CVE-2019-7609

CVE-2019-7609 Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer https://nvd.nist.gov/vuln/detail/CVE-2019-7609 CVE-2019-7609 위 취약점은 Kibana에서 발견된 Prototype Pollution 취약점입니다. 이 취약점을 악용하면 DoS나 RCE 공격으로 이어질 수 있습니다. 특징 Node에서 제공하고 있는 debugging...

CVE-2026-91096

A flaw was found in proxygen. The WebTransport implementation fails to unregister read callbacks for closed streams before destroying them. This issue results in a use-after-free condition, where the transport attempts to invoke memory that has already been released. A remote attacker can exploit...

EUVD-2026-88648

Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...

CVE-2026-86157 Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere

Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...

CVE-2026-97582

A flaw was found in the Linux kernel's GPIO fan driver. When a device is unbound, pending alarm work is not properly canceled before associated memory resources are freed, resulting in a use-after-free condition. A local attacker could exploit this race condition to cause a Denial of Service DoS...

CVE-2017-9779

Windows의 Path Users로부터 자동 실행 페이로드 :: Cmder란 무엇인가? Cmder는 Windows에서 멋진 콘솔 에뮬레이터가 없다는 순수한 좌절감에서 만들어진 소프트웨어 패키지입니다. 멋진 소프트웨어를 기반으로 하며, Monokai 색상 구성표와 사용자 정의 프롬프트 레이아웃으로 처음부터 섹시하게 보이도록 구성되었습니다. Cmder 사이트 프레임워크! http://cmder.net/ .bashrc란 무엇인가? 실행 파일입니다. 작성하는 모든 단어가 터미널에 직접 표시됩니다. 불행히도 모든 Linux 시스템에서...

CVE-2021-4034

CVE-2021- polkit의 pkexec 유틸리티에서 로컬 권한 상승 취약점이 발견되었습니다. pkexec 애플리케이션은 미리 정의된 정책에 따라 권한이 없는 사용자가 권한 있는 사용자로 명령을 실행할 수 있도록 설계된 setuid 도구입니다. 현재 버전의 pkexec는 호출 매개변수 개수를 올바르게 처리하지 않으며, 환경 변수를 명령어로 실행하려고 시도합니다. 공격자는 환경 변수를 조작하여 pkexec가 임의 코드를 실행하도록 유도함으로써 이를 악용할 수 있습니다. 성공적으로 실행되면 이 공격은 로컬 권한 상승을 유발하여...

CVE-2021-21300

CVE-2021-21300: 悪意のあるGitフックによる任意のコード実行 📌 概要 CVE-2021-21300は、Git（バージョン2.14.2から2.30.1）における重大な脆弱性であり、攻撃者がシンボリックリンクと大文字小文字を区別しないファイルシステムを悪用して、被害者のマシン上で任意のコードを実行することを可能にします。 🧠 問題の概要 脆弱性 : 悪意のあるGitフックを介した任意のコード実行。 根本原因 : 大文字小文字を区別しないファイルシステム（例: Windows/macOS）が A/post-checkout を .git/hooks/post-checkout...

CVE-2025-32432

CVE-2025-32432 Craft CMS 事前認証RCE PoC Craft CMS における重大な事前認証リモートコード実行 対象: Craft CMS 3.x、4.x、5.x（5.6.16 まで） 情報: このエクスプロイトは HackTheBox の Orion マシンに対してテストされています 概要 このリポジトリには、Craft CMS における重大な事前認証リモートコード実行脆弱性である CVE-2025-32432 の概念実証エクスプロイトが含まれています。この脆弱性により、認証されていない攻撃者が、Yii2 のビヘイビアアタッチメント機構と class...

CVE-2023-51802

CVE-2023-51802 Simple Student Attendance System v.1.0 - 出席レポートにおけるクロスサイトスクリプティング XSS の脆弱性 説明 : Simple Student Attendance System v.1.0 のクロスサイトスクリプティング脆弱性により、リモート攻撃者が attendancereport コンポーネント内の "page" または "classmonth" パラメータに細工したペイロードを介して任意のコードを実行できる可能性があります。 脆弱な製品バージョン : Simple Student Attendance...

CoD-MW-Warzone-2---CVE-2023-38821

CoD-MW-Warzone-2 - CVE-2023-38821 CoD MW Warzone 2 における DLL プランティング - CVE-2023-38821 発見者: Idan Malihi 説明 Activision Call of Duty Modern Warfare: Warzone v.2...

spd_flasher

CVE-2022-38694 強化版エクスプロイト — RP2350 USB Host 自動フラッシャー 中国語版 README チュートリアル UDX710 ブートチェーンリバースエンジニアリングと RP2350 堅牢化ブートチュートリアル CVE-2022-38694 Unisoc BootROM の脆弱性を Raspberry Pi RP2350 USB Host 経由で悪用し、起動時に SPL Loader を自動送信して任意の u-boot を起動します。 従来 PC と spddump を必要としたエクスプロイトチェーンを、RP2350...

CVE-2025-14174-Chrome-Zero-Day

影響を受けるソフトウェア: Google Chrome 121.0.6167.85 より前のバージョン。 脆弱性タイプ: V8 JavaScript エンジンにおける Use‑after‑free。 説明: V8 のガベージコレクションにおける use‑after‑free バグにより、細工された JavaScript がメモリを破壊し、ブラウザコンテキスト内での任意のコード実行につながる可能性があります。 悪意のあるコード例には、exploit.js（JavaScript PoC）と、CVE を識別するための HTB で使用可能なコード（HTML 埋め込み）が含まれています。...

CVE-2021-22204

CVE-2021-22204 CVE 요약 ExifTool 7.44 이상 버전의 DjVu 파일 형식에서 사용자 데이터에 대한 부적절한 위생 처리는 악성 이미지를 분석할 때 임의 코드 실행을 허용합니다. 영향받는 버전 버전 7.44 - 12.23 특이 사항 의존성: djvulibre-bin exiftool 다음 세 명령을 호출합니다: bzz, dvjumake, exiftool 참고 자료 Github POC - Gustavo Dutra, May 11 2021 사례 연구: CVE-2021-22204 Exiftool RCE - Gusta...

Amazon Linux 2023 : python3-rpm, rpm, rpm-apidocs (ALAS2023-2026-3125)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3125 advisory. A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote...

Oracle Linux 10 : ipa (ELSA-2026-72279)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72279 advisory. - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval reachable before authorization check allows environment disclosure and denial of...

Ubuntu 18.04 LTS / 24.04 LTS : dracut vulnerabilities (USN-8828-1)

The remote Ubuntu 18.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8828-1 advisory. It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could...

PT-2026-102740

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...

Ubuntu 24.04 LTS : libvirt vulnerabilities (USN-8831-1)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8831-1 advisory. It was discovered that libvirt had an integer overflow vulnerability in the NodeGetFreePages RPC handler. A local attacker could possibly use this issue ...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95277): chromium -- security fixes

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...