...

CVE-2026-73571

An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...

CVE-2026-73571

An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...

EUVD-2026-58070

An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...

CVE-2026-73571: Incorrect Authorization

An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...

PT-2026-71677

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration ZCS versions prior to 10.1.17 Description An authorization bypass occurs due to improper validation in the delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to the...

Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service (cisco-sa-iosxe-bing-MGHrFAkd)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A denial of service DoS vulnerability exists in the Blocks Extensible Exchange Protocol BEEP feature of Cisco IOS XE Software due to improper handling of BEEP SOAP requests. An unauthenticated, remote...