amradio

AM Radio Break-in System 無人トンネルでの緊急警報送信のための、Red Pitaya FPGAを使用した12チャンネルAM無線放送システム。 なぜトンネル内でAM無線なのか？...

CVE-2026-86320

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

CVE-2026-86320

CVE-2026-86320 affects flatpak-builder , a build tool for creating Flatpak applications. When applying patch sources with use-git-am: true, Git hooks are not disabled, allowing an attacker who supplies a malicious source containing a post-applypatch hook to execute arbitrary code on the host duri...

EUVD-2026-81387

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

CVE-2026-86320

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

CVE-2026-86320 Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

CVE-2026-86320

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

CVE-2016-5639

CVE-2016-5639 크레스트론 AirMedia AM-100 경로 탐색 및 해시 덤프 Metasploit 모듈 이 두 모듈은 CVE-2016-5639를 이용하여 해시를 덤프하고 경로 탐색을 통해 파일을 검색합니다. 이 모듈을 분리한 이유는 해시를 '덤프'하고, 크래킹을 위해 올바르게 포맷팅하며, 전리품에 추가하는 경험을 쌓고 싶었기 때문입니다. 제안은 언제든지 환영합니다. 취약점의 최초 발견 및 보고에 대한 모든 공로는 Cylance에게 있다고 생각합니다:...

CVE-2019-3929

CVE-2019-3929 Crestron/Barco/Extron/InFocus/TeqAV 원격 명령 삽입 CVE-2019-3929 Metasploit 모듈 Tenable의 설명에 따르면: 인증되지 않은 원격 공격자는 HTTP 엔드포인트 filetransfer.cgi에 조작된 요청을 전송하여 루트 권한으로 운영 체제 명령을 실행할 수 있습니다. 이 취약점은 알려진 모든 장치에 영향을 미치는 것으로 보입니다. 여기에는 Crestron AM-100 펌웨어 1.6.0.2, Crestron AM-101 펌웨어 2.7.0.1, Barco...

CVE-2016-5640

CVE-2016-5640 Crestron AirMedia AM-100 RCE CVE-2016-5640 Metasploit 모듈 펌웨어 버전 1.4.0.13의 Crestron AirMedia AM-100 기기의 무선 진단 페이지에서 원격 명령 주입 취약점을 악용하는 모듈입니다. 명령은 서비스를 실행하는 계정일반적으로 root으로 실행됩니다. 제가 체크 작성과 cmdstager 사용 경험을 쌓기 위해 모듈을 작성한 오래된 익스플로잇입니다 . 취약점의 최초 공개 및 작성에 대한 모든 공로는 Cylance에게 있습니다, 아마도:...

CVE-2019-25465

Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listing in the cgi-bin directory. Attackers can request the getadslattr.cgi endpoint to retrieve ADSL credentials and netwo...

CVE-2025-1529

The AM LottiePlayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via uploaded lottie files in all versions up to, and including, 3.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...

CVE-2025-69006

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atte Moisio AM Events am-events allows Stored XSS.This issue affects AM Events: from n/a through = 1.13.1...

EUVD-2025-205737

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atte Moisio AM Events am-events allows Stored XSS.This issue affects AM Events: from n/a through = 1.13.1...

CVE-2025-69006

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atte Moisio AM Events am-events allows Stored XSS.This issue affects AM Events: from n/a through = 1.13.1...

CVE-2025-69006

Technical details about CVE-2025-69006 are not provided in the supplied documents; no vendor, product version, impact, or remediation specifics are included beyond the basic description.

CVE-2025-69006 WordPress AM Events plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atte Moisio AM Events am-events allows Stored XSS.This issue affects AM Events: from n/a through = 1.13.1...

CVE-2025-69006 WordPress AM Events plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atte Moisio AM Events am-events allows Stored XSS.This issue affects AM Events: from n/a through = 1.13.1...

PT-2025-53888

Name of the Vulnerable Software and Affected Versions Atte Moisio AM Events versions through 1.13.1 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can ...

WordPress plugin AM Events 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...