CVE-2025-45960

CVE-2025-45960 - tawk.to Live chat - 1.6.1 - クロスサイトスクリプティング（XSS）の脆弱性 1.6.1で確認済み（それ以前のバージョンも影響を受ける可能性あり） 説明:...

Venom-JWT

Venom-JWT侵入ツール - JWT脆弱性と鍵解読サービスに対する侵入テスト 郑重声明：本資料に記載されている技術、アイデア、ツールは、安全を目的とした学習・交流のみに使用されるものであり、いかなる者もこれを違法目的や営利目的に使用してはなりません。違反した場合の結果は自己責任となります 。 JWT侵入テスト用に開発された脆弱性検証/鍵解読ツール。CVE-2015-9235/未検証署名攻撃/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042 の結果を生成し、FUZZに使用します。また、辞書や文字列列挙による解読も可能です。 ツール紹介 · 使用方法...

PHP-Injection-in-M4-PDF-Extensions

PHP-Injection-in-M4-PDF-Extensions CVE-2023-50029 は、M4 PDF Extensions モジュールにおける PHP インジェクションの脆弱性です。この脆弱性により、攻撃者はサーバー上で任意の PHP コードを注入・実行でき、標的のシステムを完全に制御できるようになります。この問題は入力の検証が不適切であることに起因しており、悪意のあるコードがユーザーパラメータを介して渡されることを可能にします。 Poc POST /generatepdf.php HTTP/1.1 Host: example.com Content-Type:...

CVE-2026-97673 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...

CVE-2026-97673

The Langflow OSS software versions 1.0.0 through 1.12.2 are affected by CVE-2026-97673 , which allows a remote authenticated attacker to execute arbitrary code due to improper input validation (CWE-693 ). This vulnerability can lead to high impact on confidentiality, integrity, and availability. ...

CVE-2026-97673 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...

EUVD-2026-94121

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...

CVE-2026-106226

Improper input validation in Compositing in Google Chrome prior to 155...

CVE-2026-106346

Improper state validation in DevTools in Google Chrome prior to 155.0...

CVE-2026-106299

Improper input validation in WebAudio in Google Chrome prior to 155.0...

CVE-2026-106343

Improper state validation in Autofill AI in Google Chrome on on Androi...

CVE-2026-106206

Improper input validation in Mobile in Google Chrome on on iOS prior t...

CVE-2026-97678

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by CVE-2026-97678 , which allows a remote authenticated attacker to execute arbitrary code due to improper input validation (CWE-693). The vulnerability has a HIGH base severity score of 8.8 . To remediate this issue, IBM strongly recomm...

CVE-2026-97679 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command 'Code Injection' related to improper input validation...

CVE-2026-97679

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a Code Injection vulnerability (CVE-2026-97679 ). A remote authenticated attacker can execute arbitrary code due to the improper neutralization of special elements used in an OS command, which stems from improper input validation . Th...

CVE-2025-3054-Exploit

CVE-2025-3054 Exploit: 여기서 다운로드 세부 정보 CVE ID : CVE-2025-3054 게시일 : 2025년 6월 5일 CVSS : 8.8 패치 가능 여부: 공식 패치는 아직 없음 영향 WP User Frontend Pro 플러그인WordPress용은 uploadfiles 함수에서 파일 유형 검증이 누락되어 모든 버전4.1.3 포함까지 임의 파일 업로드에 취약합니다. 이로 인해 인증된 공격자가 Subscriber-level 이상의 접근 권한을 가진 경우 영향을 받는 사이트 서버에 임의의 파일을 업로드할 수...

CVE-2026-106331

A flaw was found in chromium-browser. Improper input validation within the Extensions component allows a remote attacker to bypass web origin security policies. By using social engineering to convince a user to install a crafted browser extension, an attacker can gain unauthorized access to...

PurpleKeep

설명 공격 기술의 다양성이 급격히 증가하고 EDREndpoint Detection and Response에서 제공하는 탐지 규칙과 사용자 정의 규칙이 동시에 증가함에 따라 탐지 규칙의 지속적인 기능 테스트 필요성이 명확해졌습니다. 그러나 이러한 공격을 수동으로 재실행하고 탐지 규칙과 대조하는 것은 노동 집약적인 작업이므로 자동화할 가치가 있습니다. 이 문제를 해결하기 위해 저는 "PurpleKeep"을 개발했습니다. 이는 탐지 규칙의 자동화된 테스트를 용이하게 하기 위해 설계된 오픈 소스 이니셔티브입니다. Atomic Red...

CVE-2026-43598

A flaw was found in the AMD ROCm Communication Collectives Library RCCL. Due to improper input validation, a network-adjacent attacker or a compromised peer node can supply a crafted memory address that the library accesses without proper verification. This vulnerability could allow an attacker t...

CVE-2024-29973

CVE-2024-29973 - リモートコマンドインジェクションの脆弱性 説明 CVE-2024-29973 は、特定の Zyxel ネットワークデバイスで発見された重大な脆弱性です。この脆弱性により、未認証の攻撃者がファームウェアの不適切な入力検証メカニズムを悪用して、対象デバイス上で任意のコマンドを実行できるようになります。攻撃者は特別に細工された HTTP リクエストをデバイスに送信し、システムレベルのコマンドを注入することで、デバイスの完全な制御を獲得する可能性があります。 Dorks Hunter: product.name="ZyXEL...