SonicWall SMA1000 Appliances OS Command Injection Vulnerability

SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution...

AppNitro MachForm 30 Shell Upload

AppNitro MachForm version 30 suffers from a remote shell upload vulnerability. CVE-2026-78839 Description An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file. Successful exploitation of this issue requires t...

RHEL 8 : freerdp (RHSA-2026:62571)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62571 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Deserialization vulnerability

Jenkins uses serialization and deserialization to load and save configuration and build data using XStream. Types storing their configuration in their own files usually config.xml or build.xml, like agents, items, or builds, are indicated as such by implementing the Java interface PersistenceRoot...

The vulnerability of the Views component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...

The vulnerability of the Base component in Google Chrome and Microsoft Edge web browsers allows a hacker to execute arbitrary code.

The vulnerability of the Base component in Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

The vulnerability of the Views component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...

PT-2026-84768

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.580 Jenkins LTS versions prior to 2.568.3 Description Objects that store their configuration in independent top-level configuration files, such as jobs and global configuration, can be smuggled as nested field value...

Linux Distros Unpatched Vulnerability : CVE-2026-84352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-84350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the...

Linux Distros Unpatched Vulnerability : CVE-2026-84326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-84335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged...

Linux Distros Unpatched Vulnerability : CVE-2026-66047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ProfilePress wp-user-avatar WordPress plugin before 4.17.2 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers...

RockyLinux 8 : wget (RLSA-2026:62144)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62144 advisory. wget: GNU Wget: Memory corruption via crafted Metalink URL CVE-2026-58469 wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to...

Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-

트리아지: CVE-2021-26855 ProxyLogon - Microsoft Exchange 이 실습의 목표는 보안 팀이 실제로 하는 것처럼 잘 알려진 실제 취약점을 트리아지하는 연습이었습니다: CVE 세부 정보를 읽고, CVSS 점수를 이해하고, 상황에 따라 실제 위험이 얼마나 높은지 추론하는 것입니다. 1단계: NVD에서 CVE 열기 국가 취약점 데이터베이스National Vulnerability Database로 가서 CVE를 검색했습니다. root@kitploit:...

cve-2023-30212

cve-2023-30212 PoC for CVE-2023-30212 using Docker CVE-2023-30212 환경 구축 및 PoC 보고서 📌 개요 이 보고서는 Vulhub에 없는 CVE-2023-30212 취약점을 대상으로 Docker 기반의 취약한 웹 환경을 직접 구성하고, PoC를 통해 해당 취약점을 입증한 내용을 담고 있습니다. CVE 번호 : CVE-2023-30212 취약점 설명 : PHP LFILocal File Inclusion을 통한 원격 코드 실행 가능성 난이도 : 고급 Vulhub에 없는 환경을 구성...

CVE-2022-20607

CVE-2022-20607 Pixel 셀룰러 펌웨어에서 경계 검사 누락으로 인해 버퍼 경계를 벗어난 쓰기out of bounds write가 발생할 수 있습니다. 이로 인해 LTE 인증이 필요한 원격 코드 실행으로 이어질 수 있습니다. 악용을 위해 사용자 상호 작용은 필요하지 않습니다. 제품: Android 버전: Android kernel Android ID: A-238914868 참조: N/A 인증| 복잡성| 벡터 ---|---|--- 사용할 수 없음| 사용할 수 없음| 사용할 수 없음 기밀성| 무결성| 가용성...

CVE-2023-47268

PrusaSlicer 임의 코드 실행 취약한 prusaslicer 버전에서 .3mf 파일을 사용한 권한 상승. sudo를 사용하여 prusaslicer를 실행할 수 있는지 확인하십시오. 리눅스 1.파일 다운로드 2.exploit.sh에서 IP와 PORT 변경 3.exploit.sh가 /tmp 디렉토리에 있는지 확인 4.다음 명령어 실행 sudo ./prusaslicer -s evil.3mf 5.Exploit.sh가 root로 실행됩니다...

CVE-2013-1081

이 스크립트는 Novell Zenworks 모바일 기기 관리MDM에 존재하는 로컬 파일 포함LFI 취약점을 이용합니다. Metasploit 모듈 - msf use auxiliary/scanner/http/novellmdmcreds msf auxiliarynovellmdmcreds show options Module options auxiliary/scanner/http/novellmdmcreds: Name Current Setting Required Description Proxies no Use a proxy chain...

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-46604 면책 조항 이 저장소는 CVE-2023-466064에 대한 개념 증명 코드를 포함하며 엄격히 교육 목적으로 제공됩니다. 저자 및 기여자는 불법 활동을 지지하지 않습니다. 여기에 제시된 정보는 학술, 보안 연구 및 테스트 목적, 그리고 HackTheBox의 Broker 머신의 현재 해결을 위한 것입니다. 이 익스플로잇을 사용함으로써 귀하는 자신의 행동에 대한 전적인 책임을 지는 것에 동의합니다. 저자는 어떠한 책임도 지지 않으며, 이 프로그램으로 인해 발생하는 오용이나 손해에 ...