CVE-2023-38829-NETIS-WF2409E

CVE-2023-38829-NETIS-WF2409E NETIS SYSTEMS 라우터 WF2409E 명령 주입 PoC 취약점 설명: NETIS SYSTEMS 라우터 WF2409E버전 V3.6.42541의 ping 및 traceroute 기능은 명령 주입 공격에 취약합니다. 웹 관리 인터페이스를 통해 이러한 기능의 매개변수에 악의적인 입력을 구성할 수 있으며, 영향을 받는 프로세스의 권한으로 임의의 명령을 실행할 수 있습니다. PoC 단계: 1. 대상 식별: NETIS SYSTEMS 라우터 WF2409E버전 V3.6.42541 웹...

CVE-2026-13249

CVE-2026-13249 — Honeywell PD45 인증되지 않은 파일 업로드 RCE CVE-2026-13249 — Honeywell PD45 산업용 프린터 웹 관리 인터페이스에 대한 Python 3 PoC입니다. 설명 PoCbit / GitHub CVE-2026-13249 — 펌웨어 F10.19.010040 부터 F10.22.030745 이전 까지 프린터 HTTPS 웹 관리자 에서 인증되지 않은 임의 파일 업로드 가 가능합니다 CWE-306, CWE-434, CWE-78. 공격자는 공격자가 제어하는 파일을 업로드하여...

cve-2022-1040

환경 Python 환경3.10에서 가상 환경 사용을 강력히 권장합니다 pip3 install baseproxy python3.10은 baseproxy와 함께 다운로드된 pyOpenSSL 버전이 너무 낮으면 AttributeError를 발생시킵니다. 최신 버전을 재설치하면 해결됩니다. pip3 uninstall pyOpenSSL pip3 install pyOpenSSL 실행 python3 Sophos-poc.py Docker에서 docker pull keithdockerhub/cve-2022-1040:latest or build...

CVE-2023-49440

CVE-2023-49440-POC Exploit Title: AhnLab EPP Management중앙 엔드포인트 보안 관리 - 부울 기반 SQL 인젝션으로 RCE로 이어짐 Date: 16 July 2023 CVE : CVE-2023-49440 Vendor Homepage: https://www.ahnlab.com/en Software Link:https://www.ahnlab.com/ko/product/epp-management Product...

Exploit for CVE-2026-13249

CVE-2026-13249 — Honeywell PD45 Unauthenticated File Upload R...

pingap v0.14.2

pingap Before the pingap version is stable, no pull requests will be accepted. If you have any questions, please create a new issue first. Overview Pingap is a high-performance reverse proxy powered by the Cloudflare Pingora . It simplifies operational management by enabling dynamic, zero-downtim...

CVE-2026-14466

It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface...

CVE-2026-14466 Possible XSS in the SNS web administration panel

It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface...

PT-2026-85534

It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface...

CVE-2026-15933

OptimiDoc Server On-Premise stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP for scan delivery, Active Directory for user list import, and SharePoint credentials, in cleartext via the web...

EUVD-2026-70378

OptimiDoc Server On-Premise stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP for scan delivery, Active Directory for user list import, and SharePoint credentials, in cleartext via the web...

CVE-2026-15933 Cleartext Storage of Sensitive Credentials in OptimiDoc Server (On-Premise)

OptimiDoc Server On-Premise stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP for scan delivery, Active Directory for user list import, and SharePoint credentials, in cleartext via the web...

CVE-2026-16323 Authentication Bypass via Execution After Redirect in FuyaSoft's Architect Panel Web Management Panel

Execution after redirect EAR vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel allows Authentication Bypass. This issue affects ArchitectPanel Web Admin Panel: through 28072026...

CVE-2026-16323 Authentication Bypass via Execution After Redirect in FuyaSoft's Architect Panel Web Management Panel

Execution after redirect EAR vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel allows Authentication Bypass. This issue affects ArchitectPanel Web Admin Panel: through 28072026...

EUVD-2026-63825

Execution after redirect EAR vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel allows Authentication Bypass. This issue affects ArchitectPanel Web Admin Panel: through 28072026...

CVE-2026-16323: Execution After Redirect (EAR)

Execution after redirect EAR vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel allows Authentication Bypass. This issue affects ArchitectPanel Web Admin Panel: through 28072026...

PT-2026-79310

Execution after redirect EAR vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel allows Authentication Bypass. This issue affects ArchitectPanel Web Admin Panel: through 28072026...

CVE-2026-71273

OpenBK7231T's /cfgwifiset endpoint src/httpserver/httpfns.c accepts configuration changes via a plain GET request with no CSRF token. If the parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty string...

CVE-2026-71273 OpenBK7231T CSRF in /cfg_wifi_set Leading to Implicit Web Password Disable and WiFi Hijack

OpenBK7231T's /cfgwifiset endpoint src/httpserver/httpfns.c accepts configuration changes via a plain GET request with no CSRF token. If the parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty string...

CVE-2026-71273

OpenBK7231T's /cfgwifiset endpoint src/httpserver/httpfns.c accepts configuration changes via a plain GET request with no CSRF token. If the parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty string...