RawrXDA

RawrXD PE Writer - 완전한 구현 개요 이것은 순수 x64 MASM 어셈블리로 구현된 완전한 PE32+ 라이터이자 기계 코드 이미터이며, 종속성이 전혀 없고 CRT를 사용하지 않습니다. 처음부터 실행 가능한 Windows 실행 파일을 생성합니다. 아키텍처 PE 라이터는 백엔드 디자이너 접근 방식을 따르며, 다음과 같은 깔끔한 API를 제공합니다: PE 실행 컨텍스트 생성 적절한 IAT/INT 구조를 사용한 임포트 추가 섹션 관리와 함께 기계 코드 방출 필요한 모든 헤더를 포함한 완전한 PE 파일 작성 핵심 구성 요...

openlore-PoC

サニタイズされていない LLM 由来の domain フィールドを介した OpenLore 仕様生成ライターにおけるパストラバーサル CVE ステータス: リクエスト済み、割り当て待ち。この脆弱性は GHSA-5j8x-q7q6-58j5 として公開されています。CVE が割り当てられると、このリポジトリは CVE-YYYY-NNNNN-openlore-PoC に改名され、このバナーは CVE リンクに置き換えられます。...

Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template 参考リンク 脆弱性の発生原因： 1. 攻撃者がSolrコンソールに直接アクセスできる場合、/ノード名/config のようなPOSTリクエストを送信することで、そのノードの設定ファイルを変更できます。 2. Apache...

The vulnerability of the Microsoft XPS Document Writer (MXDW) driver on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft XPS Document Writer MXDW driver on Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

CVE-2026-2278

The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'vwwriterblogresetallsettings' function in all versions up to, and including, 1.3.8. This makes it possible for authenticated attackers, with Subscriber-level access...

CVE-2026-2278 VW Writer Blog <= 1.3.8 - Missing Authorization to Authenticated (Subscriber+) Theme Settings Reset

The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'vwwriterblogresetallsettings' function in all versions up to, and including, 1.3.8. This makes it possible for authenticated attackers, with Subscriber-level access...

EUVD-2026-83539

The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'vwwriterblogresetallsettings' function in all versions up to, and including, 1.3.8. This makes it possible for authenticated attackers, with Subscriber-level access...

CVE-2026-2278

The VW Writer Blog theme for WordPress is affected by a missing capability check on the vw_writer_blog_reset_all_settings function in all versions up to and including 1.3.8 . Authenticated users with Subscriber-level access or above can call this function to reset all theme customizer settings to...

CVE-2026-2278 VW Writer Blog <= 1.3.8 - Missing Authorization to Authenticated (Subscriber+) Theme Settings Reset

The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'vwwriterblogresetallsettings' function in all versions up to, and including, 1.3.8. This makes it possible for authenticated attackers, with Subscriber-level access...

CVE-2026-2278: Missing Authorization

The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'vwwriterblogresetallsettings' function in all versions up to, and including, 1.3.8. This makes it possible for authenticated attackers, with Subscriber-level access...

CVE-2026-84448: Out-of-bounds Read

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heifregionitemaddregioninlinemaskdata function in libheif/api/libheif/heifregions.cc accepts maskdatalen without verifying that it equals the byte count required by width and height. A later...

CVE-2026-53954

Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, Bugsink stores every set of custom tags supplied with an incoming event, allowing a caller with a valid project DSN to submit an unusually large tag set and force excessive tag-row writes. Because Bugsink uses a single-writer...

CVE-2026-53954

Bugsink , a self-hosted error tracking tool, is vulnerable to a temporary denial of service in versions prior to 2.2.2 . An attacker possessing a valid project DSN can submit an event with an unusually large number of custom tags, forcing excessive tag-row writes. Because Bugsink uses a single-wr...

EUVD-2026-78891

Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, Bugsink stores every set of custom tags supplied with an incoming event, allowing a caller with a valid project DSN to submit an unusually large tag set and force excessive tag-row writes. Because Bugsink uses a single-writer...

CVE-2026-53954 Bugsink: DOS using large numbers of event tags

Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, Bugsink stores every set of custom tags supplied with an incoming event, allowing a caller with a valid project DSN to submit an unusually large tag set and force excessive tag-row writes. Because Bugsink uses a single-writer...

CVE-2026-53954 Bugsink: DOS using large numbers of event tags

Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, Bugsink stores every set of custom tags supplied with an incoming event, allowing a caller with a valid project DSN to submit an unusually large tag set and force excessive tag-row writes. Because Bugsink uses a single-writer...

CVE-2026-53954 Bugsink: DOS using large numbers of event tags

Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, Bugsink stores every set of custom tags supplied with an incoming event, allowing a caller with a valid project DSN to submit an unusually large tag set and force excessive tag-row writes. Because Bugsink uses a single-writer...

PT-2026-92405

Ember's HTTP/2 connection serializes all outgoing frames through a single unbounded queue drained by one writer fiber writeLoop. When the write side stalls, any frames the connection keeps producing accumulate in that queue without limit. The peer can drive this cheaply because the connection emi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rcuscale: Move rcuscalewriter’s scheduletimeoutuninterruptible function to idle. The rcuscale.holdoff module parameter can be used to delay the start of rcuscalewriter’s kthread. However, the hung-task timeout will trigger when t...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nilfs2: Fixing the use-after-free bug of nswriter when remounting the filesystem. If a nilfs2 filesystem is downgraded to read-only due to metadata corruption on the disk, and it is remounted with read/write access, or if an...