2021 matches found
WebSecProbe
.png WebSecProbe는 웹 보안 연구자, 침투 테스터 및 시스템 관리자가 웹 애플리케이션에서 HTTP 403Forbidden 응답과 접근 제어 동작을 분석 하기 위해 설계된 보안 테스트 유틸리티입니다. 이 도구는 요청 변형, 헤더 및 엔드포인트를 체계적으로 테스트하여 잘못된 구성, 일관되지 않은 인가 검사, 의도하지 않은 접근 경로 를 식별하는 데 도움을 줍니다. 이러한 기법은 수동 테스트 중에 눈에 띄지 않을 수 있는 취약점을 드러내는 데 도움이 됩니다. WebSecProbe는 승인된 보안 평가 및 방어적 연구 를 ...
CVE-2025-29927-Nextjs-Analysis
CVE-2025-29927 Next.js 분석 이 저장소는 Docker에서 CVE-2025-29927을 분석하기 위해 만든 자체 호스팅 Next.js 랩 환경을 포함합니다. 개요 CVE-2025-29927은 Next.js 미들웨어에 구현된 권한 부여 검사와 관련된 취약점입니다. 이 프로젝트는 통제된 환경에서 미들웨어로 보호되는 라우트 동작을 관찰하기 위한 로컬 랩으로 구축되었습니다. 문서 분석 보고서: docs/CVE-2025-29927-Analysis-Report.md 스크린샷: docs/images/ PoC 스크립트:...
CVE-2026-47603
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47604
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47603
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47604
The NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver . The root cause is missing authorization checks , which allows a local user to access another process's GPU channel state . A successful exploit of this vulnerability may lead to information di...
CVE-2026-47604
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47604
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47603
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47603
The NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in its kernel mode driver . Due to missing authorization checks , a local user can access the GPU channel state of another process. This vulnerability may lead to information disclosure . No specific remediation, exploit...
EUVD-2026-90180
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...
Linux Distros Unpatched Vulnerability : CVE-2026-47603
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel...
Linux Distros Unpatched Vulnerability : CVE-2026-47604
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel...
BIT-GITLAB-2026-92529 Incorrect Authorization in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass admin-configured AI tool governance controls for...
GitLab 19.0 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-8937)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an...
Apache OFBiz - Remote Code Execution
Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45507 info: name: Apache OFBiz -...
PT-2026-99359
Name of the Vulnerable Software and Affected Versions Budibase server versions prior to 3.45.0 Description An information disclosure issue exists where authenticated users can access application metadata and source code belonging to another tenant. By providing a victim tenant's appId to the 'GET...
EUVD-2026-85734
GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to access sensitive CI/CD variable values from debug-mode job traces through the Duo AI...
CVE-2026-92470
GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to access sensitive CI/CD variable values from debug-mode job traces through the Duo AI...