CVE-2019-7192_QNAP_Exploit

QNAP 사전 인증 루트 RCECVE-2019-7192 CVE-2019-7195 익스플로잇 현재는 시스템 파일/etc/shadow, ssh 개인 키 등을 읽을 수 있습니다. 사용법: pip install -r requirements.txt or just pip install requests python3 gundy.py https://vulnerableurl:port 샘플 출력 취약점 이 취약점들은 사전 인증 루트 RCE로 연결될 수 있습니다. 자세한 내용은 다음 링크를 참조하십시오: CyCraft Write-Up QNAP의 ...

CVE-2021-44077

CVE-2021-44077 CVE-2021-44077에 대한 개념 증명 익스플로잇: ManageEngine ServiceDesk Plus msiexec.exe pip install로 requirements 파일을 설치하거나 requests 패키지가 있는지 확인하세요. 리버스 셸을 잡으려면 먼저 리스너를 실행하세요. 예: nc -l 4444 그런 다음 익스플로잇 스크립트를 실행하고 url과 exe 인수를 전달하세요. 예: python exploit.py http://: 스크립트 출력 예: % python exploit.py...

CVE-2021-33044

CVE-2021-33044 Dahua IPC/VTH/VTO 장치 인증 우회 익스플로잇 설명: 일부 Dahua 제품에서 로그인 과정 중 발견된 신원 인증 우회 취약점입니다. 공격자는 악성 데이터 패킷을 구성하여 장치 신원 인증을 우회할 수 있습니다. python3 dahuaexploit.py --ip IP --port PORT...

EUVD-2026-94007

Backstage: Improper authentication in the OIDC provider...

GHSA-826H-28H9-65HG Backstage: Improper authentication in the OIDC provider

Impact Deployments using OIDC email-based identity resolution with a provider that permits unverified email addresses may allow an authenticated provider user to assume another catalog identity. This may grant access and permissions associated with that user. No direct availability impact is...

CVE-2025-32432

CraftCMS CVE-2025-32432 익스플로잇 Chirag Artani 개요 이 저장소는 CraftCMS 4.x 및 5.x 버전에 영향을 미치는 사전 인증 원격 코드 실행RCE 취약점인 CVE-2025-32432에 대한 개념 증명 익스플로잇 스크립트를 포함합니다. 이 취약점은 CraftCMS의 자산 변환 생성 기능에 존재합니다. 이 익스플로잇 스크립트는 다음을 통해 취약점 탐지 및 확인을 자동화합니다: 1. CraftCMS 관리자 대시보드에서 CSRF 토큰 추출 2. PHP 객체 주입을 통한 취약점 악용 3. 시스템 정...

CVE-2022-41082-POC

CVE-2022-41082-POC CVE-2022-41082 NotProxyShell OWASSRF 취약점의 PoC로, Microsoft Exchange 서버에 영향을 미칩니다. 이는 ProxyNotShell OWASSRF에 대한 인증 후 RCE이며, 명령 실행을 위해 유효한 자격 증명이 필요합니다. TabShell 취약점CVE-2022-41076에 대한 PowerShell PoC 스크립트 추가 TabShell 취약점은 권한 상승의 한 형태로, OWASSRF를 통해 성공적으로 액세스한 후 제한된 PowerShell 샌드박스를...

CVE-2024-21762

CVE-2024-21762 - FortiGate SSL VPN RCE 탐지 및 익스플로잇 도구 CVE-2024-21762 - FortiGate SSL VPN의 심각한 취약점 탐지 및 익스플로잇 도구 ⚠️ 법적 고지 : 이 도구는 승인된 테스트 환경에서만 사용해야 합니다. 승인되지 않은 시스템에서의 사용은 불법 이며 심각한 법적 결과를 초래할 수 있습니다. 개요 CVE-2024-21762는 FortiGate SSL VPN 구성 요소의 심각한 취약점으로, 사전 인증 원격 코드 실행RCE을 허용합니다. 이 결함은...

GHSA-MXMX-RH57-JX58 PraisonAI: Platform members can delete owner issue dependencies through member-owned related issues

Platform members can delete owner issue dependencies through member-owned related issues Summary praisonai-platform issue dependency deletion can be authorized against the wrong side of a dependency edge. A workspace member cannot delete a dependency through the owner-created issue endpoint, but...

CVE-2026-105140

Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 contains a race condition in auth provider group refreshes that can restore group memberships just revoked in the identity provider. When overlapping refreshes for the same user commit out of order, stale memberships are persisted and the user...

CVE-2026-105140

The Obot platform versions 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 are vulnerable to a race condition within the auth provider group refresh mechanism. If overlapping refreshes for the same user commit out of order, the system may persist stale memberships , causing a user to retain revoked...

EUVD-2026-94311

Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 contains a race condition in auth provider group refreshes that can restore group memberships just revoked in the identity provider. When overlapping refreshes for the same user commit out of order, stale memberships are persisted and the user...

CVE-2026-105140 Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 Race Condition Restores Revoked Group Membership

Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 contains a race condition in auth provider group refreshes that can restore group memberships just revoked in the identity provider. When overlapping refreshes for the same user commit out of order, stale memberships are persisted and the user...

CVE-2026-105140 Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 Race Condition Restores Revoked Group Membership

Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 contains a race condition in auth provider group refreshes that can restore group memberships just revoked in the identity provider. When overlapping refreshes for the same user commit out of order, stale memberships are persisted and the user...

CVE-2026-105140 Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 Race Condition Restores Revoked Group Membership

Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 contains a race condition in auth provider group refreshes that can restore group memberships just revoked in the identity provider. When overlapping refreshes for the same user commit out of order, stale memberships are persisted and the user...

F5-BIG-IP-exploit

F5-BIG-IP 익스플로잇 CVE-2022-1388 사용법: CVE-2022-1388.py -h -u URL -c COMMAND -f FILE CVE-2022-1388 F5 BIG-IP iControl REST 인증 우회 RCE 예: python3 CVE-2022-1388.py -u https://127.0.0.1 python3 CVE-2022-1388.py -u https://127.0.0.1 -c 'cat /etc/passwd' python3 CVE-2022-1388.py -f urls.txt Shodan 검색어:...

CVE-2026-97720

Apache Impala versions up to and including 4.5.2 are vulnerable to an authentication bypass in the Impala executors due to an incorrect implementation of JWT/OAuth authentication . Specifically, the system fails to validate Bearer token (JWT) signatures , causing the executor's webserver to accep...

CVE-2026-97720 Apache Impala: Impala Executor Webserver Auth Bypass

Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows attacked to access resources served by the executor's webserver when that webserver is configured to accept JWT/OAuth tokens. Bearer token JWT signatures are...

CVE-2026-97720 Apache Impala: Impala Executor Webserver Auth Bypass

Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows attacked to access resources served by the executor's webserver when that webserver is configured to accept JWT/OAuth tokens. Bearer token JWT signatures are...

kernel: nvmet-auth: reject short AUTH_RECEIVE buffers

A flaw was found in the nvmet-auth component of the Linux kernel. A remote attacker, by sending a specially crafted AUTHRECEIVE buffer to an NVMe-oF NVM Express over Fabrics target with in-band authentication enabled, can trigger a heap out-of-bounds write. This vulnerability arises because the...