CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 Follina POC exploit.html を localhost, ポート80でホストします。docxを開いて計算機を起動します。 ドキュメントが指すリモートアドレスを変更するには、7Zで開き、word\rels\document.xml.relsを編集して新しい場所を指定します。感嘆符は必ず保持してください。URLの末尾からこれを省略すると、文字通り実行されません。 エクスプロイトは、window.location.href...

CVE-2018-4878

CVE-2018-4878サンプル サンプルソース: https://github.com/brianwrf/CVE-2017-4878-Samples 分析レポート: http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html pythonスクリプト内のexploitソース: https://github.com/vysec/CVE-2018-4878 cve-2018-4878.py...

statiStrings

statiStrings | | | | || | / | / | | \ | | '| | ' \ / / | \ \ || | | || | | || | | | | | | | \ \ |/\,|||/ || ||| ||, |/ |/ YARA Rule Strings Statistics Calculator Shelly Raban Sh3llyR, February 2021, Version 0.1 목차 1. 프로젝트 소개 사용 기술 2. 시작하기 설치 3. 사용법 4. 연락처 5. 감사의 말 프로젝트 소개 statiStrings는 YARA...

spring-spel-0day-poc

spring-spel-0day-poc spring-cloud/spring-cloud-function RCE EXP POC https://github.com/spring-cloud/spring-cloud-function header spring.cloud.function.routing-expression:Tjava.lang.Runtime.getRuntime.exec"open -a calculator.app" build wget...

Cost Calculator Builder <= 3.2.15 - SQL Injection

The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2018-14667

CVE-2018-14667 詳細:https://xz.aliyun.com/t/3264 poc calcwindows：...

OWASP-Calculator

OWASP 위험 평가 계산기 🧮 OWASP 위험 평가를 기반으로 웹 취약점의 위험을 평가하는 온라인 계산기 온라인 계산기로 이동 스페인에서 ❤️로 만듦...

CVE-2025-55182

简体中文 | English これはCVE-2025-55182脆弱性の分析、検証環境、およびPOCに関するリポジトリです。 脆弱性を学ぶ 《CVE-2025-55182 Analysis.md》の記事を参照してください。 脆弱性を検証する テスト環境またはデバッグ環境を構築した後、スクリプトpoc.pyを実行します。電卓がポップアップ表示された場合、脆弱性の悪用が成功したことを意味します。 python poc.py...

EUVD-2025-209816

The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct Object Reference IDOR in all versions up to, and including, 4.0.1 only when used in combination with Cost Calculator Builder PRO. This is due to the ccbwoocommercepayment AJAX...

CVE-2018-0802_POC

CVE-2018-0802POC usage: cve-2018-0802poc.py -h -e EXECUTABLE -o OUTPUT この .rtf サンプルは、脆弱性を悪用して電卓を実行します。...

EUVD-2026-78917

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixedamount discount values, persists them in shdiscounts, and passes them through vendor/shopper/cart/src/Discounts/DiscountCalculator.php and...

CVE-2026-62136

Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce = 2.3.21 versions...

EUVD-2026-76201

Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce = 2.3.21 versions...

CVE-2026-62136: Missing Authorization

Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce = 2.3.21 versions...

PT-2026-90034

Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce = 2.3.21 versions...

MAL-2026-14391 Malicious code in fund-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c5f9f0536151a173aa211b9b5f2972e68aee3043132adccdb3695947b16672 Package declares a preinstall script node index.js that fires unconditionally on npm install. index.js reads installer-side identifiers via...

Oracle Essbase (August 2026 CSPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the August 2026 Critical Security Patch Update CSPU. It is, therefore, affected by multiple vulnerabilities: - Vulnerability in Oracle Essbase component: Essbase Web Platform Apache HTTP Server. The...

CVE-2026-70688

Vulnerability in Oracle Essbase component: Calculator. The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in takeover o...

EUVD-2026-61643

Vulnerability in Oracle Essbase component: Calculator. The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in takeover o...

PT-2026-77687

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.1.0.0 Description A flaw in the Calculator component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full takeover of the application...