30481 matches found
dnspooq
dnspooq DNSpooq PoC - dnsmasq 캐시 중독 CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 교육 목적으로만 사용하세요 요구 사항 Docker compose Docker 익스플로잇 컨테이너 실행 $ docker-compose up -d exploit.py 실행 $ docker-compose exec attacker bash bash-5.0 python exploit.py Querying non-cached names... Generating spoofed packets...
CLEANSTART-2026-KW79982 Security fix for ghsa-259r-337f-4rfw applied in: aws-network-policy-agent 1.1.6-r4, caddy 2.11.4-r1, fabric-peer 2.5.16-r2, fabric-peer 3.1.5-r1, gotenberg 8.33.0-r0, kubernetes-dns-node-cache 1.23.1-r2, step 0.30.2-r4
ghsa-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
EUVD-2026-94647
Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a token assigned specially crafted policy names to use the capabilities of policies defined in other namespaces, including the root namespace. This vulnerability...
byeintegrity-uac
ByeIntegrity — Windows UAC 우회 사용자 계정 컨트롤UAC을 우회하여 상승된관리자 권한을 획득하고 높은 무결성 수준에서 모든 프로그램을 실행합니다. 요구 사항 관리자 계정 UAC 알림 수준이 기본값 이하로 설정됨 2021 업데이트 ByeIntegrity를 훨씬 더 빠르고, 가볍고, 안정적으로 업데이트하기로 결정했습니다. 이는 상당한 개편이므로 VS 솔루션에 "ByeIntegrity2021"이라는 새 프로젝트를 만들었습니다. 이는 이 공격의 업데이트된 버전입니다. 물론 원본 버전은 여전히 존재합니다. 새 버전...
PT-2026-107977
ImageMagick before 7.1.2-31 contains a heap buffer overflow vulnerability in the distributed pixel cache server that allows connecting clients to overwrite heap memory by sending crafted data. Attackers can connect to the distributed pixel cache server and transmit malicious data to trigger a hea...
CVE-2024-44000-LiteSpeed-Cache
PoC LiteSpeed Cache CVE-2024-44000 익스플로잇 CVE-2024-44000은 인기 있는 WordPress 플러그인인 LiteSpeed Cache의 취약점입니다. 이 취약점은 LiteSpeed Cache의 세션 관리를 공격하여 공격자가 민감한 데이터에 무단으로 접근할 수 있도록 합니다. 스크립트는 다음 단계로 작동합니다. 1. 디버그 로그에서 쿠키 추출 : 스크립트는 GET 요청을 전송하여 서버에서 debug.log 파일wp-content/debug.log을 가져옵니다. 정규 표현식을 사용하여 파일 내용...
Security Bulletin: Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution
Summary Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a token assigned specially crafted policy names to use the capabilities of policies defined in other namespaces, including the root namespace. This vulnerability...
CVE-2026-105820
Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a token assigned specially crafted policy names to use the capabilities of policies defined in other namespaces, including the root namespace. This vulnerability...
CVE-2026-105820 Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution
Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a token assigned specially crafted policy names to use the capabilities of policies defined in other namespaces, including the root namespace. This vulnerability...
CVE-2026-105820
The Vault ACL policy cache is vulnerable to a path traversal flaw (CWE-22) when policy names contain specific traversal constructs. This allows a token with a specially crafted policy name to bypass namespace boundaries and utilize the capabilities of policies defined in other namespaces, includi...
Am-I-affected-by-Meltdown
Meltdown의 영향을 받고 있나요?! Meltdown CVE-2017-5754 확인 도구 나는 무엇인가? 개념 증명Proof-of-concept / 익스플로잇Exploit / 시스템이 Variant 3: rogue data cache load CVE-2017-5754, 일명 MELTDOWN의 영향을 받는지 확인합니다. 기본 아이디어는 사용자가 실행 중인 시스템이 예를 들어 KAISER 패치셋https://lkml.org/lkml/2017/10/31/884과 같은 것으로 제대로 패치되었는지 알 수 있다는 것입니다...
Vault Enterprise ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution
Summary Vault’s ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a token assigned specially crafted policy names to use the capabilities of policies defined in other namespaces, including the root namespace. This vulnerability...
CVE-2022-3910
CVE-2022-3910 1. dirtycred exp: t1dpoc README.md: CVE-2022-3910 및 DirtyCred: Linux 권한 상승 취약점 분석 2. cross-cache exp: t1dexp README.md: CVE-2022-3910 분석-2...
DoS-via-cache-poisoning-by-forcing-SPA-mode-CVE-2025-43864-
React Router에 오신 것을 환영합니다! React Router를 사용하여 풀스택 React 애플리케이션을 구축하기 위한 현대적이고 프로덕션 준비가 완료된 템플릿입니다. 기능 🚀 서버 사이드 렌더링 ⚡️ 핫 모듈 교체HMR 📦 에셋 번들링 및 최적화 🔄 데이터 로딩 및 뮤테이션 🔒 기본적으로 TypeScript 🎉 스타일링을 위한 TailwindCSS 📖 React Router 문서 시작하기 설치 의존성을 설치하세요: npm install 개발 HMR을 사용하여 개발 서버를 시작하세요: npm run dev 애플리케이션은...
EUVD-2026-91668
Next.js: Pending use cache fill can leak Draft Mode content into regular responses and persisted pages...
Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages
Pending use cache fills are shared across requests for the same key without distinguishing Draft Mode requests from regular requests. When two such requests overlap, the second request receives the first request's fill: - A regular request that overlaps an editor's Draft Mode request receives...
NPM: Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages
NPM: Next.js: Pending use cache fill can leak Draft Mode content into regular responses and persisted pages vulnerability discovered by ? in WordPress Npm next versions = 16.3.0, 16.3.8...
GHSA-3W37-WQ28-93X7 Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages
Pending use cache fills are shared across requests for the same key without distinguishing Draft Mode requests from regular requests. When two such requests overlap, the second request receives the first request's fill: - A regular request that overlaps an editor's Draft Mode request receives...
Next.js has cache poisoning of SSG and ISR pages in self-hosted applications
Self-hosted Next.js applications that use the Pages Router with statically generated SSG or incrementally regenerated ISR pages can have a page's cache entry replaced with content from a different route, causing the affected page to serve wrong content to every visitor until the entry is...