joomla_rce_CVE-2015-8562

joomlarceCVE-2015-8562 Joomla! 3.4.6 未満のすべてのバージョンは脆弱であることが知られています。ただし、悪用が可能なのは PHP 5.5.29 未満、5.6.13 未満、および 5.5 未満のバージョンです。 デモ : https://www.youtube.com/watch?v=twqYpn1ir4o...

CVE-2026-24733

CVE-2026-24733 CVE-2026-24733とは？ Apache Tomcatは、特定のsecurity-constraint設定において、HTTP/0.9形式のHEADリクエストを誤って処理していました。 CVE-2026-24733 防御的検証ツール CVE-2026-24733 （Apache TomcatのHTTP/0.9 HEAD security-constraintバイパス）に対応する、軽量で依存関係のないPythonセキュリティ検証ツールです。 本プロジェクトは以下の用途を想定しています： ブルーチーム SOCアナリスト 脆弱性管理チーム...

maat

About Maat is an open-source Dynamic Symbolic Execution and Binary Analysis framework. It provides various functionalities such as symbolic execution, taint analysis, constraint solving, binary loading, environment simulation, and leverages Ghidra's sleigh library for assembly lifting:...

CVE-2022-3602

CVE‑2022‑3602 これは何ですか？ このドキュメントとリポジトリは、OpenSSLにおけるpunycodeバッファオーバーフローの問題であるCVE‑2022‑3602の解説です。これは「アンチPoC」であり（この問題は悪用可能ではないように見えます）、独自にOpenSSLをビルドしている方やコンパイラメンテナ向けの内容です。...

opensource_defect_repare_cc

要件 脆弱性の発見と修正...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

CVE-2026-93601

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

UBUNTU-CVE-2026-93601

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

CVE-2024-43998

CVE-2024-43998 説明 CVE-2024-43998 : Blogpoet テーマにおける認可欠落の脆弱性により、ACLによって適切に制限されていない機能へのアクセスが可能になります。この問題は、Blogpoet バージョン n/a から 1.0.3 までに影響します。 使用方法 root@kitploit: usage: CVE-2024-43998.py -h -u URL -p PLUGIN CVE-2024-43998 exploit by Nxploited options: -h, --help show this help message and exit -u...

tomcat security, bug fix, and enhancement update

An update is available for tomcat. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages...

cve-2026-43515-poc

CVE-2026-43515 — Apache Tomcat 安全约束绕过 可利用性判定： 确认可利用。针对受分割的 配置保护的资源的 POST 请求会完全绕过身份验证。所需 web.xml 配置在标准部署中不常见——详见分析。 目录 概述 受影响版本 根本原因 分析 仓库结构 依赖要求 使用方法 预期输出 参考链接 免责声明 概述 CVE-2026-43515 是 Apache Tomcat 安全约束评估逻辑中的一个漏洞。当一个 定义了多个 块，这些块共享相同的 URL 扩展名模式（例如 .html），但每个块声明了不同的 HTTP 方法时，Tomcat 仅对第一个 匹配集合中声明的...

DEBIAN-CVE-2026-93601

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

CVE-2026-93594

ArcadeDB Maven artifact com.arcadedb:arcadedb-engine through 26.8.1 enforces its per-type/per-record access-control rules only in LocalBucket, keyed on file id. Query-execution paths that reach record data through LSM index files or the TimeSeries engine never invoke that permission check, so an...

EUVD-2026-82896

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

CVE-2026-93601 rustls webpki 0.101.0 before 0.103.12 Name Constraint Bypass

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

CVE-2026-93601

rustls-webpki (the Rust webpki fork used by rustls) versions ≥ 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly evaluated permitted-subtree DNS name constraints for wildcard certificates. For example, a name constraint of accept.example.com was treated as satisfied by a certificate f...

CVE-2026-93601 rustls webpki 0.101.0 before 0.103.12 Name Constraint Bypass

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

CVE-2026-93601 rustls webpki 0.101.0 before 0.103.12 Name Constraint Bypass

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

CVE-2026-93600 rustls webpki Name Constraints URI Validation Bypass

rustls-webpki rustls/webpki versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Because name constraints are restrictions on otherwise properly issu...

tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve

A flaw was found in Apache Tomcat. This vulnerability, located in the rewrite valve, is due to improper handling of URL encoding hex encoding. A remote attacker could exploit this to bypass security constraints in certain configurations, potentially gaining unauthorized access or performing actio...