CVE-2026-93970

aiyiyi121 SxDevOps (versions 1.0/1.1) contains a hard-coded credentials vulnerability in the file backend/sxdevops/settings.py within the Settings Handler component. The flaw is exploitable remotely over the network with no required privileges or user interaction, rated CVSS 3.1: 7.3 (HIGH) with ...

CVE-2026-93970 aiyiyi121 SxDevOps Settings settings.py hard-coded credentials

A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the component Settings Handler. The manipulation results in hard-coded credentials. The attack may be performed from remote. The patch is...

EUVD-2026-83706

A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the component Settings Handler. The manipulation results in hard-coded credentials. The attack may be performed from remote. The patch is...

EUVD-2026-83705

A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensuredefaultsuperuser of the file rbac/services.py. The manipulation leads to hard-coded credentials. The attack is possible to be carried out remotely. The identifier of the patch is...

CVE-2026-93969 aiyiyi121 SxDevOps services.py ensure_default_superuser hard-coded credentials

A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensuredefaultsuperuser of the file rbac/services.py. The manipulation leads to hard-coded credentials. The attack is possible to be carried out remotely. The identifier of the patch is...

CVE-2026-93968

aiyiyi121 SxDevOps versions 1.0 and 1.1 are affected by an improper privilege management vulnerability in the update function of the UserSerializer component (file backend/rbac/serializers.py). A remote attacker with high privileges can manipulate the update function to alter user privileges, res...

CVE-2026-93968 aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management

A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/serializers.py of the component UserSerializer. Executing a manipulation can lead to improper privilege management. The attack can be executed remotely. This patch is called...

CVE-2026-93968 aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management

A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/serializers.py of the component UserSerializer. Executing a manipulation can lead to improper privilege management. The attack can be executed remotely. This patch is called...

Full-Attack-Lifecycle-Simulation-on-Metasploitable

このリポジトリには README がありません。...

Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462

⚠️ CVE‑2025‑32463 および CVE‑2025‑32462 – Linux における Sudo 権限昇格の脆弱性 🧠 TL;DR 2025年7月、sudo ユーティリティにおいて新たに公開された2つの脆弱性 CVE-2025-32463 および CVE-2025-32462 が、多数の Linux ディストリビューションを危険にさらしています。より深刻な CVE‑2025‑32463 は CVSS スコア 9.3 を記録し、ローカル権限昇格 とシステム全体の完全な侵害を可能にします。現在、実際の悪用が発生しています。直ちに パッチを適用してください。 🔍 Sudo とは？...

EUVD-2026-83659

A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the function paramiko.SSHClient.execcommand of the file backend/ops/hosttasks.py of the component TASKRUNCOMMAND. Such manipulation of the argument command leads to command injection. The attack may be...

CVE-2026-93966 aiyiyi121 SxDevOps TASK_RUN_COMMAND host_tasks.py paramiko.SSHClient.exec_command command injection

A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the function paramiko.SSHClient.execcommand of the file backend/ops/hosttasks.py of the component TASKRUNCOMMAND. Such manipulation of the argument command leads to command injection. The attack may be...

CVE-2024-21689

CVE-2024–21689 RCE Bamboo Data Center and Server Atlassian CVSSスコア - 7.6 🔥 説明 この高重大度のRCE（リモートコード実行）脆弱性CVE-2024-21689 は、バージョン9.1.0、9.2.0、9.3.0、9.4.0、9.5.0、および9.6.0のBamboo Data Center and Serverで導入されました。このRCE（リモートコード実行）脆弱性は、CVSSスコア7.6で、認証された攻撃者が任意のコードを実行することを可能にし、機密性、完全性、可用性に対する高い影響があり、ユーザーの操作が必要です...

CVE-2026-93965 aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection

A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops/services.py of the component MCP STDIO Server Management. This manipulation of the argument endpointorcommand causes command injection. The attack may be initiated remotely...

CVE-2026-93965 aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection

A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops/services.py of the component MCP STDIO Server Management. This manipulation of the argument endpointorcommand causes command injection. The attack may be initiated remotely...

CVE-2021-31761

..| CVE-2021-31761 |.. 説明 : リフレクト型クロスサイトスクリプティング（XSS）攻撃を悪用して、Webminの実行中プロセス機能を介してリモートコマンド実行（RCE）を取得する テスト済みバージョン : Webmin 1.973 GitHubの最新版 07/03/2021 攻撃タイプ: リモート 影響 : リモートコマンド実行 エクスプロイトのコード PoC : YouTube PoC : https://youtu.be/23VvUMu-28c 製品のベンダー :...

CVE-2024-26574

CVE-2024-26574 Wondershare Filmora v.13.0.51 - 안전하지 않은 권한으로 인한 권한 상승 설명: Wondershare Filmora 및 하위 버전의 안전하지 않은 권한 취약점으로 인해 로컬의 권한이 없는 공격자가 제어 가능한 경로 C:\Users%username%\AppData\Local\Wondershare\Wondershare NativePush에 조작된 스크립트를 통해 SYSTEM으로 임의 코드를 실행할 수 있습니다. 영향받는 구성 요소 경로 권한:...

CVE-2023-0386-OverlayFS

CVE-2023-0386 - OverlayFS / FUSE オリジナルの CVE ソースは xkaneiki によるもの: https://github.com/xkaneiki/CVE-2023-0386/tree/main エクスプロイトを1つのシェルで実行できるように書き直しました（元のエクスプロイトは2つのシェルが必要です）。 root@kitploit: Compile make all Create mount point for fuse filesystem mkdir -p /tmp/fusepwn/lower Start fuse which serves a...

DEBIAN-CVE-2026-93962

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shmmalloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch th...

CVE-2026-93961

A security flaw has been discovered in Dromara UJCMS up to 12.3.1. The affected element is the function usernameExist of the file ujcms-cms/src/main/java/com/ujcms/cms/core/web/api/UserController.java of the component UserController. Performing a manipulation of the argument Username results in...