Security Bulletin: IBM i is Affected By Denial of Service Vulnerabilities in NFS [CVE-2026-17057, CVE-2026-17207]

Summary IBM i is vulnerable to denial of service due to missing authentication and a buffer overflow CVE-2026-17057, CVE-2026-17207 in Network File System NFS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17057 DESCRIPTION: IBM i could allow a remote...

poc-cve-2019-14287

PoC of CVE-2019-14287 概要 sudo の脆弱性 CVE-2019-14287 を Docker コンテナ上で再現するサンプルです。 演習手順 1. docker compose up -d でコンテナを立ち上げる 2. docker exec -it vulnerablesudoapp bash でコンテナに入る 3. whoamiや idコマンドを実行して、自分が一般ユーザである（rootでない）ことを確認 root@kitploit: $ whoami user1 $ id uid=1000user1 gid=1000user1 groups=1000user1...

cve-2019-2725

cve-2019-2725 参考资料： Tenable - https://www.tenable.com/blog/oracle-weblogic-affected-by-unauthenticated-remote-code-execution-vulnerability-cve-2019-2725 Exploit Database - https://www.exploit-db.com/exploits/46780 PaloAlto -...

CVE-2023-35078

CVE-2023-35078 shodan dorks 公開ターゲットを見つけるには、以下の shodan dorks を使用できます。 http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs 以下のコマンドを使用して、shodan API からデータをチェックスクリプトに適した形式に変換できます。 root@kitploit: jq -cr 'select.http.favicon.hash == 362091310 | if .ssl? then "https://" else "http://" end ...

CVE-2023-45866_WIP

h0nkbtexploit Samsung devices are vulnerable to a critical Bluetooth security vulnerability that allows an attacker to control the targeted device as if they were attached by a Bluetooth keyboard, performing various functions remotely depending on the endpoint. This vulnerability, tracked as...

CVE-2022-22963

CVE-2022-22963 CVE-2022-22963 の教育用概念実証（PoC）自動化ツールです。許可された Hack The Box ラボ環境で実証されています。 概要 CVE-2022-22963 は、spring.cloud.function.routing-expression ヘッダーが関与する Spring Cloud Function の脆弱性です。 脆弱な構成では、攻撃者が Spring Expression Language（SpEL）の評価を悪用して、関数ルーティング機構を通じて Java 機能を呼び出すことができます。 このリポジトリには、許可された...

CVE-2026-74251

Phoca Cart の属性フィルタを介した未認証 SQL インジェクション Phoca Cart ≤ 6.1.6 — 未認証の攻撃者が時間ベースのブラインド注入によりデータベース全体を抽出 概要 Phoca Cart の公開ショップ商品ページにおける a（属性）および s（仕様）GET 配列パラメータは、パラメータ化やエスケープなしで生のまま SQL の WHERE 句に連結されます。未認証の攻撃者はこれらのパラメータを通じて任意の SQL を注入でき、時間ベースのブラインド手法によりデータベース全体の抽出が可能になります。 この脆弱性は...

EUVD-2026-69208

Incorrect access control in the updatePriStaList function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to refresh the primary station list via sending a crafted MQTT message to the csbroker component...

EUVD-2026-69203

Incorrect access control in the staticInfoSend function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger static information reporting to the configured master via sending a crafted MQTT message to the csbroker component...

EUVD-2026-69206

Incorrect access control in the sendStaticInfoToMaster function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to update stored slave inventory records via sending a crafted MQTT message to the csbroker component...

CVE-2026-51752

Incorrect access control in the staticInfoSend function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger static information reporting to the configured master via sending a crafted MQTT message to the csbroker component...

CVE-2026-51748

Incorrect access control in the sendStaticInfoToMaster function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to update stored slave inventory records via sending a crafted MQTT message to the csbroker component...

EUVD-2026-69204

Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove a specified slave device from local mesh management data and reboot the system via sending a crafted MQTT message to the csbroker component...

CVE-2026-51757

Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to start a firmware download or flash workflow on the slave device via sending a crafted MQTT message to the csbroker component...

EUVD-2026-69200

Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to start a firmware download or flash workflow on the slave device via sending a crafted MQTT message to the csbroker component...

CVE-2026-51760

Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to mass-trigger firmware update activity across mesh slaves via sending a crafted MQTT message to the csbroker component...

CVE-2026-51744

CVE-2026-51744 is an incorrect access control flaw in the recv_mesh_info_sync function of TOTOLINK T6 (firmware 4.1.5cu.748_B20211015). An unauthenticated remote attacker can send a crafted MQTT message to the cs_broker component to force mesh configuration synchronization from an attacker-contro...

CVE-2026-51763

Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to forcibly disconnect wireless clients via sending a crafted MQTT message to the csbroker component...

CVE-2026-51763

An incorrect access control flaw in the freeStaClient function of TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) allows unauthenticated network attackers to forcibly disconnect wireless clients by sending a crafted MQTT message to the cs_broker component. The CVSS v3.1 score is 9.8 (Critical) with ...

Linux Distros Unpatched Vulnerability : CVE-2026-82397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with...