ASUS DSL-AC88U - Authentication Bypass

A vulnerability in the ASUS DSL-AC88U router permits unauthorized individuals to bypass authentication.When adding "/js/..%2f%2f" or "/images/..%2f%2e" to the requested URL, it will be recognized as passing the authentication.This vulnerability is part of a broader authentication bypass issue...

Popup Builder Plugin - SQL Injection and Cross-Site Scripting

The Popup Builder WordPress plugin before 4.1.1 is vulnerable to SQL Injection and Reflected XSS via the sgpb-subscription-popup-id parameter. id: CVE-2022-0479 info: name: Popup Builder Plugin - SQL Injection and Cross-Site Scripting author: ritikchaddha severity: critical description: | The Pop...

WordPress NotificationX <2.3.9 - SQL Injection

WordPress NotificationX plugin prior to 2.3.9 contains a SQL injection vulnerability. The plugin does not sanitize and escape the nxid parameter before using it in a SQL statement, leading to an unauthenticated blind SQL injection. An attacker can possibly obtain sensitive information, modify dat...

Oracle WebLogic Server Administration Console - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services versions 0.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0 contain an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. id:...

D-Link DNS-320 - Remote Code Execution

The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. id: CVE-2019-16057 info: name: D-Link DNS-320 - Remote Code Execution author: DhiyaneshDk severity: critical description: | The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerabl...

Jellyfin <10.7.0 - Local File Inclusion

Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk. id: CVE-2021-21402 info: name: Jellyfin 10.7.0 - Local File Inclusion author: dwisiswant0 severity: medium...

Apache-RocketMQ-CVE-2023-33246-

CVE-2023-33246: Apache RocketMQ 원격 코드 실행 개요 Apache RocketMQ는 가장 인기 있고 널리 사용되는 분산 메시징 및 스트리밍 플랫폼 중 하나입니다. 최근 Apache RocketMQ 버전 5.1.0 이하에서 명령 실행 취약점이 보고되었습니다. 원격의 인증되지 않은 사용자는 업데이트 구성 기능을 이용하여 RocketMQ 사용자 프로세스와 동일한 액세스 수준으로 명령을 실행할 수 있습니다. 주요 구성 요소 네임서버Nameserver: 1. RocketMQ의 네임서버는 전체 메시징 인프라에 대...

study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095

Struts2의 취약성 S2-054, S2-055 및 Jackson의 취약성 CVE-2017-7525, CVE-2017-15095 조사 보고 요점만 정리하여 읽기 쉽게 만든 요약 기사를 공개했습니다. 먼저 개요를 알고 싶거나 시간이 없는 분들께 추천합니다. SSTtechlog 08 S2-054, S2-055 및 jackson-databind의 취약성 CVE-2017-7525, CVE-2017-15095에 대해 | SST 주식회사 시큐어스카이 테크놀로지...

Fedora 45 : gssntlmssp (2026-654bf10275)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-654bf10275 advisory. Update to 1.3.2, fixes a Low security issue Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

connectwise-automate-AiTM-rce

ConnectWise Automate 中間者攻撃によるリモートコード実行 目次 背景 タイムライン 考察と学び 責任ある開示 PoC コード ConnectWise に提供したレポート 概要 脆弱な構成 影響 技術的詳細 1. HTTP トランスポート 2. 不十分なプロトコルセキュリティ（暗号化と検証の欠如） 2.1 依存関係チェックとダウンロードにおける不十分な検証 2.2 リプレイプロテクションの欠如 2.3 自己アップデートにおける不十分な検証 3. RMM コマンド＆コントロールの乗っ取り 緩和策 背景 ペネトレーションテストの一環として、ConnectWise...

CVE-2024-39700-PoC

CVE-2024-39700 概念実証 このテンプレートを test オプションで使用して作成されたリポジトリには、RCE 脆弱性を持つ update-integration-tests.yml ワークフローが含まれています。 PoC PR: https://github.com/LOURC0D3/CVE-2024-39700-PoC/pull/2 コミット アクション結果: https://github.com/LOURC0D3/CVE-2024-39700-PoC/actions/runs/10157571828/job/28087926847 結果...

CVE-2026-81630

The Botslab G980H dash camera firmware is vulnerable due to insufficient verification of data authenticity during the firmware update process. The device retrieves updates via an unprotected connection and validates them using a supplied integrity value rather than a trusted cryptographic signatu...

EUVD-2026-86460

The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of a trusted cryptographic signature. A suitably...

CVE-2025-13342

CVE-2025-13342 Frontend Admin by DynamiApps - ----/| |/ ----| \ ||/ / / / //// |// |/...

routers-exploit

ルーターで見つかったPoCと脆弱性を含むオープンソースリポジトリ TP LINK TL-WR849N - リモートコマンド実行 PoC CVE-2020-9374 - TP LINK TL-WR849N - リモートコマンド実行 PoC root@kitploit: ペイロード: "$ls" TP LINK TL-WR849N - 認証バイパス: ファームウェアと設定の更新 TP LINK TL-WR849N - リモートコマンド実行 PoC ペイロード: curl -X GET -H "Referer: http://192.168.0.1/mainFrame.htm"...

Arlo

Arlo Arlo のダンプとアップデートから実行可能バイナリを抽出します ブログ記事は https://www.synacktiv.com/publications/arlo-im-watching-you を参照してください パーサー arlo.py は、Flash メモリダンプの解析、アップデートのダウンロードと解析、 既知モデルの一覧表示に使用します。cryptography、asn1crypto、requests の pip パッケージが必要で、オプションで fastcrc パッケージも使用します。 既知のモデル root@kitploit: $ arlo.py list -...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-1880

CVE-2026-1880 https://github.com/user-attachments/assets/2602558f-abd8-4773-9094-64c32501dfed ASUS DriverHub 更新 TOCTOU LPE ASUS DriverHub ドライバ更新プロセスの TOCTOU 脆弱性による LPE 技術資料 技術プレゼンテーション PDF 한국어.md | English.md Asus Hall of Fame あとがき 技術的な影響は大きくないかもしれませんが、これがセキュリティ分野への最初の小さな貢献となったことを嬉しく思います。 謝辞...

CVE-2026-25961-SumatraPDF-3.5.0---3.5.2-RCE

SumatraPDF 安全でない更新 PoC CVE-2026-25961 – 悪意のある更新サーバーによるリモートコード実行 著者: Mohammed Idrees Banyamer 日付: 2026年2月 CVE: CVE-2026-25961 GHSA: GHSA-xpm2-rr5m-x96q CVSS v3.1: 7.5 High AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 影響を受けるバージョン: SumatraPDF 3.5.0 – 3.5.2 テスト環境: Windows 10 / Windows 11 脆弱性 SumatraPDF バージョン...

AZL-103913 CVE-2026-97425 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing...