CVE-2017-1000117-test

動作説明 これはCVE-2017-1000117の脆弱性で動作するものです。 このレポジトリをroot権限でgitコマンドに--recurseオプションをつけてクローンをすると、 勝手に12345ポートでリッスンするhttpサーバが動きます。 httpサーバの動作を停止するにはプロセス番号を調べてkillしてください。 動作が確認されたOS CentOS7 macOS Sierra Debian8 実行コマンド 以下のコマンドを実行する。完了するとコンソールが止まってしまうのでCtrl + Cで抜けるようにする。 root@localhost $ git clone --recurse...

CVE-2024-24576-PoC---Nim

Windows で Nim を使ったコマンドインジェクション脆弱性の調査 https://foxoman.hashnode.dev/exploring-command-injection-vulnerabilities-in-windows-with-nim?showSharer=true 以下は、Nim のコード実験で異なるペイロードを使用したテスト結果に基づく要約表です。 Payload| execProcessNoQuoteShell| execProcessQuoteShell| execShellCmd ---|---|---|--- nim &calc| 未通過| 未通過| ...

CVE-2026-103040

LightLLM versions through 1.2.0 are vulnerable to remote code execution (RCE) within the router profiler service when the --enable_profiling flag is used. The root cause is the exposure of an unauthenticated RPyC server with pickle deserialization enabled. This allows an attacker to execute arbit...

CVE-2026-103040 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service

LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enableprofiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted...

CVE-2026-103040 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service

LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enableprofiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted...

CVE-2026-103040 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service

LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enableprofiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted...

CVE-2026-102792

A command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 . The flaw is located in the set_syslog function within the /api/ZRnetwork/set_syslog file. By manipulating the conloglevel or log_size arguments, a remote attacker can execute arbitrary commands. The documents confirm...

CVE-2026-102792 Ziroom ZHOME A0101 set_syslog command injection

A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. This affects the function setsyslog of the file /api/ZRnetwork/setsyslog. The manipulation of the argument conloglevel/logsize results in command injection. The attack may be performed from remote. The exploit is now public and may be...

CVE-2026-102792 Ziroom ZHOME A0101 set_syslog command injection

A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. This affects the function setsyslog of the file /api/ZRnetwork/setsyslog. The manipulation of the argument conloglevel/logsize results in command injection. The attack may be performed from remote. The exploit is now public and may be...

FC3er

FC3er | CVE-2022-0591 - Formcraft3 CVE-2022-0591 - Formcraft3 install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh 使用方法 bash fc3er.sh yourlist.txt thread 参照 https://vulners.com/cve/CVE-2022-0591...

Arbitrary Argument Injection

Overview jupyterlab is a JupyterLab computational environment. Affected versions of this package are vulnerable to Arbitrary Argument Injection via the uninstall function in jupyterlab/extensions/pypi.py, where extension names passed to the uninstall endpoint are not validated before being...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via path interpolation in the generated activate.sh bash and activate.fish fish activation scripts. When a virtualenv is created with a path containing shell metacharacters, those characters are embedded unquoted into...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the BatchActivator.quote method in src/virtualenv/activation/batch/init.py, which previously returned its input string unchanged. When a virtualenv is created in a path containing cmd.exe operator characters such a...

CVE-2026-102904

A flaw was found in JupyterLab. When processing extension uninstallation requests, user-supplied package names are passed to the underlying package manager without properly filtering command-line options. An authenticated user with extension management access can exploit this argument injection...

Security Bulletin: EDB Postgres AI Database with IBM is affected by Multiple Vulnerabilities.

Summary Multiple Vulnerabilities found in EDB PGAI database products. Hence, IBM strongly recommends upgrading to 18.6 Vulnerability Details CVEID:CVE-2026-30922 DESCRIPTION: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.16 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.16 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Phishing Abuses RMM Tools for Persistent Access

In this article 1. Attack chain overview 2. Mitigation and protection guidance 3. Learn More In July 2026, Microsoft Defender Experts observed phishing campaigns targeting organizations across multiple industries that distributed a masqueraded MSP360 Remote Monitoring and Management RMM installer...

CVE-2026-10817

CVE-2026-10817 捐赠 帮助维护此项目 如果您觉得此项目有用，请考虑通过 PayPal 或 ABA Mobile 支持其持续维护。 ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ 每笔捐赠的百分之十将捐献给 Kantha Bopha 儿童医院。 | 选择支付方式 使用 ABA Mobile 扫描 · 点击放大 ---|--- ⚡ 简单用法 直接从 GitHub 运行最新版本的外部下载脚本： bash 此命令需要 Bash 和...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88771

watchTowr-vs-Citrix-Netscaler-CVE-2026-88771 Citrix NetScaler CVE-2026-88771 检测工件生成器 技术细节请参阅我们的博客文章。 实际检测 ./watchTowr-vs-Citrix-Netscaler-CVE-2026-88771.py --target https://netscaler.local/ --command 'id/var/tmp/watchTowr' / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / |...

CVE-2026-94545

CVE-2026-94545 Next.js next/og 未认证 RCE ★ CVE-2026-94545 Next.js next/og SVG 注入导致原生 RCE ★ https://github.com/user-attachments/assets/e297b40b-36ad-4a9a-b0c1-a64429bc0160 概述 next/og 通过使用 Satori 将 JSX 渲染为 SVG，然后对该 SVG 进行光栅化来构建 Open Graph 图像。Satori 将用户提供的文本写入 SVG 时未进行转义（CWE-116），因此请求可以闭合周围的元素并注入自己的 S...