CVE-2022-42889

CVE-2022-42889 테스트 애플리케이션 이 저장소는 CVE-2022-42889에 취약한 Apache Commons Text 1.10을 사용하는 간단한 애플리케이션을 포함합니다. 애플리케이션 실행 DemoApplication.java의 nc 명령을 호스트 IP 주소로 바꾸세요. netcat으로 수신 대기: root@kitploit: $ nc -l -p 30000 취약한 도커 코드 빌드 및 실행 root@kitploit: docker build . -t vulnerable-app docker run vulnerable-ap...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 114. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 115...

CVE-2025-37164

CVE-2025-37164 HPE OneView에 원격 코드 실행 문제가 존재합니다. 이 탐지 방법은 어떻게 작동하나요? 이 템플릿은 OneView title 태그를 매칭하고, JavaScript artifactVersion 변수에서 버전을 추출한 다음, 11.00 미만 버전을 실행 중인 인스턴스를 잠재적으로 취약한 것으로 표시합니다. 참고: 이 템플릿으로 표시된 인스턴스는 잠재적으로 취약할 수 있습니다. 탐지 방법은 버전 5.20-10.20에 Z7550-98077 보안 핫픽스가 적용되었는지 여부를 확인할 수 없으며, 11.0...

CVE-2018-1335

CVE-2018-1335 apache Tika-server 1.18 미만 버전의 RCE원격 코드 실행 취약점 명령어: sudo bash install.sh python2 exploit.py...

Astra Linux – Vulnerability in Firefox

Firefox used to cache the last filename used for printing a file. When generating a filename for printing, Firefox usually suggests the web page title. The combination of caching and suggestion techniques may have led to the title of a website visited during private browsing mode being stored on...

NPM: Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin

NPM: Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin vulnerability discovered by ? in WordPress Npm electron versions 39.8.7...

WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin < 5.0.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by João Ramos Maciel in WordPress Plugin Dynamic Pricing With Discount Rules for WooCommerce versions 5.0.0...

CVE-2026-14872 Database for Contact Form 7, WPforms, Elementor forms < 1.5.5 - Authenticated SQL Injection via id Parameter

The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by users granted a specific capability which is limited to administrators by default...

NPM: fast-uri vulnerable to host confusion via backslash authority introducer

NPM: fast-uri vulnerable to host confusion via backslash authority introducer vulnerability discovered by ? in WordPress Npm fast-uri versions 2.4.4...

CVE-2026-55969 affecting package thrift for versions less than 0.24.0-1

CVE-2026-55969 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14849

The CVE-2026-14849 entry concerns the Paid Membership Subscriptions WordPress plugin (before 3.0.7). Affected component: member and payment export files written to a predictable location in the uploads directory. Root cause: lack of protection allows unauthenticated users to download these export...

CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7

CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7. A patched version of the package is available...

CVE-2026-56852 affecting package skopeo for versions less than 1.14.4-12

CVE-2026-56852 affecting package skopeo for versions less than 1.14.4-12. A patched version of the package is available...

CVE-2026-65888

Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox 2.20.2 - The socialLogin method allows actors to login as any given user on the target site...

CVE-2026-65889

Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion 2.20.2 - The generateNewApp method allows actors to recursively delete directories...

CVE-2026-65943

Joomla Extension RO CSVI by rolandd.com (

PT-2026-65806

Joomla Extension - balbooa.com - Payment bypass in Gridbox 2.20.2...

CVE-2026-55973 affecting package unbound for versions less than 1.25.2-1

CVE-2026-55973 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55708 affecting package unbound for versions less than 1.25.2-1

CVE-2026-55708 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-50045 affecting package unbound for versions less than 1.25.2-1

CVE-2026-50045 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...