EUVD-2026-93496

The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields by omitting the secu anti-forgery parameter in crayonsstore.php, causing the authorization dispatcher to resolve an...

CVE-2026-104069

HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport where an uploaded ZIP archive is extracted directly into the public web root before any validation of file names, extensions, or content is performed. An authenticated administrator can upload a crafte...

CVE-2026-104069

HortusFox versions prior to 6.2 are vulnerable to Remote Code Execution (RCE) via the ThemeModule::startImport() function. The root cause is the direct extraction of uploaded ZIP archives into the public web root without validating filenames, extensions, or content. An authenticated administrator...

CVE-2026-104069 HortusFox < 6.2 Remote Code Execution via Theme Import

HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport where an uploaded ZIP archive is extracted directly into the public web root before any validation of file names, extensions, or content is performed. An authenticated administrator can upload a crafte...

EUVD-2026-93436

HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport where an uploaded ZIP archive is extracted directly into the public web root before any validation of file names, extensions, or content is performed. An authenticated administrator can upload a crafte...

CVE-2026-104069 HortusFox < 6.2 Remote Code Execution via Theme Import

HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport where an uploaded ZIP archive is extracted directly into the public web root before any validation of file names, extensions, or content is performed. An authenticated administrator can upload a crafte...

CVE-2017-7921-Writeup-2026

CVE-2017-7921 — Hikvision IP 카메라 / DVR / NVR 부적절한 인증 — 조작된 쿼리 매개변수를 통한 권한 상승 | ---|--- CVE ID| CVE-2017-7921 취약점 분류| CWE-287: 부적절한 인증 Improper Authentication CVSS v3.0 기본 점수| 10.0 심각 — AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS v2.0 점수| 7.5 높음 — AV:N/AC:L/Au:N/C:P/I:P/A:P 공개일| 2017 ICS-CERT 권고...

Cisco ASA Missing Authorization (CVE-2025-20362)

Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial...

Cisco ASA Code Injection (CVE-2024-20485)

A vulnerability in the VPN web server of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this...

PT-2026-106774

The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields by omitting the secu anti-forgery parameter in crayons store.php, causing the authorization dispatcher to resolve an...

Brocade Fabric OS authentication and access control bypass via HTTP host header spoofing

: An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual...

Apache Configuration Injection via Unsanitized IdP Issuer Setting in Brocade Fabric OS Web Service Interface

: An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication FA, the system fails to sanitize the Identity Provider IdP issuer parameter. An authenticated administrator—or an...

CVE-2025-24813

Apache Tomcat Unauthenticated RCE - CVE-2025-24813 이 저장소는 CVE-2025-24813 취약점을 평가하기 위한 가이드와 테스트 환경을 제공합니다. 세부 정보 영향을 받는 버전: Apache Tomcat 11.0.0-M1 to 11.0.2 Apache Tomcat 10.1.0-M1 to 10.1.34 Apache Tomcat 9.0.0.M1 to 9.0.98 참고 자료 CVE-2025-24813 권고 Apache 공지 취약점 테스트 절차 1. 다음 명령어를 실행하여 취약한 Apache...

CVE-2005-0575-knet-exploit

CVE-2005-0575 KNet 웹 서버 1.04b 원격 버퍼 오버플로우 SEH 익스플로잇 x86 Windows XP SP3용, 이 익스플로잇은 약간의 조정이 필요합니다! 실행 전에 코드를 수정하세요! 과거에 제작했으며, 언제 만들었는지 잊어버렸습니다...

CVE-2024-35106-POC

NEXTU FLETA Wifi6 라우터 DOS, 잠재적 RCE POC 이 문서는 CVE-2024-35106 취약점을 통해 EZNET FLETA WiFi 라우터에서 익스플로잇이 수행된 방법을 설명합니다. 취약점 정보 CVE ID CVE-2024-35106 제품 공급업체 NEXTU 제품 FLATA AX1500 Wifi6 라우터 버전 1.0.3 취약점 유형 버퍼 오버플로우 실행 환경 라우터는 Realtek 칩셋 기반 MIPS 아키텍처에서 리틀 엔디언으로 동작합니다. 라우터 펌웨어 버전은 v1.0.3입니다. 이 라우터는 2005년에...

Netis-N5VN-AC1200-DOS

Exploit 제목: Netis N5VN AC1200 - 버퍼 오버플로우 DoS서비스 거부 날짜: 05/03/2024 Exploit 작성자: Van Lam Nguyen Facebook: fb.com/vanlam1412 공급업체 홈페이지: Netis Systems 버전: Netis N5VN AC1200 V1.0.1.1742 테스트 환경: Windows CVE : CVE-2024-44596 개요 Netis N5VN AC1200 라우터에는 버퍼 오버플로우 취약점이 존재하며, 이를 통해 공격자는 조작된 요청을 보내 라우터에서 실행 중...

OpenPLC-CVE-2021-31630-RCE

OpenPLC v3 인증된 RCE CVE-2021-31630 이것은 OpenPLC v3의 취약점 CVE-2021-31630에 대한 최신 Python 3.13+ 호환 개념 증명 익스플로잇입니다. 이 취약점은 인증된 사용자가 악성 코드가 포함된 사용자 정의 하드웨어 레이어를 업로드할 수 있게 하여 호스트에서 원격 코드 실행RCE을 유발합니다. 원본 취약점 발견 및 권고 자료는 Fellipe Oliveira가 제공했습니다. 이 재구현 및 최신화는 httpx, CLI 도구, 로깅 및 보다 안전한 탐지 기술을 사용합니다. 익스플로잇 개...

Astra Linux – Vulnerability in libsoup2.4

A flaw was discovered in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash...

Astra Linux – Vulnerability in Apache2

An HTTP response smuggling vulnerability exists in the Apache HTTP Server via modproxyuwsgi. This issue affects the Apache HTTP Server: from version 2.4.30 through 2.4.55. Special characters in the origin response header can cause the response forwarded to the client to be truncated or split...

Astra Linux – Vulnerability in Apache2

When an HTTP/2 stream is reset by a client via an RST frame, there is a time window during which the memory resources associated with the request are not immediately reclaimed. Instead, the deallocation of these resources is delayed until after the connection is closed. This allows clients to...