1615 matches found
CVE-2025-53652-Jenkins-Git-Parameter-Analysis
CVE-2025-53652: Jenkins Git Parameter Plugin의 검증되지 않은 입력 취약점. 요약 이 취약점은 Jenkins 빌드 파라미터의 사용자 제어 입력이 Git 체크아웃 명령에 안전하지 않게 주입되기 때문에 발생합니다. 사용자 입력은 빌드 파라미터예: gitParameters로 제공되며, 여기에는 악의적인 셸 명령이 포함될 수 있습니다. 이 파라미터는 GitParameterValueStringParameterValue를 확장로 래핑되며, 해당 GitParameterValue의 buildEnvironme...
LolLMS < 2.2.0 - Server-Side Request Forgery
A Server-Side Request Forgery SSRF vulnerability exists in parisneo/lollms versions prior to 2.2.0. The /api/files/export-content endpoint processes Markdown image URLs by downloading them via downloadimagetotemp in backend/routers/files.py without any validation, allowing an unauthenticated...
CVE-2023-33405
CVE-2023-33405 BlogEngine.NET CMS 버전 3.3.8.0 및 이전에서 확인된 오픈 리디렉션 취약점 GET 요청이 default.aspx 페이지로 전송될 때 URL에 "years="가 포함되어 있으면, 애플리케이션이 "Redirect"라는 함수를 호출합니다. 이 함수는 year, month, date, page 및 rewrite를 포함한 여러 매개변수를 설정합니다. date 매개변수는 DateTime 객체를 사용하여 파싱되었지만 month와 year 매개변수는 검증되지 않고 rewrite 매개변수를 구성하...
HFS_EXPLOIT_PROJECT
HFSEXPLOITPROJECT HFS 2.3 に対する Metasploit RCE - CVE-2014-62 🔖 プロジェクトのタイトル root@kitploit: HTTP File Server HFS 2.3 を介したリモートコード実行 ⚙ 使用ツール • Kali Linux • Nmap • Metasploit • ターゲット: Windows 7 上の HFS 2.3 🔐 脆弱性の詳細 • 名前: CVE-2014-6287 • 種類: リモートコード実行 • 原因: HFS スクリプティングにおける未検証の入力 • 影響: 未認証のシェルアクセス 🔍 手法...
CVE-2018-1000533
Уязвимость удаленного выполнения кода GitList 0.6.0 CVE-2018-1000533 GitList — современный просмотрщик Git-репозиториев. В GitList версии 0.6.0 и ниже существует уязвимость, связанная с передачей неправильно проверенных входных данных в системные функции, что позволяет выполнять произвольные...
DEBIAN-CVE-2026-89494
In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate lengths in dlmmiglockreshandler A node receiving a DLMMIGLOCKRES message trusts several fields of the peer-supplied dlmmigratablelockres without validation. numlocks and locknamelen are bounded only on the sending...
CVE-2026-89443
In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioctls isstifgetperflevelmask and isstifgetbasefreqmask use the user-provided level as an index into perflevels via readpplevelinfo and readbflevelinfo, but neither helper validates...
CVE-2022-36231
CVE-2022-36231 루비 젬 pdfinfo = 0.5.3은 PDF::Info 객체에서 메서드를 실행할 때 OS 명령 삽입OS Command Injection에 취약합니다. 특별히 조작된 페이로드를 사용하는 공격자는 명령 체이닝을 통해 OS 명령을 실행할 수 있습니다. 취약점 분석 새로운 PDF::Info 객체를 생성할 때 initialize 메서드가 호출됩니다. root@kitploit: def initializepdfpath @pdfpath = pdfpath end 객체 초기화 중에는 검증이 수행되지 않으며 사용자가...
CVE-2026-89657 libceph: validate OSD extent maps before cursor advance
In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent lengths, but it does not validate that each OSD-supplied extent is...
EUVD-2026-76400
In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate lengths in dlmmiglockreshandler A node receiving a DLMMIGLOCKRES message trusts several fields of the peer-supplied dlmmigratablelockres without validation. numlocks and locknamelen are bounded only on the sending...
CVE-2026-89494
CVE-2026-89494 is a Linux kernel vulnerability in the OCFS2 DLM subsystem, specifically in dlm_mig_lockres_handler. A node receiving a DLM_MIG_LOCKRES message trusts peer-supplied num_locks and lockname_len fields without validation. This leads to two distinct issues: an out-of-bounds read in dlm...
CVE-2026-81017
CVE-2026-81017 affects the Linux kernel's Chrome OS sensorhub driver (cros_ec_sensorhub). The root cause is a missing bounds check: cros_ec_sensorhub_ring_handler() does not validate the 8-bit sensor number carried by each EC FIFO event before cros_ec_sensor_ring_process_event() uses it to index ...
CVE-2026-81910
Concrete CMS 9 through 9.5.2 is vulnerable to Server-Side Template Injection SSTI in Theme Customizer via Unvalidated Style Values. Values submitted through the customizer color channels and other style properties handled by ColorStyle and sibling Style classes such as FontFamilyStyle and...
EUVD-2026-76193
Concrete CMS 9 through 9.5.2 is vulnerable to Server-Side Template Injection SSTI in Theme Customizer via Unvalidated Style Values. Values submitted through the customizer color channels and other style properties handled by ColorStyle and sibling Style classes such as FontFamilyStyle and...
PT-2026-90159
In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioctls isst if get perf level mask and isst if get base freq mask use the user-provided level as an index into perf levels via read pp level info and read bf level info, but neither...
PT-2026-90067
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy mt7915 mcu get eeprom copies a fixed EFUSE block into the driver's dev-mt76.eeprom.data buffer at the offset reported by the MCU response res-addr, a...
PT-2026-90210
In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate lengths in dlm mig lockres handler A node receiving a DLM MIG LOCKRES message trusts several fields of the peer-supplied dlm migratable lockres without validation. num locks and lockname len are bounded only on th...
CVE-2026-88880
Renovate before 44.11.3 contains a credential exfiltration vulnerability in its handling of Link headers when following GitLab server pagination . Because Renovate fails to validate Link header destinations, an attacker controlling a compromised GitLab server can specify a Link header pointing to...
CVE-2026-81431
The Registration Form for WooCommerce WordPress plugin versions 1.1.0 through 1.1.2 fails to validate the tgwcfb_id parameter during registration, reading the permitted-role allow-list from an arbitrary attacker-controlled post rather than a legitimate registration form. A user with Contributor o...