SnakeYAML-CVE-2022-1471-POC

SnakeYAML-CVE-2022-1471-POC Veracode 블로그용 코드 코드 실행을 시연하려면, 1. Maven을 사용하여 프로젝트를 빌드합니다. 2. python3 -m http.server 8080을 실행하여 HTTP 서버를 실행합니다. 3. exploit.java를 실행합니다. 서버에서 HTTP GET 요청이 관찰되어야 합니다. 4. SnakeYAML 2.0이 공격을 어떻게 방지하는지 시연하려면, pom.xml에서 1.33 의존성을 주석 처리합니다. 5. 2.0 의존성의 주석을 해제한 후 프로젝트를 다시 빌드합니...

CVE-2026-82428

Description Dependency artifacts uploaded with storm jar --artifacts were stored under a blob key derived only from the Maven coordinate, for example dep---.jar. The key was therefore identical for every user of the cluster and predictable in advance. When the blob already existed, the uploader...

CVE-2026-82427

Description A topology's topology.blobstore.map lets the submitter choose a local name for each blob that the supervisor localises. That name was used to build a path under the topology's working directory without normalisation, in both AsyncLocalizer and Container.createBlobstoreLinks, and the...

CVE-2026-57123

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, ToolsMCPServer.runsse and launchtoolsmcpserver bind to 0.0.0.0 and create /sse and /messages/ routes without invoking the available SecurityConfig authentication, origin-validation, or DNS-rebinding controls. Any reachable...

CVE-2026-25687

A race condition in the ZPA tunnel handler of affected versions of Zscaler Client Connector ZCC allows a heap corruption, resulting in a denial of service client crash and potentially arbitrary code execution in the context of the ZCC process...

CVE-2020-5902

요약 BIG-IP 버전 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1 및 11.6.1-11.6.5.1에서 Traffic Management User InterfaceTMUI, 구성 유틸리티라고도 함에 공개되지 않은 페이지에서 원격 코드 실행RCE 취약점이 존재합니다. 크레딧: Positive Technologies의 Mikhail Klyuchnikov 개념 증명 root@kitploit:...

log4j2_vul_local_scanner

Log4j2 취약점 로컬 스캐너 CVE-2021-45046 Log4j 취약점 로컬 탐지 스크립트입니다. 호스트의 모든 Java 프로세스를 스캔하여 취약한 log4j-core jar 패키지가 도입되었는지, 원격 코드 실행 공격CVE-2021-45046에 노출될 가능성이 있는지 확인한 후 스캔 보고서를 지정된 서버에 업로드합니다. 호스트의 모든 Java 프로세스를 스캔하여 log4j2 원격 코드 실행CVE-2021-45046의 영향을 받는지 확인한 후 보고서를 API 서버에 업로드합니다. python2.7 / 2.6 / 3.x에서...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084 Confluenceサーバー上でのリモートコード実行。 Dork Fofa: app="ATLASSIAN-Confluence" 使用方法 ヘルプ情報を表示します。 root@kitploit: python PoC.py 個別のWebサイトに対する脆弱性確認。 root@kitploit: python PoC.py -u https://1.1.1.1 コマンド実行。 root@kitploit: python PoC.py -u https://1.1.1.1 -e 'cat /etc/passwd' バッチテスト。...

CVE-2026-90947 Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file

A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicio...

CVE-2026-90947

This vulnerability affects GIMP's Lighting Effects filter . When processing a specially crafted lighting preset file , the filter fails to properly validate the number of light sources, leading to an out-of-bounds write that corrupts memory. Exploitation requires a user to open a malicious preset...

EUVD-2026-77593

A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicio...

CVE-2026-90947

A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicio...

lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href

A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...

lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href

A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...

CVE-2026-21018

SveService 버퍼 오버플로우 Samsung SMR May 2026 SVE-2026-0478CVE-2026-21018 영향을 받는 버전: Android 14, 15, 16 공개 상태: 비공개 제보 SMR May-2026 Release 1 이전의 SveService에서 발생하는 경계를 벗어난 쓰기Out-of-bounds write로 인해 로컬 권한 공격자가 임의 코드를 실행할 수 있습니다. 패치는 적절한 입력 검증을 추가합니다. 경고: 이것은 교육 목적의 개념 증명PoC일 뿐입니다. 공부 외의 목적으로 사용하는 모든 행위에...

lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href

A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...

CVE-2022-30507-PoC

설명 자바스크립트 코드 실행을 통한 원격 코드 실행RCE - 렌더링 프로세스를 담당하고 Node.js 코드에 접근하는 nodeintegration에 의한 XSSCross-site-scripting 및 렌더링 프로세스 PoC 동영상 참고 https://www.vicarius.io/vsociety/blog/arbitrary-code-execution-in-notable-cve-2022-30507...

CVE-2018-15133

CVE-2018-15133 Laravel 역직렬화 RCE pip install requests colorama multiprocessing...

CVE-2024-23346

🚀 CVE-2024-23346 Chemistry - HTB 이 저장소는 Hack The Box HTB의 "Chemistry" 머신에서 사용하기 위한 결정학 정보 파일CIF을 포함합니다. CIF 파일 예제 root@kitploit: dataExample celllengtha 10.00000 celllengthb 10.00000 celllengthc 10.00000 cellanglealpha 90.00000 cellanglebeta 90.00000 cellanglegamma 90.00000...

xwiki-cve-2025-24893-poc

XWiki RCE 익스플로잇 PoC CVE-2025-24893 개요 이 저장소는 CVE-2025-24893으로 식별된 XWiki 원격 코드 실행RCE 취약점에 대한 개념 증명PoC 익스플로잇을 포함합니다. 이 취약점은 공격자가 SolrSearch 엔드포인트에 조작된 요청을 보내 대상 XWiki 인스턴스에서 임의의 코드를 실행할 수 있도록 합니다. 이 스크립트는 HTTP 및 HTTPS 대상 모두를 지원합니다. ⚠️ 면책 조항 : 이 PoC는 교육 및 연구 목적으로만 제공됩니다. 명시적 허가 없이 시스템에 이 코드를 무단 사용하는...