CVE-2024-7135

CVE-2024-7135 WordPress용 Tainacan 플러그인은 0.21.7 이하의 모든 버전에서 'getfile' 함수에 대한 누락된 권한 검사로 인해 데이터 무단 접근에 취약합니다. 이 함수는 또한 디렉터리 트래버설directory traversal에도 취약합니다. 이를 통해 Subscriber구독자 수준 이상의 접근 권한을 가진 인증된 공격자가 서버에 있는 임의의 파일 내용을 읽을 수 있으며, 해당 파일에는 민감한 정보가 포함될 수 있습니다. 사용법 WordPress CVE-2024-7135 Wordpress...

CVE-2026-58865

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-92752

Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.This issue affects WP Spell Check: from n/a through 12.1...

CVE-2026-100506 WordPress WP Spell Check plugin <= 12.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.This issue affects WP Spell Check: from n/a through 12.1...

CVE-2026-100506 WordPress WP Spell Check plugin <= 12.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.This issue affects WP Spell Check: from n/a through 12.1...

CVE-2026-100506

The WP Spell Check WordPress plugin (versions

CVE-2021-24155.rb

WordPress-Backup-RCE 이 Metasploit 모듈은 특권 있는 WordPress 계정을 가진 공격자가 Backup Guard 워드프레스 플러그인 1.6.0 이전 버전의 임의 파일 업로드 취약점을 통해 리버스 셸을 실행할 수 있도록 합니다. 이는 SGBP 유형이어야 하는 업로드된 파일 확장자 검사가 잘못되었기 때문입니다. 그런 다음 업로드된 페이로드는 /wp-content/uploads/backup-guard/.php 호출을 통해 트리거될 수 있습니다...

CVE-2026-58865

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58865

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-92618

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58865

A vulnerability exists in multiple functions of PduParser.java due to a missing bounds check . This flaw can lead to a persistent denial of service (DoS) or a remote denial of service without requiring additional execution privileges or user interaction. No specific exploitation details are provi...

CVE-2026-58815

In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58815

The provided documents identify an out of bounds write vulnerability in multiple locations caused by an incorrect bounds check . This flaw could lead to local escalation of privilege without requiring additional execution privileges or user interaction. While the specific affected software or har...

CVE-2026-45524

In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-27636-Practical-Lab

🛡️ CVE-2025-27636 — Apache Camel 실용적 공격 실습 연구소 🔍 개요 CVE-2025-27636 은 Apache Camel 의 camel-exec 구성 요소에서 발생하는 치명적인 원격 코드 실행RCE 취약점입니다. 미묘하지만 위험한 문제에서 비롯됩니다: DefaultHeaderFilterStrategy는 헤더 이름에 대해 대소문자를 구분하여 검사하므로, 대체 대소문자를 사용하여 우회할 수 있습니다. 즉, 차단되어야 하는 내부 Camel 헤더예: CamelExecCommandExecutable가 대소문자를...

boot-jackson-cve

Spring Boot 2.5.10에서의 CVE-2020-36518 재현 실행: ./mvnw clean verify 다음과 같이 실패합니다: ERROR Failed to execute goal org.owasp:dependency-check-maven:7.0.0:check default on project jackson-demo: ERROR ERROR One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or...

CVE-2026-46455

CVE-2026-46455 — camel-keycloak における ISACTIVE チェックの欠落 期限切れトークンの受け入れ 同じApache Camel脆弱性に対する実行可能な概念実証PoC再現コードです。ランタイムごとに1つ用意されています: ランタイム| ディレクトリ| スタック ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-keycloak 4.18.2 Camel Quarkus| camel-quarkus/| Quarkus 3.36.0 + Camel...

CVE-2026-71891

A flaw was found in Bouncy Castle. When validating Boneh-Lynn-Shacham BLS signature public keys, the library does not verify that a key is constructed on the canonical elliptic curve. An attacker can exploit this issue by supplying a specially crafted public key defined on an alternate curve. Thi...

EUVD-2026-92523

Velociraptor's SetClientMetadata used the wrong permission check to enforce setting metadata on the server. This allows a user with LABELCLIENTS permission to update the server metadata. Server metadata is often used to store site wide configuration data that should only be updated by the server...

CVE-2026-78411 Velociraptor Server Metadata update with Insufficient Permission Check

Velociraptor's SetClientMetadata used the wrong permission check to enforce setting metadata on the server. This allows a user with LABELCLIENTS permission to update the server metadata. Server metadata is often used to store site wide configuration data that should only be updated by the server...