CFC

중앙 집중식 방화벽 제어 스크립트 중앙 집중식 방화벽 제어는 iptables를 실행하는 여러 서버 또는 로드밸런서의 방화벽을 중앙에서 관리할 수 있는 방법을 제공합니다. 이를 통해 여러 서버에서 하나의 명령으로 남용abuse IP 범위 등을 빠르게 허용/차단/삭제/검색할 수 있습니다. 해당 서버에는 ssh를 통해 접근합니다. IPv4와 IPv6를 모두 지원합니다. Debian 6.x / 7.x / 8.x / 9.x에서 테스트되었지만 다른 배포판에서도 작동해야 합니다. 사전 요구 사항 IPv6에 대해 'precheck',...

Adobe_ColdFusion_RCE_Unauthenticated

CVE-2023-26360 — Adobe ColdFusion 인증되지 않은 RCE CVE-2023-26360용 원격 코드 실행 익스플로잇의 Python 구현으로, 원본 Metasploit 모듈과 jakabakos의 선행 연구 분석을 기반으로 합니다. 존재 이유 jakabakos PoC는 를 variables 파라미터에 직접 주입하고 ColdFusion 로그에서 출력을 단일 단계로 읽으려고 시도합니다. 그러나 ColdFusion은 해당 컨텍스트에서 CFML 태그를 인라인으로 평가하지 않기 때문에 이 접근 방식은 실패하며, 코드 ...

Masa CMS 跨站请求伪造漏洞

Masa CMS is a digital experience platform operated by Masa CMS organization. Versions of Masa CMS 7.5.2 and earlier contained a cross-site request forgeing vulnerability. This vulnerability stemmed from the createBundle method in csettings.cfc, which did not properly validate the anti-CSRF token...

CVE-2026-40329

Masa CMS is an open source content management system. In versions 7.5.2 and earlier, a SQL injection vulnerability exists in the beanFeed.cfc component within the getQuery function's processing of the sortBy parameter. The application fails to properly sanitize or parameterize this input before...

CVE-2026-40330

Masa CMS is an open source content management system. In versions 7.2.0 through 7.2.9, 7.3.0 through 7.3.14, 7.4.0 through 7.4.9, and 7.5.0 through 7.5.2, a SQL injection vulnerability exists in the beanFeed.cfc component within the getQuery function's handling of the sortDirection parameter. The...

CVE-2025-67830

Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection...

CVE-2025-67830

Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection...

PT-2026-26085

CVE-2025-67829 Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection. https://t.co/EsT6nGpd9g...

Mura 安全漏洞

Mura is a content management system developed by Mura Corporation. Versions of Mura prior to 10.1.14 contained security vulnerabilities, which were caused by SQL injection attacks in the getQuery sortDirection parameter of the beanFeed.cfc file...

Mura 安全漏洞

Mura is a content management system developed by Mura Corporation. Versions of Mura prior to 10.1.14 contained security vulnerabilities, which were caused by SQL injection attacks in the getQuery and sortby parameters of the beanFeed.cfc file...

PT-2026-26086

CVE-2025-67830 Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection. https://t.co/IUknqurxhS...

PT-2026-3782

Name of the Vulnerable Software and Affected Versions Tenda AX-1806 version 1.0.0.1 Description The Tenda AX-1806 device contains a stack overflow issue in the time parameter of the sub 60CFC function. A crafted request can trigger a Denial of Service DoS. The time parameter is vulnerable...

EUVD-2008-1657

Malware in sbrugna...

EUVD-2014-6729

Malware in sbrugna...

Malicious code in cfc-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80e9bcf726b0cddf43089f7e5225471ba86fc21687c8987ec61276e9196dd994 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10952 Malicious code in cfc-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80e9bcf726b0cddf43089f7e5225471ba86fc21687c8987ec61276e9196dd994 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in cfc-i18n

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2023-44350 ColdFusion | Deserialization of Untrusted Data (CWE-502)

Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction...

CVE-2023-26347: Improper Access Control

Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

Improper access control

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...