CVE-2026-101077 Netcore NR289-GE boa_temp process_request missing authentication

A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function processrequest of the component boatemp Handler. This manipulation causes missing authentication. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contact...

Dop2Mop

Dop2Mop BloodHound用の概念実証OpenGraphコレクター。DevOpsからMLOpsインフラストラクチャへの攻撃パスをマッピングします。 Pipelines of Privilege: Attack Paths from DevOps to MLOps Infrastructure（Brett Hawkins @h4wkst3r 著）に基づいています。 目次 謝辞 概要 対応プラットフォーム マッピングされた信頼境界 インストール オプションの依存関係 クイックスタート デモデータの生成 BloodHoundへの取り込み 設定 設定ファイル 認証情報の検証...

CVE-2022-37704

推奨される説明 Amanda 3.5.1 には、通常ユーザー backup から root への権限昇格を可能にする欠陥があります。/lib/amanda/rundump にある SUID バイナリは、攻撃者が制御する引数で /usr/sbin/dump を root として実行します。これにより、権限昇格、サービス拒否、情報漏えいが発生する可能性があります。 追加情報 Amanda はよく知られたソフトウェアであり、そのパッケージは既知のすべてのLinuxディストリビューションだけでなく、Windowsにも存在します。...

CVE-2026-98133

A flaw was found in the Linux kernel's NTFS file system implementation. When an error occurs while setting an extended attribute EA, the kernel prematurely clears the flag indicating that extended attributes are present. A local user can exploit this vulnerability by triggering a failed extended...

CVE-2026-98131

A flaw was found in the Linux kernel's stmmac network driver. During network packet transmission, a failure in Direct Memory Access DMA mapping for packet fragments causes the driver to drop the packet without releasing previously allocated mappings. A local user could exploit this flaw by...

CVE-2026-101076 Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /setntpserverip.cgi of the component CGI Handler. The manipulation of the argument ntpip results in os command injection. The attack can be executed remotely. The exploit is now public and may ...

CVE-2026-101076

The Netcore NR289-GE (version 1.4.5102) is susceptible to a remote OS command injection vulnerability in the CGI Handler component. Specifically, the system function within the /set_ntp_server_ip.cgi file fails to properly sanitize the ntp_ip argument, allowing an attacker to execute arbitrary co...

EUVD-2026-88317

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /setntpserverip.cgi of the component CGI Handler. The manipulation of the argument ntpip results in os command injection. The attack can be executed remotely. The exploit is now public and may ...

CVE-2026-101076 Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /setntpserverip.cgi of the component CGI Handler. The manipulation of the argument ntpip results in os command injection. The attack can be executed remotely. The exploit is now public and may ...

CVE-2025-27591

CVE-2025-27591 - 通过 below 实现权限提升 该仓库包含针对 CVE-2025-27591 的利用代码，这是 Linux 监控工具 Below 中的一个权限提升漏洞。 🛠️ 漏洞详情 CVE ：CVE-2025-27591 CVSS 评分 ：7.8（高危） 受影响工具 ：below（v0.9.0 之前版本） 漏洞描述 ：Below 以 root 身份创建了全局可写的目录和日志文件（/var/log/below/errorroot.log），允许低权限用户进行符号链接攻击。 发现时间 ：2025 年 1 月 公布时间 ：2025 年 3 月 12 日 来源...

CVE-2018-19788

CVE-2018-19788 CVE-2018-19788 的超级简单利用 要使用此工具，您必须在 Policy Kit 中创建一个 UID INTMAX 的用户，或者已经拥有一个具有该 UID 的低权限用户。 UID 可以在创建用户时指定，如下所示，然后在执行脚本前使用： $ useradd -u 4000000001 PrivEsc $ passwd PrivEsc $ su PrivEsc $ chmod +x /tmp/CVE-2018-19788PrivEsc.sh $ ./tmp/CVE-2018-19788PrivEsc.sh...

CVE-2026-98129

A flaw was found in the Linux kernel's mpi3mr SCSI driver. The driver fails to validate the return value of a memory allocation when adding a Serial Attached SCSI SAS port, leading to a NULL pointer dereference if the allocation fails. A local user could exploit this flaw under low-memory...

CVE-2026-98128

A flaw was found in the Linux kernel's mpi3mr driver. This vulnerability can lead to a Denial of Service DoS due to kernel memory exhaustion. When an error occurs during Serial Attached SCSI SAS port addition, the driver fails to properly release an acquired reference count on the target device...

CVE-2026-93402

A flaw was found in rsyslog. When using the imdtls input module configured for name or fingerprint authentication, permitted-peer identity checks are not enforced after a successful DTLS handshake. A remote attacker possessing a valid certificate signed by the listener's trusted Certificate...

CVE-2026-101333 Keycloak-services: keycloak-services: unbounded metric series creation via idp tag on broker login endpoint

A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The issue occurs when the listener is configured to include the idp tag. An unauthenticated attacker can send requests to the identity broker login endpoint using...

CVE-2026-93816

A flaw was found in the Linux kernel's Flash-Friendly File System F2FS. When converting inline directory entries into standard directory blocks, the kernel does not properly validate recorded filename lengths before copying them. A local user could exploit this flaw by mounting a specially crafte...

CVE-2026-93284

A flaw was found in the Linux kernel's DRM Direct Rendering Manager pagemap subsystem. During page migration error handling, the kernel clears the page tracking array before finishing Direct Memory Access DMA unmapping operations. A local user could exploit this flaw by triggering migration...

CVE-2026-93817

A flaw was found in the Linux kernel's performance events perf subsystem. This vulnerability occurs because memory allocated for event address filters is released prematurely while still in active use by other kernel processes. A local user could exploit this use-after-free flaw during performanc...

CVE-2021-36630

CVE-2021-36630 Ruckus の SmartZone シリーズデバイスにはセキュリティ上のリスクがあります。製造元に通知した後、同社は積極的に技術担当者を組織して調査を実施しました。この間、私たちもセキュリティ上の提案と検証方法を何度も提供しました。7月19日、同社は正式に安全公告を発表しました。 リクエストの送信 攻撃コマンド: echo "" | nc -4u 9001 IPアドレスの例: 62.210.8.110?111.107.251.71RuckusWireless SZ ip 例 影響を受けるバージョン SmartZone-100 - すべて すべて -...

CVE-2026-101074 Netcore NR289-GE Authentication boa password-check stack-based overflow

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. Th...