WAGO - Remote Command Execution

In multiple products of WAGO, a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behavior, Denial of Service, and full system compromise. id: CVE-2023-1698 info: name: WAGO - Remote Command Execution...

Ashwesker-CVE-2026-24061

🚨 CVE-2026-24061 : GNU InetUtils telnetd의 치명적인 원격 인증 우회 🧠 개요 CVE-2026-24061 은 GNU InetUtils 의 telnetd 서비스에 영향을 미치는 치명적인 취약점입니다. 이 취약점은 시스템 로그인 프로세스에 전달되는 환경 변수의 부적절한 처리를 악용하여 인증되지 않은 원격 공격자가 root 로 로그인할 수 있게 합니다. 영향: 완전한 시스템 장악. 심각도: 🔥 치명적 CVSS 9.8 🎯 영향을 받는 버전 GNU InetUtils telnetd 버전: 1.9.3 → 2....

CVE-2026-22812-exploit

CVE-2026-22812 エクスプロイトツール CVE-2026-22812 - OpenCode 認証なしRCE のためのフル機能エクスプロイトツールキット 🎯 概要 CVE-2026-22812 エクスプロイトツールは、OpenCode の認証なしリモートコード実行の脆弱性に対する包括的なエクスプロイトフレームワークです。このツールは、対話型シェル、ファイル操作、システム列挙など、複数のエクスプロイト手法を提供します。 脆弱性の詳細 CVE ID : CVE-2026-22812 影響を受けるバージョン : OpenCode 1.0.216 CVSS スコア : 8.8 High...

Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

SOCアラート分析: Checkpoint Security Gateway CVE-2024-24919 における任意ファイル読み取り はじめに CVE-2024-24919 は、Check Point Security Gateways...

MAL-2026-16067 Malicious code in @vallensofficial/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02adc12975b9798883d78640d5cab1a73420818d23fbd192ebb76a384f056d54 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Gladinet CentreStack & Triofox - Hardcoded Credentials

Gladinet CentreStack and Triofox 16.12.10420.56791 contain a hardcoded credentials vulnerability caused by use of hardcoded AES cryptoscheme values, letting attackers perform arbitrary local file inclusion without authentication, potentially leading to full system compromise. id: CVE-2025-14611...

CVE-2025-42957-SAP-S-4HANA-Under-Siege

CVE-2025-42957-SAP-S-4HANA-Under-Siege 1 – 무슨 일이 있었나요? 2025년 8월, SAP의 주력 ERP 플랫폼 S/4HANA 에서 RFC 지원 함수 모듈 중 하나에 취약점이 발견되었습니다. 낮은 권한만 가진 공격자가 해당 모듈에 임의의 ABAP 코드를 주입하여 정상적인 권한 검사를 우회하고 시스템 전체를 제어할 수 있습니다. 이 결함은 이론적인 호기심이 아닙니다. 이미 SecurityBridge Threat Research Labs 에서 악용되었으며, 온프레미스 및 프라이빗 클라우드 배포 환경...

CVE-2024-4577

CVE-2024-4577: Критическая уязвимость в CGI-конфигурациях PHP Серьёзная уязвимость безопасности существует в CGI-режиме PHP, которая позволяет злоумышленникам выполнять произвольные команды, манипулируя параметрами URL. Затронутые версии Версии PHP до 7.4.29 и 8.0.19 на Windows, работающие с...

CVE-2025-26264

CVE-2025-26264 CVE-2025-26264 - GeoVision GV-ASWeb 버전 6.1.2.0 이하에는 Notification Settings 기능 내에 원격 코드 실행RCE 취약점이 존재합니다. ASWeb에서 "System Settings" 권한을 가진 인증된 공격자는 이 결함을 악용하여 서버에서 임의의 명령을 실행할 수 있으며, 이로 인해 전체 시스템이 손상될 수 있습니다. 요구 사항 성공적인 공격을 수행하려면 공격자에게 다음이 필요합니다: 버전 6.1.2.0 이하의 GV-ASManager 웹 애플리케이션에...

CVE-2025-53770

CVE-2025-53770 Это многосайтовый сканер для CVE-2025-53770 — уязвимости удаленного выполнения кода без аутентификации. Другие сканеры/PoC:- https://github.com/hazcod/CVE-2025-53770 https://github.com/MuhammadWaseem29/CVE-2025-53770 CVE-2025-53770 RCE в SharePoint Воздействие: Неаутентифицированны...

CVE-2024-38077

CVE-2024-38077 こちらは、CVE-2024-38077 の GitHub 上の説明文の一例です: CVE-2024-38077: Windows Remote Desktop Licensing Service におけるリモートコード実行の脆弱性 概要: CVE-2024-38077 は、Windows リモート デスクトップ ライセンス...

USN-8730-1 linux, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-realtime vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;...

USN-8729-1 linux, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-raspi, linux-realtime, linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-8725-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8725-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

-CVE-2025-8088

-CVE-2025-8088 POWERSHEL 스크립트로 장치가 영향을 받는지 여부를 확인하세요 🚨 CVE-2025-8088: WinRAR 제로데이 경보! 🚨 치명적인 WinRAR 취약점CVE-2025-8088이 헤드라인을 장식하고 있습니다 – 공격자는 7.13 미만 버전의 이 결함을 악용하여, 사용자가 조작된 아카이브를 열도록 속여 악성 코드를 실행할 수 있습니다. 영향? 전체 시스템 손상입니다. ✅ 7.13+에서 패치됨 → 이전 버전을 실행 중이라면 당신은 표적입니다. 💡 노출 여부를 즉시 감지하는 데 도움이 되는...

Malicious code in google-img-scrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86caa3dfd7fbfa99dfa8042e4792f31346c57427e7eb83cbc468b5a14d4c0e14 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

USN-8725-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - NVIDIA Tegra memory controller driver; - File systems infrastructure; - Network file system NFS server daemon; -...

USN-8725-1 linux, linux-aws, linux-fips, linux-kvm, linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - NVIDIA Tegra memory controller driver; - File systems infrastructure; - Network file system NFS server daemon; -...

EUVD-2025-210842

The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a malicious actor with administrative privileges to inject and execute arbitrary code remotely. Successful exploitation enables a threat actor with administrative...

CVE-2026-62871

A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthorized attacker to execute arbitrary code locally. This could lead to a complete compromise of the affected system. Mitigation No mitigation is required. Red Hat's .NET packages do not ship the Windows Desktop runtime...