CVE-2019-1002101-Helpers

kubectlcpCVE-2019-1002101 CVE-2019-1002101을 위한 PoC 도우미 스크립트 및 Dockerfile 자세한 정보는 https://www.twistlock.com/labs-blog/disclosing-directory-traversal-vulnerability-kubernetes-copy-cve-2019-1002101/ 및...

CP-PLUS-EZ-P21-CVE-2026-65893-65894

🔐 Security Analysis of the CP PLUS EZ-P21 IP Camera CVE-2026-65893 CVE-2026-65894 Arbitrary Code Execution & Improper Authentication – CP PLUS EZ-P21 IP Camera Overview This repository documents two security vulnerabilities identified in the CP PLUS EZ-P21 IP Camera , an IP-based surveillance...

POC-CopyEscape-CVE-2026-17106

CopyEscape — CVE-2026-17106 PoC CopyEscapeCVE-2026-17106에 대한 교육용 개념 증명PoC입니다. docker cp의 TOCTOU 레이스 조건 취약점으로, 악성 컨테이너가 Docker 호스트에 임의의 파일을 쓸 수 있게 합니다. 이 취약점을 발견하고 "CopyEscape: Taking Over Docker Hosts with docker cp" 블로그에 문서화한 masasron 의 원래 연구에서 영감을 받았습니다. 목차 1. 요약 2. 법적 고지 3. 공격 체인 구조 4. 요구 사항 5...

CP Image Store with Slideshow <= 1.0.67 - SQL Injection

The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the orderingby query parameter before using it in a SQL statement in pages where the codepeople-image-store is embed, allowing unauthenticated users to perform an SQL injection attack. id: CVE-2022-1692...

CVE-2023-28467

MyBB 1.8.33 User CP 이메일 지속형 XSS root@kitploit: - MyBB 1.8.33 User CP email persistent XSS - Mybb version "@cve.com 해결 방법 MyBB 버전 1.8.34 이상으로 업그레이드하십시오...

CVE-2026-17106

CVE-2026-17106 — CopyEscape:docker cp 컨테이너에서 호스트로의 임의 파일 쓰기 HackSpeak 배포 이미지입니다. 이 저장소는 Imperva 레드팀Ron Masas이 공개한 CopyEscape PoCCVE-2026-17106의 배포 이미지 이며, 코드는 업스트림과 일치합니다. 업스트림에 LICENSE가 포함되어 있지 않아 배포 관례에 따라 MIT License, Copyright c 2026 HackSpeak 를 적용하며, 소스 코드의 저작권은 원저작자에게 있습니다. ⚠️ 보안 연구 및 승인된 테스...

CopyEscape-CVE-2026-17106

CopyEscape: docker cp로 Docker 호스트 장악하기 CVE-2026-17106 이 저장소는 블로그 게시물 CopyEscape:docker cp로 Docker 호스트 장악하기 — CVE-2026-17106에 대한 개념 증명PoC 저장소입니다. CopyEscape를 사용하면 악성 실행 컨테이너가 Docker의 아카이브 생성 프로세스와 경쟁하여 일관되지 않은 tar 스트림을 만들 수 있습니다. 취약한 Docker CLI는 추출 중에 심어진 심볼릭 링크를 따라가 docker cp를 실행하는 사용자가 선택한 로컬 대상...

CP-XR-DE21-S--4G-Router-Vulnerabilities

CP-XR-DE21-S--4G-Router-Vulnerabilities 이 보고서는 발견자 Yashodhan Vivek Mandke에게 할당된 라우터 UART 취약점에 대해 예약된 CVE-2025-44039에 대한 것입니다. 이 저장소에서 보고서 PDF를 다운로드하십시오...

CVE-2022-24734

CVE-2022-24734 PoC RCE можно получить в панели администратора MyBB в разделе Конфигурация - Добавить новую настройку. Пользователь должен иметь права на добавление или обновление настроек. Это протестировано на MyBB 1.8.29. Источники: https://github.com/mybb/mybb/...

CVE-2026-19412

This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware. An attacker with access to the local network could exploit this vulnerability b...

EUVD-2026-67719

This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware. An attacker with access to the local network could exploit this vulnerability b...

CVE-2026-19412 Hardcoded Credentials Vulnerability in CP Plus CP-XR-DE21-S Router

This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware. An attacker with access to the local network could exploit this vulnerability b...

CVE-2026-19412

CVE-2026-19412 affects the CP Plus CP-XR-DE21-S Router due to hardcoded HTTP Digest authentication credentials embedded in the firmware, which are identical across all devices running the affected firmware. An attacker with adjacent network access (no privileges required) can obtain these credent...

PT-2026-83121

Name of the Vulnerable Software and Affected Versions CP Plus CP-XR-DE21-S affected versions not specified Description The CP Plus CP-XR-DE21-S Router contains hardcoded HTTP Digest authentication credentials within its firmware. These credentials are identical across all devices running the...

CVE-2026-78281

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

CVE-2026-78281 WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

EUVD-2026-66940

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

CVE-2026-78281

The WordPress plugin CP Media Player (versions

PT-2026-82171

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the s390/vfio ccw component when the cp init function fails. While the cp free routine is used to unpin or free memory after successful I/O or when cp prefetch...

WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin CP Media Player versions = 1.3.0...