Atom CMS v2.0 - Remote Code Execution

Atom CMS v2.0 was discovered to contain a remote code execution RCE vulnerability via /admin/uploads.php. id: CVE-2022-25487 info: name: Atom CMS v2.0 - Remote Code Execution author: theamanrawat severity: critical description: | Atom CMS v2.0 was discovered to contain a remote code execution RCE...

Atom CMS v2.0 - Cross-Site Scripting

Atom CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the "A" parameter in /widgets/debug.php. id: CVE-2022-25489 info: name: Atom CMS v2.0 - Cross-Site Scripting author: theamanrawat severity: medium description: | Atom CMS v2.0 was discovered to contain ...

Atom CMS v2.0 - SQL Injection

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php. id: CVE-2022-24223 info: name: Atom CMS v2.0 - SQL Injection author: theamanrawat severity: critical description: | AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

CVE-2026-66071

A flaw was found in rabbitmq-server where its OAuth2 authentication backend improperly converts token scope values into Erlang runtime atoms. In deployments where an Identity Provider IdP allows users to influence scope contents within their signed JSON Web Tokens JWTs, an authenticated attacker...

RabbitMQ 4.2.x < 4.2.9 / 4.3.x < 4.3.3 Atom Exhaustion via Shovel Management Endpoint

The version of RabbitMQ installed on the remote host is 4.2.x prior to 4.2.9, or 4.3.x prior to 4.3.3. It is, therefore, affected by a denial of service vulnerability: - The Shovel parameter parser converts attacker-controlled runtime parameter values such as the src-protocol, dest-protocol, and...

RabbitMQ 4.0.x < 4.0.22 / 4.1.x < 4.1.14 / 4.2.x < 4.2.7 / 4.3.x < 4.3.1 Atom Exhaustion via Global Parameter Name

The version of RabbitMQ installed on the remote host is 4.0.x prior to 4.0.22, or 4.1.x prior to 4.1.14, or 4.2.x prior to 4.2.7, or 4.3.x prior to 4.3.1. It is, therefore, affected by a denial of service vulnerability: - resourceexists/2, and the PUT and DELETE handlers, call...

Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated-POC

Atom-CMS-2.0---ファイルアップロード-リモートコード実行-認証なし- リモートコード実行 RCE エクスプロイト作者: Ashish Koli Shikari ベンダーホームページ: https://thedigitalcraft.com/ ソフトウェアリンク: https://github.com/thedigicraft/Atom.CMS バージョン: 2.0 CVE: CVE-2022-25487 これについて: このスクリプトは、Atom CMS に webshell.php をアップロードします。アプリケーションはそのファイルを保存します。 一意の番号を持つ...

BIT-RABBITMQ-2026-67415 RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, the Shovel parameter parser converted attacker-controlled runtime parameter values into non-garbage-collected Erlang atoms before bounding them or checking a fixed allowlist. Exploitation requires network access to th...

BIT-RABBITMQ-2026-67238 RabbitMQ: Atom-table exhaustion via reply-to queue name decoding

RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, rabbitpidcodec:decomposefrombinary/1 parses a caller-supplied ETF-encoded binary and calls binarytoatomNode, utf8 on the node-name field. It is reached from rabbitvolatilequeue:pidfromname/2, which is invoked for any...

BIT-RABBITMQ-2026-67227 RabbitMQ: Atom exhaustion: to_atom on global-parameter :name

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7 and 4.3.1, Atom exhaustion: toatom on global-parameter :name. resourceexists/2 and the PUT/DELETE handlers call rabbitdatacoercion:toatom/1 on the :name URL path segment. toatom/1 uses binarytoatom/2 unsafe...

BIT-RABBITMQ-2026-67220 RabbitMQ: JMS topic exchange erl_scan atom exhaustion

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, 4.3.0, When a binding is created on an x-jms-topic exchange, addbinding/3 reads the rjmserlangselector argument and passes it through erlscan:string/1 then erlparse:parseterm/1. erlscan:string/1 intern...

BIT-RABBITMQ-2026-66072 RabbitMQ: Atom table exhaustion via stream `chunk_selector`

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, getchunkselector/1 calls binarytoatom on the raw client-supplied property from post-auth subscribe and resolveoffsetspec frames, with no whitelist and no existing guard. An authenticated...

BIT-RABBITMQ-2026-66071 RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.22 and 4.1.11 and 4.2.6 and 4.3.1, Atom exhaustion: OAuth2 JWT tag: scope values. extractscopes/1 parses scopes of the form .tag: and calls rabbitdatacoercion:toatom to convert to a tag atom. The token signature is...

SUSE CVE-2026-66073

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make -...

google_gax

googlegax 패치됨 Tesla = 1.18.3과의 호환성을 위한 googlegax v0.4.1의 패치된 포크입니다. 이 포크가 존재하는 이유 Tesla 1.18.32026년 6월 2일은 CVE-2026-48598에 대한 보안 수정의 일환으로 assertquotedstringsafe!/2를 통해 멀티파트 필드 이름에 대한 엄격한 검증을 도입했습니다. 업스트림 googlegax마지막 릴리스: 2021, 유지보수 중단됨는 원자:metadata, :data를 멀티파트 필드 이름으로 전달하며, 이제 Tesla는 이를...

Stagefright-cve-2015-1538-1

Stagefright-cve-2015-1538-1 ZIMPERIUM zLabs의 Joshua J. Drake@jduck가 발견했으며, Niranjan Shrestha@niranjanshr13가 그의 프로젝트를 수정했습니다. RCE 취약점 CVE-2015-1538 1용 익스플로잇 libstagefright MP4 'stsc' atom 처리의 정수 오버플로 'createmp4'의 출력물은 다양한 방식으로 전달될 수 있다는 점을 잊지 마세요! MMS가 가장 위험한 공격 벡터이지만, 유일한 방법은 아닙니다... 면책 조항: 이...

MicrocodeDecryptor

免責事項 すべての情報は教育目的でのみ提供されています。これらの手順は自己責任で実行してください。著者およびその雇用主は、このページに含まれる情報に基づいて行動または不作為を行った個人や組織から生じる直接的または結果的な損害または損失について一切責任を負いません。 説明 2020年の初めに、私たちは Intel Atom Microcode を抽出できる Red Unlock 技術を発見しました。マイクロコードの内部構造と x86...

CVE-2026-67415

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, the Shovel parameter parser converted attacker-controlled runtime parameter values into non-garbage-collected Erlang atoms before bounding them or checking a fixed allowlist. Exploitation requires network access to th...

DEBIAN-CVE-2026-67227

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7 and 4.3.1, Atom exhaustion: toatom on global-parameter :name. resourceexists/2 and the PUT/DELETE handlers call rabbitdatacoercion:toatom/1 on the :name URL path segment. toatom/1 uses binarytoatom/2 unsafe...

CVE-2026-67226

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7, Admin-only atom exhaustion: PUT /api/users tags list. settags/2 maps rabbitdatacoercion:toatom/1 over the user's tags list. The 20 MB management body limit fits 3-4M short tag strings. An administrator can...