offsec-karaf-exploits

offsec-karaf-exploits 사용법: python exploit.py --help 예제: python exploit.py --rhost=192.168.0.133 --rport=1337 --lhost=192.168.0.100 --lport=4444 --creds=karaf:karaf 페이로드 재빌드 Felix Framework 설정 1. lib 디렉터리를 생성합니다. mkdir -p ./revshell/lib 2. Felix Framework 7.0.5를 다운로드합니다. 3. zip 아카이브를 압축 해제합니다. 4...

CVE-2026-92174

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion (LFI) in all versions up to and including 1.73.2 . The flaw exists in the 'theme' parameter and is triggered because update_fields() only processes declared form fields, allowing an attacker to bypass validat...

EUVD-2026-91178

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.73.2 via the 'theme' parameter parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary...

CVE-2026-92174 SiteOrigin Widgets Bundle <= 1.73.2 - Authenticated (Contributor+) Local File Inclusion via 'theme' Parameter

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.73.2 via the 'theme' parameter parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary...

PT-2026-104082

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.73.2 via the 'theme' parameter parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary...

rauc-1.5-integration

RAUC 1.5 통합 이 저장소는 기존 프로젝트에 RAUC 업데이트를 통합하는 것을 간소화하는 예제를 포함하고 있습니다. https://github.com/rauc/rauc-1.5-integration/issues/1 을 구독하여 이 저장소의 중요한 업데이트 및 업스트림 빌드 시스템으로의 통합에 대한 알림을 받을 수 있습니다. 예제는 현재 업스트림 버전에서 파생되었으므로, 기존 프로젝트의 연식에 따라 일부 조정이 필요할 수 있습니다. 12월 21일에 게시될 권고문은...

TheLastBundleMismatch

Mysterious patch 이번에는 Android Security Bulletin에서 CVE-2023-45777에 대한 수정 사항으로 등장한 패치부터 시작해 보겠습니다.diff diff --git a/services/core/java/com/android/server/accounts/AccountManagerService.java b/services/core/java/com/android/server/accounts/AccountManagerService.java index 7a19d034c2c8..5238595fe2a2...

nifi-CVE-2026-39816-poc

Apache NiFi CVE-2026-39816 POC CVE-2026-39816에 대한 개념 증명 데모로, Apache NiFi 2.8.0의 EXECUTECODE 권한 우회 취약점입니다. 코드 실행 권한이 의도적으로 거부된 플로우 디자이너가 그래프 번들의 ExecuteGraphQuery 프로세서를 통해 NiFi JVM에서 임의의 Groovy를 실행할 수 있게 합니다. NiFi 2.9.0에서 수정됨 ZeroPath가 발견 — 전체 기술 문서는 여기에서 확인 가능. 취약점 TinkerpopClientService의...

NGINX_2026_CVE_Bundle_CTI_Report

🛡️ NGINX 2026 다중 CVE CTI 조사 CVE-2026-28755 • CVE-2026-42926 • CVE-2026-9256 • CVE-2026-42055 • CVE-2026-42533 작성자: Pratik Chhetri 보고 날짜: 2026-07-28 📌 경영진 요약 | CVE | 구성 요소 | 주요 문제 | 수정된 오픈소스 버전 | 우선순위 | |---|---|---|---:| | CVE-2026-28755 | ngxstreamsslmodule | 스트림 mTLS의 OCSP 결과 우회 | 1.29.7+,...

wix-kickstartx-challenge-writeup

Wix KickstartX Challenge 2026 — 전체 라이트업 결과: 200/200 100% — 토큰: WKX-9245FA70-200 날짜: 2026년 3월 24일 1. 발견 및 정찰 챌린지 공지 LinkedIn 게시물을 통해 주니어 개발자 프로그램인 Wix KickstartX를 위한 특별 챌린지가 공지되었습니다. 규칙: 30분, 단 한 번의 시도만 허용 상위 10명의 최고 점수자는 시험 단계로 직접 진출 두 개의 링크 제공: wix-kickstartx-challenge-2026.base44.app/ 및...

code-shield

protocol-remediator C/C++ protocol·platform 코드의 취약점 finding을 재현 가능한 증거로 정규화하고, 후보 패치를 격리된 복사본에서 검증하는 MVP다. code-shield는 이름 충돌 위험이 확인된 작업명이라 공개 package와 CLI에는 중립적인 내부 이름을 사용했다. 현재 구현의 중심은 패치 생성 모델이 아니라 다음 검증 폐루프다. sanitizer 또는 SARIF - Finding + EvidenceBundle - source context - manual/external-age...

AlmaLinux 9.2 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils (ALMALINUX9.2:CLSA-2024:1727373881)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1727373881 advisory. - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle...

SUSE-SU-2026:4392-1 Security update for cosign

This update for cosign fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272117. - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library...

CVE-2026-101132

A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected element is the function loadProfile of the file packages/boot/app-boot/src/profile.ts of the component Bundle Patch Handler. The manipulation of the argument dsh.bundle.patch results in path traversal...

EUVD-2026-88438

A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected element is the function loadProfile of the file packages/boot/app-boot/src/profile.ts of the component Bundle Patch Handler. The manipulation of the argument dsh.bundle.patch results in path traversal...

CVE-2026-101132

A path traversal vulnerability exists in DeepSeek deepseek-harness (versions up to 0.1.7-rc.2 ). The flaw is located within the loadProfile function of the packages/boot/app-boot/src/profile.ts file in the Bundle Patch Handler component. Manipulation of the dsh.bundle.patch argument allows for pa...

CVE-2026-101132 DeepSeek deepseek-harness Bundle Patch profile.ts loadProfile path traversal

A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected element is the function loadProfile of the file packages/boot/app-boot/src/profile.ts of the component Bundle Patch Handler. The manipulation of the argument dsh.bundle.patch results in path traversal...

CVE-2026-101132 DeepSeek deepseek-harness Bundle Patch profile.ts loadProfile path traversal

A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected element is the function loadProfile of the file packages/boot/app-boot/src/profile.ts of the component Bundle Patch Handler. The manipulation of the argument dsh.bundle.patch results in path traversal...

CVE-2026-93538

A cross-tenant authorization issue was discovered in SUSE Rancher Fleet. During agent-initiated cluster registration, cluster labels supplied by the registering agent, including labels in the reserved management.cattle.io/ namespace such as the cluster display name label, were applied to the...

CVE-2026-93537

A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permission to create or modify a GitRepo, can cause SUSE Rancher Fleet to read files from the filesystem of the environment that processes the bundle and include...