CVE-2026-101912 vulnerabilities

Vulnerabilities for packages: code-server, npm, sqlpad, lerna...

CVE-2026-76461

CVE-2026-76461 安全でないYAMLデシリアライゼーションがどのようにコード実行パスになり得るかを学ぶための、意図的に脆弱なローカル専用Pythonラボです。3つの難易度レベル、修正済みの比較用アプリ、エクスプロイトスクリプト、ヒント、ライトアップ、そして小さなスコアボードが含まれています。 安全性: このプロジェクトは使い捨てのローカルマシンまたは隔離された仮想環境でのみ実行してください。チャレンジアプリをパブリックネットワークに公開しないでください。 含まれるもの バリアント| フォーカス ---|--- Easy| 直接的な脆弱エンドポイントと明確なエクスプロイトパス...

[SECURITY] Fedora 44 Update: ruff-0.16.9-1.fc44

An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...

POC_CVE-2024-12537

CVE-2024-12537 Open WebUI 코드 포맷 DoS 실습 환경 이 저장소는 CVE-2024-12537에 대한 로컬 격리 재현 실습 환경과 nuclei 템플릿 후보를 포함합니다. 이는 Open WebUI의 코드 포맷팅 엔드포인트에서의 인증되지 않은 서비스 거부 취약점입니다. 이 실습 환경은 대규모 서비스 거부 페이로드를 보내지 않습니다. Open WebUI의 인증되지 않은 /api/version 핑거프린트 엔드포인트와 /api/v1/utils/code/format에 대한 최소 "code":"x" 요청을 통해 nucl...

cve-2020-10977-read-and-execute

CVE-2020-10977 읽기 및 실행 CVE-2020-10977 정보 HackerOne 보고서: https://hackerone.com/reports/827052 Exploit-DB: https://www.exploit-db.com/exploits/48431 실행 부분 수동 재현 방법: 읽기에서 실행까지 이 저장소 정보 getsecret.py - 주요 스크립트입니다. 먼저 thewhiteh4t의 코드를 사용하여 cve-2020-10977을 악용하고 주어진 저장소에서 secretkeybase를 추출합니다. 그런 다음...

CLEANSTART-2026-OK73778 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass

Security vulnerability affects the kube-state-metrics-fips package. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...

EUVD-2025-209814

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

EUVD-2025-209813

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2015-1925.RCE

CVE-2015-1925 The exploit targets Tivoli Fastback Server running on Windows 10 x86, build: 16299 , affecting version 6.1.4 , where an unauthenticated attacker can perform a buffer overflow through a raw socket connection , resulting in remote code execution RCE. This exploit assumes ASLR is not...

CVE-2025-55182

CVE-2025-55182 대량 탐지 도구 Next.js 프로토타입 오염 취약점CVE-2025-55182을 위한 고효율 대량 탐지 도구입니다. 취약점 소개 CVE-2025-55182는 Next.js 프레임워크의 프로토타입 오염 취약점으로, 공격자는 악성 요청을 구성하여 프로토타입 오염을 이용해 임의 코드를 실행할 수 있습니다. 이 취약점은 Next.js Server Actions를 사용하는 애플리케이션에 영향을 미칩니다. 기능 특징 ✅ 대량 탐지 - 자산을 일괄 가져와 취약점 탐지를 지원합니다 ✅ 멀티스레드 동시 처리 -...

CVE-2022-22965-Spring4Shell-Security-Operations-Analysis

CVE-2022-22965 — Spring4Shell 보안 운영 분석 활성 Spring4Shell 악용 시도에 대응하는 정보 보안 분석가 역할을 수행한 실습형 보안 운영 센터SOC 시뮬레이션입니다. 이 저장소는 초기 탐지부터 분석 및 완화까지의 전체 사고 대응 수명 주기를 문서화합니다. 고지사항: 이 프로젝트는 교육 목적으로 Forage에서 진행된 사이버 보안 직무 시뮬레이션의 일부로 완료되었습니다. 모든 분석은 통제된 시뮬레이션 환경에서 수행되었습니다. CVE-2022-22965 Spring4Shell 개요...

AlmaLinux 9.6 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1773330257)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1773330257 advisory. - Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to...

AlmaLinux 9.6 [TuxCare] Security Update: plexus-utils / plexus-utils-javadoc (ALMALINUX9.6:CLSA-2026:1777454474)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777454474 advisory. - Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus- utils before...

Rocky Linux 8 [CIQ] Security Update: redis / redis-debuginfo / redis-debugsource / redis-devel / etc (crlsa-2026_26008)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202626008 advisory. redis: RESTORE invalid memory access may allow remote code execution CVE-2026-25243 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: libtiff / libtiff-debuginfo / libtiff-debugsource / libtiff-devel / etc (crlsa-2026_69095)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202669095 advisory. libtiff: libtiff: Arbitrary code execution via processcommandopts function CVE-2026-52490 Tenable has extracted the preceding description block directly from the C...

Rocky Linux 9 [CIQ] Security Update: pg_repack / pg_repack-debuginfo / pg_repack-debugsource / pgaudit / etc Multiple Vulnerabilities (crlsa-2026_69914)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202669914 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2026-47505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause a use-after-free. A successful exploit of...

Rocky Linux 9 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc (crlsa-2026_29151)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202629151 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the CIQ securit...

Rocky Linux 9 [CIQ] Security Update: libevent / libevent-debuginfo / libevent-debugsource / etc Multiple Vulnerabilities (crlsa-2026_67910)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667910 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of...

Rocky Linux 9 [CIQ] Security Update: mariadb / mariadb-backup / mariadb-backup-debuginfo / etc (crlsa-2026_0137)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20260137 advisory. mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation CVE-2025-13699 Tenable has extracted the preceding descripti...