vault v2.1.0

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

CVE-2019-19781-CitrixRCE

Citrix 무단 원격 코드 실행 공격자 - CVE-2019-19781 참조: https://blog.fox-it.com/2020/07/01/a-second-look-at-cve-2019-19781-citrix-netscaler-adc/ 우회 방법: 1 - 삭제/수정된 스크립트 위치: /vpn/../vpns/portal/scripts/ 2 - perl 명령 주입 템플릿 주입 공격 후 슬래시"/" 문제...

CVE-2021-40903

익스플로잇 제목: Antminer Monitor 0.5.0 - 인증 우회 CVE: CVE-2021-40903 날짜: 2021-06-09 Dork:https://www.zoomeye.org/searchResult?q=%22antminer%20monitor%22 익스플로잇 작성자: CQR.company / Vulnz. 공급업체 홈페이지: https://github.com/anselal/antminer-monitor, https://twitter.com/intent/follow?screenname=AntminerMonitor 소프트...

cve-2015-3456

CVE-2015-3456 관련 실험 다음이 있습니다: exploit/는 "익스플로잇"입니다 단순히 QEMU를 크래시시킵니다. mock/에는 축소된 QEMU 버전이 포함되어 있습니다. 취약점만 남아 있습니다. patch/에는 실행 중인 QEMU 인스턴스를 패치하는 프로그램이 포함되어 있습니다. 핵심은 디버그 심볼이나 디스크 상의 원래 실행 파일이 필요 없다는 점입니다. 따라서 이 프로그램이 예상대로 작동하려면 일부 정보를 제공해야 합니다. 모든 라이브 패치의 주요 아이디어는 commandtohandler 배열을 수정하여 각 명령...

[slackware-security] pcre2

New pcre2 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/pcre2-10.48-i586-1.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...

CVE-2024-48427

CVE-2024-48427 Description A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in /mpms/admin/?page=services/manageservice&id Vulnerability Type SQL Injection Vendor of...

[SECURITY] Fedora 44 Update: openvkl-2.0.2-1.fc44

Intel Open Volume Kernel Library Open VKL is a collection of high-performan ce volume computation kernels, developed at Intel. The target users of Open VKL are graphics application engineers who want to improve the performance of the ir volume rendering applications by leveraging Open VKL=E2=80=9...

CVE-2026-84702

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...

SUSE CVE-2026-19032

jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, a string bound from untrusted JSON is passed to new URIvalue and then to Path.ofuri. When that throws...

Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities

Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The fix for CVE-2025-68161 https://logging.apache.org/security.htmlCVE-2025-68161 was incomplete: it addressed hostname verification only when enabled v...

SUSE CVE-2026-74605

In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-isfreed and then uses its ei-list to add it to the srcu link list as the list field is a union with the rcu list head. As...

SUSE CVE-2026-74609

In the Linux kernel, the following vulnerability has been resolved: tipc: read le-link under the node lock in tipcnodelinkdown tipcnodelinkdown caches the link pointer before taking n-lock: struct tipclink l = le-link; / unlocked / if !l return; tipcnodewritelockn; if !tipclinkisestablishingl /...

cve-2021-31630

cve-2021-31630 OpenPLC WebServer v3 - 인증된 RCE 이 PoC 스크립트는 Fellipe Oliveira가 제공한 익스플로잇을 기반으로 합니다. 기능 : st 파일 업로드 대신 /hardware에 C 코드를 직접 업로드합니다 리버스 셸 업로드 전에 기본 프로그램을 복원합니다 웹 서버가 멈추지 않도록 비차단non-blocking 방식으로 개선된 C 기반 리버스 셸 ; 셸을 백그라운드에서 실행하며, PLC가 중지된 후에도 종료할 때까지 작동합니다 정리cleanup root@kitploit: $ pyth...

CVE-2017-14105

Aerohive HiveManager Classic 권한 상승 취약점 이름 Aerohive HiveManager Classic 권한 상승 취약점 영향받는 시스템 HiveManager Classic 8.0r1 8.1r1 심각도 Medium 6.6/10 영향 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L/E:H/RC:C 공급업체 http://www.aerohive.com/ 권고 http://www.ush.it/team/ush/hack-aerohive/aerohive-priv-exec.txt 저자...

CVE-2023-4169_CVE-2023-3306_CVE-2023-4415

Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1. RG-EW1200G 백엔드 원격 코드 실행 취약점CVE-2023-3306 2. CVE-2023-4169 무단 임의 비밀번호 변경CVE-2023-4169 3. Ruijie RG-EW1200G 로그인 우회CVE-2023-4415 주의 저는 로컬 테스트 및 POC 개발을 위한 도구를 개발했으며, 기술 학습 참고용으로만 제공됩니다. 불법적인 목적으로 사용하지 마십시오. 본 문서에서 제공하는 정보를 사용하여 개인이나 조직이 초래...

CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...

EUVD-2026-69793

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...

CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...

CVE-2026-84702

facefusion through 3.6.1 is vulnerable to a path traversal flaw in the get_job_file_name function (located in facefusion/jobs/job_manager.py), which fails to normalize job identifiers. An attacker can supply traversal sequences in the job identifier parameter via the unauthenticated HTTP API to w...

CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...