CVE-2023-24055_PoC

CVE-2023-24055 PoC KeePass 2.5x 논의 및 분석 중... https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/ https://sourceforge.net/p/keepass/feature-requests/2773/ KeePass 설정 파일에 쓰기 권한이 있는 공격자는 해당 파일을 수정하고 악성 트리거를 주입하여, 예를 들어 내보내기 트리거를 추가함으로써 평문 비밀번호를 획득할 수 있습니다...

CVE-2026-3227-TP-Link-authenticated-RCE

CVE-2026-3227: TP-Link 라우터 OS 명령 삽입 자세한 정보는 https://vulners.com/cve/CVE-2026-3227 를 참조하세요. 영구적이며 인증된 OS 명령 삽입 취약점으로, TP-Link 라우터 펌웨어에서 기기를 벽돌로 만들거나 LAN 장악이 가능합니다. 면책 조항 : 이 저장소는 패치된 취약점에 대한 개념 증명PoC 코드를 포함하고 있습니다. 교육 목적 및 보안 연구자들을 위해 제공됩니다. 요약 여러 TP-Link 라우터TL-WR802N, TL-WR841N, TL-WR840N 포함의 구성...

geoserver-

geoserver CVE-2024-36401 エクスプロイトツール geoserver CVE-2024-36401 環境: JDK8 宣言: 許可されたテストにのみ使用し、ユーザーによる悪用の結果はすべて作者の責任ではありません。法律と規制を遵守してください！ 1, デフォルトペイロード: POST /geoserver/wfs HTTP/1.1 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/124.0.6367.118...

Adobe Experience Manager ≤ 6.5.23.0 - XML Injection

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. id: CVE-2025-54251 info: name: Adobe Experience Manager ≤ 6.5.23.0 - XML Injection author: DhiyaneshDK,assetnote severity: medium description: |...

CVE-2026-89247

WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier contains an XML injection vulnerability in plugin/ADServer/VMAP.php, which is reachable without authentication when the ADServer plugin is enabled. The script emits Content-Type: application/xml and writes the timeOffset a...

CVE-2026-89247

WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier contains an XML injection in plugin/AD_Server/VMAP.php, reachable without authentication when the AD_Server plugin is enabled. The timeOffset and idTag values from the base64- and JSON-decoded $_REQUEST['vmaps'] parameter ...

EUVD-2026-76059

WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier contains an XML injection vulnerability in plugin/ADServer/VMAP.php, which is reachable without authentication when the ADServer plugin is enabled. The script emits Content-Type: application/xml and writes the timeOffset a...

NodeBB XML-RPC Request xmlrpc.php - XML Injection

A remote code execution RCE vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitrary code via crafted XML-RPC requests. id: CVE-2023-43187 info: name: NodeBB XML-RPC Request xmlrpc.php - XML Injection author: 0xParth...

CVE-2026-2310 IBM webMethods Integration Server is vulnerable to an XML external entity injection (XXE) attack when processing XML data

IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

Zimbra Collaboration Suite - SSRF

Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component. id: CVE-2019-9621 info: name: Zimbra Collaboration Suite - SSRF author: riteshs4hu severity: high description: |...

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat CVE-2025-59287 是 Windows Server Update Services WSUS 中的一个严重 RCE 漏洞，由对不可信数据进行不安全反序列化所致。它允许远程攻击者在无需身份验证的情况下执行任意代码。由于已被积极利用，建议立即进行修补。 CVE‑2025‑59287 – Windows Server Update Services WSUS 中的远程代码执行威胁 作者：Mark Mallia 概述 Microsoft 的...

POC-CVE-2025-66034

fontvarlib.py — CVE-2025-66034 fontTools varLib — 임의 파일 쓰기 + XML 인젝션 → 원격 코드 실행 목차 개요 취약점 세부 정보 공격 체인 요구 사항 설치 구성 사용법 작동 원리 취약한 코드 사전 공격 체크리스트 테스트 환경 면책 조항 참고 자료 개요 CVE-2025-66034 은 fontTools.varLib 가변 글꼴 생성 파이프라인의 취약점입니다. 웹 애플리케이션이 이 파이프라인을 노출하고 사용자가 제공한 .designspace 파일을 허용하면, 두 가지 약점이 연쇄적으로 작용하...

CVE-2026-34197

CVE-2026-34197 Jolokia API を介した Apache ActiveMQ のリモートコード実行...

xmldom: Processing Instruction Target Injection Bypasses requireWellFormed

Summary Document.createProcessingInstruction in @xmldom/xmldom performs no validation on the target parameter. The requireWellFormed: true serializer option validates only for : in the target and a case-insensitive xml prefix, but does not check for characters. A in the target breaks the processi...

EUVD-2026-69239

xmldom: Processing Instruction Target Injection Bypasses requireWellFormed...

xmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminator

Summary An embedded line terminator bypasses the requireWellFormed serializer check for element and attribute names. The check was added to fix GHSA-w2rr-34g9-rvrj and GHSA-4w3w-2rp5-g8jm; a name whose first line is well-formed slips past it and is serialized verbatim, so the characters after the...

xmldom: Creation-time XML Name/QName validation is bypassable via an embedded line terminator, allowing injection on the default serialization path

Summary An embedded line terminator bypasses xmldom's always-on, WHATWG-mandated creation-time name validation. createElementNS, createAttributeNS, createDocumentType, and createAttribute should reject a malformed qualified name with InvalidCharacterError, but a name whose first line is well-form...

EUVD-2026-69217

xmldom: Element name injection via createElement bypasses requireWellFormed...

CVE-2026-46490-samlify-SAML-Attribute-Injection

CVE-2026-46490 — samlify SAML AttributeValue XML 삽입 → 권한 상승 samlify Value에 배치되면 이스케이프되지 않은 상태로 삽입되므로, 일반 사용자가 추가 요소 예: role=admin를 자신의 IdP 서명된 SAML 어설션에 주입할 수 있습니다. 서명 전에 삽입이 발생하므로 서비스 제공자의 서명 확인이 통과되고 위조된 속성을 신뢰합니다. | ---|--- CVE| CVE-2026-46490 권고| GHSA-34r5-q4jw-r36m 영향| samlify rawXML =...

CVE-2026-34197

CVE-2026-34197 설명 Apache ActiveMQ Broker, Apache ActiveMQ에서 부적절한 입력 검증, 코드 생성 제어 부적절‘코드 인젝션’ 취약점입니다. Apache ActiveMQ Classic은 웹 콘솔의 /api/jolokia/에서 Jolokia JMX-HTTP 브리지를 노출합니다. 기본 Jolokia 액세스 정책은 BrokerService.addNetworkConnectorString 및 BrokerService.addConnectorString를 포함한 모든 ActiveMQ...