CVE-2026-85644

A flaw was found in perl-XS-Parse-Keyword. This vulnerability allows an attacker to cause a Denial of Service DoS or potentially execute arbitrary code by supplying crafted input to an affected application. The issue occurs because the module improperly validates arguments for list-associative...

CVE-2022-20186_CTXZ

Эксплойт для CVE-2022-20186 Статья доступна здесь. Это ошибка в драйвере ядра Arm Mali, о которой я сообщил в январе 2022 года. Уязвимость может использоваться для получения произвольного выполнения кода в ядре из недоверенного домена приложений, что затем позволяет отключить SELinux и получить...

CVE-2023-44760_ConcreteCMS-Stored-XSS---TrackingCodes

ConcreteCMS Stored XSS v.9.2.1 작성자: Sergio 설명: ConcreteCMS v.9.2.1의 다중 사이트 간 스크립팅 취약점으로 인해 로컬 공격자가 SEO & Statistics의 Header 및 Footer Tracking Codes에 조작된 스크립트를 통해 임의 코드를 실행할 수 있습니다. 공격 벡터: "SEO & Statistics"의 Header 및 Footer Tracking Codes 항목 삭제새니타이제이션의 취약점으로 인해 사용자가 웹 페이지에 접속할 때 실행되는 JavaScript 코...

CVE-2026-97504

A flaw was found in the Linux kernel's Lenovo SE10 watchdog driver. Improper error handling during device initialization fails to clear a platform device pointer if registration fails, resulting in a use-after-free condition. A local user could exploit this vulnerability to cause a Denial of...

CVE-2026-93826

A flaw was found in the Linux kernel's Logitech HID++ driver. When input device registration fails during a device connection event, the driver releases the device memory but retains a stale pointer to it. An attacker could exploit this flaw to cause a use-after-free vulnerability, where the kern...

CVE-2021-40870

Эксплуатация CVE-2021-40870 В Aviatrix Controller 6.x до версии 6.5-1804.1922 обнаружена уязвимость, связанная с неограниченной загрузкой файла опасного типа, что позволяет неаутентифицированному пользователю выполнять произвольный код через обход пути. Необходимые модули для установки Для запуск...

PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules

An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover...

CVE-2026-93348

A flaw was found in Unsloth Zoo, which can lead to arbitrary code execution when loading a machine learning model. The vulnerability exists due to improper input sanitization of the model type parameter within configuration files during compilation. An attacker can exploit this issue by supplying...

Reproduce-CVE-2024-21513

CVE-2024-21513 재현 개요 이 프로젝트는 langchain-experimental 패키지, 특히 버전 =0.0.15 및 0.0.21에서 CVE-2024-21513 취약점을 시연합니다. 이 취약점은 데이터베이스에서 값을 검색할 때 VectorSQLDatabaseChain 구성 요소를 통해 임의 코드 실행을 허용하며, 이는 검색된 모든 값에 대해 eval을 사용하기 때문입니다. 취약점 재현 워크플로우 이 애플리케이션을 사용하면 영화ID, 제목, 감독, 연도, 평점에 대한 정보가 있는 SQL 데이터베이스와 대화할 수...

CVE-2026-96538

WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pgfilewritetext,text,bool, pgfilerenametext,text,text, pgfileunlinktext, and pglogdirls. These functions are executable by any authenticated database role...

CVE-2026-96538

WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pgfilewritetext,text,bool, pgfilerenametext,text,text, pgfileunlinktext, and pglogdirls. These functions are executable by any authenticated database role...

USN-8838-1: catdoc vulnerabilities

It was discovered that catdoc had an integer overflow when processing shared string tables in malformed spreadsheet files. An attacker could possibly use this issue to cause catdoc to crash or execute arbitrary code. CVE-2024-48877 It was discovered that catdoc had an integer overflow when...

USN-8838-1 catdoc vulnerabilities

It was discovered that catdoc had an integer overflow when processing shared string tables in malformed spreadsheet files. An attacker could possibly use this issue to cause catdoc to crash or execute arbitrary code. CVE-2024-48877 It was discovered that catdoc had an integer overflow when...

CVE-2026-96538 WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalation

WarehousePG WHPG 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability CWE-862 in the built-in server-side file functions pgfilewritetext,text,bool, pgfilerenametext,text,text, pgfileunlinktext, and pglogdirls. These functions are executable by any authenticated database role...

2017-11882_Generator

CVE-2017-11882 Уязвимость удаленного выполнения кода существует в программном обеспечении Microsoft Office, когда оно неправильно обрабатывает объекты в памяти. Злоумышленник, успешно воспользовавшийся этой уязвимостью, может выполнить произвольный код в контексте текущего пользователя...

CVE-2021-41078

CVE-2021-41078 nameko の YAML デシリアライゼーションによる任意コード実行 NVD の説明 Nameko 2.13.0 以前では、設定ファイルをデシリアライズする際に任意のコード実行が可能になる恐れがあります。 デモ セットアップ 1. Dockerfile からイメージをビルドする docker build -t cve-2021-41078 . 2. 新しいコンテナで python main.py を実行する docker run -it --rm cve-2021-41078 出力 /etc/passwd...

MSC-EvilTwin-Local-Privilege-Escalation

CVE-2025-26633 - Microsoft Management Console .msc EvilTwin 로컬 권한 상승 PoC 공개 시점의 제로데이 2025년 3월 – Water Gamayun APT에 의해 실제 환경에서 활발히 악용됨 공인된 보안 테스트 및 연구용으로만 사용 취약점 세부 정보 익스플로잇 제목 : Microsoft Management Console MMC - MSC EvilTwin 로컬 권한 상승 / 임의 코드 실행 CVE : CVE-2025-26633 CVSS v3.1 : 7.8 높음 –...

SpringBreakVulnerableApp

Spring Break 취약 애플리케이션 Spring Break 취약점CVE-2017-8046에 대한 익스플로잇을 테스트하기 위한 취약 애플리케이션입니다. 경고! 이 애플리케이션에는 심각한 보안 취약점이 포함되어 있습니다. 실행 시 본인 책임입니다! 백업된 격리 환경예: 최신 스냅샷과 호스트 전용 네트워킹을 갖춘 VM에서 사용하는 것이 권장됩니다. 이 애플리케이션을 인터넷에 노출된 서버에 업로드하지 마십시오. 반드시 침해될 것입니다. 면책 조항 : 본 애플리케이션SpringBreakVulnerableApp을 사용하는 방식에 대...

USN-8828-1 dracut vulnerabilities

It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. CVE-2016-8637 It was discovered that dracut did not...

USN-8828-1: dracut vulnerabilities

It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. CVE-2016-8637 It was discovered that dracut did not...