CVE-2026-15981

CVE-2026-15981 SAML Single Sign On = 5.4.4 - SAMLResponse パラメータによる未認証の認証回避 CVE-2026-15981 SAML Single Sign On ≤ 5.4.4 — 未認証の認証回避 概念実証（PoC）エクスプロイト 不正な署名 → opensslverify が -1 を返す → PHP の弱い型変換で true と評価 → 管理者として wpsetauthcookie が実行 脆弱性概要 説明 WordPress 用プラグイン「SAML Single Sign On – SSO Login」は、5.4.4...

CVE-2026-53576

Kestra 未認証RCEエクスプロイト CVE-2026-53576 未認証リモートコード実行につながる重大な認証バイパス エクスプロイト • 脆弱性の詳細 • 影響 • 対策 ⚠️ 免責事項 このツールは教育目的および許可を得たセキュリティテスト専用です。 所有していない、または明示的な書面によるテスト許可がないシステムに対して使用しないでください 。 違法行為に使用しないでください 。 作者は本ツールの誤用について一切責任を負いません 。 ご自身の責任 で使用してください。 📋 目次 概要 脆弱性の詳細 エクスプロイトの使用方法 インストール 使用例 影響 対策 タイムライン 参考情...

Antiphishing v33854571962

Antiphishing — Predictive Phishing Intelligence for Suricata DONATE · DASHBOARD VECTORS · CONTRIBUTING · SUBMIT A VECTOR · REST API CTI · WIKI Predictive Phishing Intelligence for Suricata — Preemptive Defense from Day Zero Antiphishing is an open-source GPLv3 Cyber Threat Intelligence CTI...

Kernel-exploitation

커널 익스플로잇 decompress.sh CPIO 아카이브에서 파일 추출 root@kitploit: !/bin/sh mkdir fs cd fs cp ../initramfs.cpio.gz ./initramfs.cpio.gz gunzip ./initramfs.cpio.gz cpio -idm ../initramfs.cpio.gz &&\ cd .. &&\ gunzip -f initramfs.cpio.gz &&\ ./run.sh ext4 파일시스템 아카이브인 경우 root@kitploit: mount ./initramfs.cpio.gz...

vankyo-s30-bootloader-unlock

Vankyo S30 Bootloader Unlock Unlock the bootloader on a Vankyo MatrixPad S30 Unisoc SC9863A using the CVE-2022-38694 FDL1 method. The S30's BootROM accepts unsigned FDL1 in download mode without requiring the ROP bypass, which simplifies the unlock significantly. Quick Start root@kitploit:...

CVE-2025-52413

CVE-2025-52413 — Particle Device OS BLE 버퍼 오버플로우 발견자 : Golden Ticket Labs 벤더 : Particle 배정 날짜 : 2025년 8월 12일 MITRE 설명 Particle Device OS v5.6.0 의 blecontrolrequestchannel.cpp 구성 요소에서 발생하는 버퍼 오버플로우는 64바이트 버퍼로의 무제한 memcpy로 인해 임의 함수 포인터 덮어쓰기를 가능하게 합니다. 인접한 ThreadRunner::eventHandler 콜백 호출과 결합되면 안정적인...

OESA-2026-3704 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net: hns3: add VLAN id validation before using Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The lengt...

OESA-2026-3703 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix sc7280 lpass potential buffer overflow Case values introduced in commit 5f78e1fb7a3e "ASoC: qcom: Add driver support for audioreach solution" cau...

OESA-2026-3701 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: staging: greybus: uart: fix tty use after free User space can hold a tty open indefinitely and tty drivers must not release the underlying structures until the...

OESA-2026-3702 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9fdcancelled Syzkaller reports a KASAN issue as below: general protection fault, probably for non-canonical address...

OESA-2026-3700 python-GitPython security update

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. Security Fixes: GitPython before 3.1.57 contains an incomplete denylist in the unsafegitarchiveoptions guard that omits --add-file and --add-virtual-file options...

OESA-2026-3699 python-GitPython security update

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. Security Fixes: GitPython before 3.1.57 contains an incomplete denylist in the unsafegitarchiveoptions guard that omits --add-file and --add-virtual-file options...

OESA-2026-3660 python-gunicorn security update

GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn...

OESA-2026-3659 python-gunicorn security update

GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn fail...

OESA-2026-3657 python-gunicorn security update

GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn...

OESA-2026-3631 perl-DBI security update

The DBI is the standard database interface module for Perl. It defines a set of methods, variables and conventions that provide a consistent database interface independent of the actual database being used. It is important to remember that the DBI is just an interface. The DBI is a layer of "glue...

OESA-2026-3630 perl-DBI security update

The DBI is the standard database interface module for Perl. It defines a set of methods, variables and conventions that provide a consistent database interface independent of the actual database being used. It is important to remember that the DBI is just an interface. The DBI is a layer of "glue...

OESA-2026-3629 perl-DBI security update

The DBI is the standard database interface module for Perl. It defines a set of methods, variables and conventions that provide a consistent database interface independent of the actual database being used. It is important to remember that the DBI is just an interface. The DBI is a layer of "glue...

OESA-2026-3628 perl-DBI security update

The DBI is the standard database interface module for Perl. It defines a set of methods, variables and conventions that provide a consistent database interface independent of the actual database being used. It is important to remember that the DBI is just an interface. The DBI is a layer of "glue...

OESA-2026-3625 openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never...