cua-kit

CUA-Kit Windows 및 macOS 시스템에서 컴퓨터 사용 에이전트를 열거하고 상호작용하기 위한 툴킷입니다. 도구 도구| 설명| 출력 ---|---|--- cua-enum| 컴퓨터 사용 에이전트 구성 열거 Claude Code, Codex CLI, Cursor, Gemini CLI| .exe, .x64.o cua-exec| 래퍼 또는 직접 API를 통해 컴퓨터 사용 에이전트 CLI 명령 실행 Claude, Codex, Gemini, Cursor| .exe, .x64.o cua-poison| 가짜 컴팩트 요약으로 Clau...

CVE-2026-41940-Exploit-PoC

CVE-2026-41940 Exploit PoC – cPanel & WHM 인증 우회 제작자: Ishan Oshada | GitHub ⚠️ 승인된 보안 테스트 전용입니다. 무단 사용은 불법입니다. 📋 목차 취약점 개요 공격 체인 기능 설치 빠른 시작 사용 예시 사후 공격 작업 대화형 셸 명령어 urls.txt를 이용한 대량 스캔 출력 예시 옵션 참조 영향받는 버전 모든 플랫폼용 빌드 FAQ 및 문제 해결 면책 조항 제작자 취약점 개요 CVE-2026-41940 은 cPanel & WHM버전 11.110.0.97,...

CVE-2026-41940-POC

CVE-2026-41940 – cPanel/WHM 인증 우회 PoC 이 저장소는 CVE-2026-41940에 대한 개념 증명PoC 익스플로잇을 포함하며, CRLF 주입 및 세션 포이즈닝을 통한 cPanel/WHM의 다단계 인증 우회를 시연합니다. 면책 조항: 이 코드는 교육 및 공인된 보안 테스트 목적으로만 제공됩니다. 소유하지 않았거나 명시적 테스트 권한이 없는 시스템에 사용하지 마십시오. 개요 이 PoC는 Hadrian과 watchTowr이 관찰한 기술을 기반으로 실제 공격 체인을 재현합니다. 이 취약점을 통해 공격자는 다...

CVE-2025-32432

CVE-2025-32432 — Craft CMS 사전 인증 RCE Craft CMS에서 인증 없이 원격 코드 실행을 수행하는 Go 기반 익스플로잇입니다. c0gnit00의 원본 작업에서 영감을 받았습니다. 작동 방식 1. GET /admin/login을 통해 PHP 세션과 CSRF 토큰을 획득합니다. 2. 쿼리 문자열에 PHP 코드를 주입하여 PHP 세션 파일을 오염시킵니다. 3. assets/generate-transform을 통해 역직렬화를 트리거하여 오염된 파일을 포함하고 실행합니다. 사용법 go run main.go -...

DEBIAN-CVE-2026-94419

Without NOSESSIONCACHEREF, wolfSSLgetsession does not return a session object but a ClientSession reference of the form row, index, hashsessionID into the process-global SessionCache, and ClientSessionToSession validates it against that hash alone. Because the TLS 1.2 session ID is chosen by the...

CVE-2026-94419

Without NOSESSIONCACHEREF, wolfSSLgetsession does not return a session object but a ClientSession reference of the form row, index, hashsessionID into the process-global SessionCache, and ClientSessionToSession validates it against that hash alone. Because the TLS 1.2 session ID is chosen by the...

EUVD-2026-87906

Without NOSESSIONCACHEREF, wolfSSLgetsession does not return a session object but a ClientSession reference of the form row, index, hashsessionID into the process-global SessionCache, and ClientSessionToSession validates it against that hash alone. Because the TLS 1.2 session ID is chosen by the...

CVE-2026-94419

Without NOSESSIONCACHEREF, wolfSSLgetsession does not return a session object but a ClientSession reference of the form row, index, hashsessionID into the process-global SessionCache, and ClientSessionToSession validates it against that hash alone. Because the TLS 1.2 session ID is chosen by the...

PT-2026-99517

Name of the Vulnerable Software and Affected Versions wolfSSL versions 5.3.0 through 5.9.2 Description When NO SESSION CACHE REF is undefined, the wolfSSL get session function returns a ClientSession reference to the process-global SessionCache instead of a session object. The...

GHSA-5P9G-J988-PCWV MCP Ruby SDK: Ruby SSE Session Poisoning

Summary Vulnerability: Missing Session Ownership Validation in the Ruby MCP SDK's Streamable and SSE HTTP transport implementation. Any attacker with a stolen session ID can execute tools with the victim's session. This is a silent attack - the victim's session is compromised and being used for...

CVE-2026-67431 MCP Ruby SDK: Ruby SSE Session Poisoning

MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not bind a session ID to a session owner, allowing an attacker with a stolen session ID to send tools/call requests that...

CVE-2026-67431 MCP Ruby SDK: Ruby SSE Session Poisoning

MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not bind a session ID to a session owner, allowing an attacker with a stolen session ID to send tools/call requests that...

📄 Wing FTP Server 8.1.2 Remote Code Execution via Session Poisoning

This proof of concept remote code execution exploit abuses a flaw in how Wing FTP Server handles admin session serialization, specifically the mydirectory basefolder field. Version 8.1.2 is affected...

SUSE CVE-2026-48847

Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass...

Linux Distros Unpatched Vulnerability : CVE-2026-48847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass...

DEBIAN-CVE-2026-48847

Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass...

CVE-2026-48847

Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass...

CVE-2026-48847

Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass...

UBUNTU-CVE-2026-48847

Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass...

CVE-2026-48847

Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass...