CVE-2026-76737

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of...

CVE-2026-76724

A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform command injection by sending specially crafted packets. Successful exploitation could allow an attacker to execute arbitrary commands as a...

CVE-2026-76727

Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

CVE-2026-100292

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated request, allowing additional commands to be sent to a backend service. Once active, this pathway can unintentionally expose system‑level functionality that could be misused if...

cplt

cplt AI 코딩 에이전트를 위한 커널 강제 샌드박스. cplt는 GitHub Copilot CLI, OpenCode, Gemini CLI, Antigravity CLI, Pi, Claude Code, goose, DeepSeek Harness 또는 모든 셸을 감싸서, 에이전트가 코드를 작성할 수는 있지만 자격 증명을 탈취하거나, main에 푸시하거나, PR을 병합하거나, 비밀을 유출할 수 없도록 합니다. macOS : sandbox-exec를 통한 Apple Seatbelt/SBPL Linux : Landlock LSM +...

nginx-cve-fix

Nginx CVE Fix - Source-Built Drop-in for nginx:1.25-bookworm A source-built nginx 1.25.5 container image that remediates two CVEs present in the official nginx:1.25-bookworm image while preserving upstream runtime behavior. CVE| Component| Severity| Technique| Verification model ---|---|---|---|-...

vBulletin-CVE-2025-48828-Multi-target

💥 vBulletin 원격 코드 실행 스캐너 replaceAdTemplate 이 Python 도구는 replaceAdTemplate 익스플로잇 경로를 통해 vBulletin 에서 인증되지 않은 RCE 취약점 탐지를 자동화합니다. EgiX 의 원본 개념 증명을 기반으로 한 이 버전은 배치 스캔 , 멀티스레딩 을 지원하며, 확인된 취약 대상의 로그를 vuln.txt에 기록합니다. 🔥 취약점 세부 정보 익스플로잇 이름 : replaceAdTemplate RCE CVE : CVE-2025-48828 영향을 받는 버전 :...

CVE-2026-15315

cve-id 寄付 このプロジェクトの維持を支援する このプロジェクトが役立つと思われた方は、PayPal または ABA Mobile を通じて、継続的な維持管理へのご支援をご検討ください。 ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ ご寄付の10%は、Kantha Bopha Children's Hospital に寄付されます。 | 支払い方法を選択 ABA Mobile でスキャン · クリックで拡大 ---|--- ⚡ 簡単な使い方 GitHub...

CVE-2015-3224

Ruby on Rails Web Console Exploit CVE-2015-3224 This repository contains a Python script to exploit an IP whitelist bypass vulnerability in the developer web console of Ruby on Rails 4.0.x and 4.1.x. The script allows for remote code execution on vulnerable servers. ⚠️ Disclaimer This script is...

CVE-2023-49367

CVE-2023-49367 - Раскрытие чувствительных данных Раскрытие чувствительных данных в веб-панели принтера Kyocera Производитель: Kyocera Corporation Затронутые версии: Command Center RX - EXOSYS M5521cdn Описание После подключения к интерфейсу адресной книги Kyocera в отправленных пакетах можно...

Security Bulletin: IBM Maximo Application Suite - Location Service for Esri Component is vulnerable to CVE-2026-18513, CVE-2026-18537, CVE-2026-18529, CVE-2026-18533, CVE-2026-18517 and CVE-2026-88029

Summary IBM Maximo Application Suite - Location Service for Esri Component is vulnerable to CVE-2026-18513, CVE-2026-18537, CVE-2026-18529, CVE-2026-18533, CVE-2026-18517 and CVE-2026-88029 because of CR author can redirect arcgis-admin RoleBinding to own ServiceAccount, CR author can override...

CVE-2016-4117-Report

CVE-2016-4117 취약점 보고서 CVE-2016-4117 CVSS 점수 및 취약점 유형 유형| 값 ---|--- CVSS 점수| 10.0 기밀성 영향| 완전 모든 시스템 파일이 노출되는 전체 정보 공개가 발생합니다. 무결성 영향| 완전 시스템 무결성이 완전히 손상됩니다. 시스템 보호가 완전히 상실되어 전체 시스템이 손상됩니다. 가용성 영향| 완전 영향을 받는 리소스가 완전히 종료됩니다. 공격자가 리소스를 완전히 사용할 수 없게 만들 수 있습니다. 접근 복잡성| 낮음 특수한 접근 조건이나 완화 사유가 존재하지 않습니다...

sqlwinds

SQLWinds SQL 보안 평가 및 사후 침투 도구 키트 SQLWinds는 Microsoft SQL Server의 보안 테스트와 익스플로잇을 위한 명령줄 도구입니다. 서버를 심층 분석하고, 권한을 상승시키고, 공격을 실행하고, 네트워크를 통해 피벗할 수 있는 대화형 환경을 제공하며, 인메모리 코드 실행 및 SCCM 데이터베이스 탐색과 같은 작업을 위한 특화된 명령을 포함합니다. 📖 문서 및 리소스 빠른 링크: 전체 문서 및 위키 - 전체 사용 가이드 및 명령 참조 이슈 신고 - 버그를 발견했거나 기능 요청이 있으신가요? 최신...

CVE-2026-100292 Improper neutralization of special elements used in an OS command ('OS command injection') in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated request, allowing additional commands to be sent to a backend service. Once active, this pathway can unintentionally expose system‑level functionality that could be misused if...

EUVD-2026-89367

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated request, allowing additional commands to be sent to a backend service. Once active, this pathway can unintentionally expose system‑level functionality that could be misused if...

CVE-2026-100292 Improper neutralization of special elements used in an OS command ('OS command injection') in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated request, allowing additional commands to be sent to a backend service. Once active, this pathway can unintentionally expose system‑level functionality that could be misused if...

CVE-2026-100292

In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 , an authenticated request can enable a hidden debug interface . This interface allows additional commands to be sent to a backend service, potentially exposing system-level functionality . If crafted inputs reach the underlying command handler, ...

EUVD-2026-89356

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of...

CVE-2026-76737 Authenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant On

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of...

CVE-2026-76737 Authenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant On

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of...