CVE-2021-41773

CVE-2021-41773 The GREENDARK hospital infrastructure was configured by Dr. Gusto Rogue prior to his termination. No further details are provided. 사용법: python3 greendark.py...

CVE-2019-12409

CVE-2019-12409: Apache Solr의 잘못된 기본 구성으로 인한 RCE 취약점 Apache Solr 8.1.1 및 8.2.0 릴리스에는 Solr와 함께 제공되는 기본 solr.in.sh 구성 파일에 안전하지 않은 설정이 포함되어 있습니다. 이 취약점을 초래하는 설정은 다음과 같습니다. "solr.in.sh"에서: ENABLEREMOTEJMXOPTS="true" JMX 서비스를 활성화합니다 "solr.cmd"에서: -Dcom.sun.management.jmxremote.local.only=false JMX에 대한 ...

CVE-2024-52301-Research

CVE-2024-52301-연구 CVE-2024-52301에 관한 약간의 연구입니다. 이 취약점을 살펴보면서 Laravel이 어떻게 취약한지 알고 싶었습니다. 이를 위해 6.20.44와 6.20.45 버전을 diff하여 GET 매개변수가 애플리케이션 구성을 어떻게 변경할 수 있는지 추적했습니다. 이에 대해 X와 BlueSky에 글을 올렸습니다: https://x.com/0xntrm/status/1857504510609965206...

CVE-2022-43332

CVE-2022-43332 WonderCMS におけるクロスサイトスクリプティング 説明: Wondercms v3.3.4 のクロスサイトスクリプティング（XSS）脆弱性により、潜在的な攻撃者が、設定パネルのサイトタイトルフィールドに注入された巧妙に細工されたペイロードを介して、任意の Web スクリプトまたは HTML を実行できる可能性があります。さらに、Cookie に HttpOnly フラグが設定されていないことと組み合わせることで、ログイン中のユーザーの Cookie を窃取するために悪用される可能性があります。 再現方法: 再現するには、wondercms.com...

Docker IPsec VPN Server

English | 简体中文 | 繁體中文 | Русский IPsec VPN Server on Docker Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Based on Alpine 3.23 or Debian 12 with Libreswan IPsec VPN software and xl2tpd L2TP daemon. An IPsec VPN encrypts your network traffic, so that nobody betwee...

CVE-2026-106455: Server-Side Request Forgery (SSRF)

Backstage is an open framework for building developer portals. From 0.11.12 until 1.14.7 and 1.15.5, the @backstage/plugin-techdocs-node package is affected by improper validation of mkdocs plugin configuration in techdocs. An authenticated attacker with control over a TechDocs source repository...

PT-2026-107285

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled...

PT-2026-107113

Name of the Vulnerable Software and Affected Versions Hydra versions prior to 1.3.6 Hydra versions prior to 1.4.0.dev9 Description Hydra passes Python logging configuration to logging.config.dictConfig without applying the target policy to handler class values or formatter, filter, handler, queue...

ROS-20261006-73-0366

The vulnerability of the acpiecsetup function in the drivers/acpi/ec.c file of the Linux ACPI configuration and power management extension driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2026-106355

Transient DOS when processing a continuous receive command with a zero-sized global configuration override...

PT-2026-107302

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.14.6 Backstage versions prior to 1.15.4 Description The @backstage/plugin-techdocs-node package contains a flaw in the techdocs backend that allows a bypass of the mkdocs configuration sanitizer. Users capable of...

PT-2026-106359

Insufficient verification of data authenticity CWE-345 in the external OIDC login callback in Cloud Foundry UAA v4.5.0 to v79.6.0 inclusive allows an authenticated UAA user to bypass the OAuth authorization-code exchange and establish an authenticated external-OIDC browser session, via submitting...

PT-2026-106826

Name of the Vulnerable Software and Affected Versions Quasar Framework versions 1.0.0 through 3.2.9 Description The @quasar/app-vite component recursively removes the resolved build.distDir before the build process begins. It fails to reject the project root, user home directory, filesystem roots...

PT-2026-107138

A stored cross-site scripting XSS vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful...

CVE-2026-106440: Use of Externally-Controlled Input to Select Classes or Code

Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.customsearchspace, resolves it with hydra.utils.getmethod, and later invokes the returned...

PT-2026-106633

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: restore the hardware filters on open bcmgenet hfb init runs INIT LIST HEAD on priv-rxnfc list, which drops every rule off the list, and bcmgenet open calls it on each ifup. Every rule the user configured is silentl...

Buffer Overflow vulnerability exists in the Brocade Fabric OS WebTools management (CVE-2026-94587)

: A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with permissions to perform configuration downloads using...

Command Injection via Unsanitized Remote Brocade Fabric OS Configuration Import Utility

: An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When performing a configuration download operation, the management daemon will relay configuration parameters, user-supplied relay host...

Authenticated Privilege Escalation via Command Injection in Timezone Configuration Processing

: An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the system fails to sanitize input values...

Command Injection vulnerability exists in the Brocade Fabric OS WebTools management (CVE-2026-94586)

: A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with permissions to perform configuration downloads using...