RCE_CVE-2024-7954-

RCECVE-2024-7954- SPIP 4.30-alpha2, 4.2.13 및 4.1.16 이전 버전에서 사용되는 porteplume 플러그인은 임의 코드 실행 취약점에 취약합니다. 원격의 인증되지 않은 공격자는 조작된 HTTP 요청을 전송하여 SPIP 사용자 권한으로 임의의 PHP 코드를 실행할 수 있습니다. CRITICAL 익스플로잇: POST /index.php?action=porteplumeprevisu HTTP/1.1 Host: Hostname Content-Type:...

CVE-2021-38647-POC-and-Demo-environment

Details OMIGod - CVE-2021-38647 Open Management InfrastructureOMI, 이전에는 NanoWBEM으로 알려짐는 마이크로소프트와 The Open Group이 개발한 오픈 소스 Common Interface ModelCMI 관리 서버입니다. OMI는 대부분의 Azure Linux VM에서 발견되는 소프트웨어 에이전트이지만, 많은 사람들이 그 존재를 모릅니다. 9월 14일, Wiz 연구팀은 OMI의 네 가지 취약점을 상세히 설명하는 기사를 발표했습니다. 이 취약점들은 쉽게 악용될 수...

CVE-2020-5902-Vuln-Checker

CVE-2020-5902 취약점 확인기 N|Solid 동료 연구원들과 함께 취약점을 분석하던 중, 현재 대부분의 취약점 테스트 방법이 시스템을 손상시키는 형태로 분류될 수 있다는 생각에 이르렀습니다. 우리는 스캔 중인 시스템을 손상시키지 않으면서 취약점을 테스트할 수 있는 방법을 개발하고자 했습니다. 이를 위해 작은 파이썬 도구를 작성했습니다. 이 도구는 시스템 로그인 페이지에 GET 요청을 보내며, 이를 통해 시스템이 접근 가능하고 확인 가능하며 공격자에 의해 손상될 가능성이 있음을 보여줍니다. 또한 시스템 정보나 클라이언트...

CVE-2025-0108-Authentication-Bypass-checker

이 도구는 대상 PAN-OS 장치가 CVE-2025-0108 인증 우회 취약점에 취약한지 테스트합니다. 조작된 HTTP 요청을 대상에 전송하고 응답을 분석하여 장치가 악용 가능한지 확인합니다. 사용법 단일 IP python authbypasscve20250108.py -u https://target-url.com 다중 IP python authbypasscve20250108.py -f urls.txt...

CVE-2026-23744-Remote-Code-Execution-POC

CVE-2026-23744 - MCPJam inspector 원격 코드 실행: 개념 증명POC MCPJam inspector 3. 익스플로잇을 실행합니다 python3 exploit.py...

westone-CVE-2020-14883-scanner

westone-CVE-2020-14883-scanner 원격 공격자는 인증 없이 WebLogic Server Console을 장악하기 위해 특수한 HTTP 요청을 구성할 수 있습니다. 설치 및 사용법 git clone https://github.com/Osyanina/westone-CVE-2020-14883-scanner.git cd westone-CVE-2020-14883-scanner cmd CVE-2020-14883.exe 영향받는 버전 Oracle WebLogic Server 버전 10.3.6.0 Oracle...

EUVD-2026-88166

Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service DoS condition...

Cisco Identity Services Engine (cisco-sa-ise-multi-hrP9jQSQ)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web...

Cisco Identity Services Engine (cisco-sa-ise-rce-se7bYU57)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must...

CVE-2026-76438

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...

CVE-2026-20285

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-si...

CVE-2026-76438 Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...

CVE-2026-76438 Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...

CVE-2026-76438

CVE-2026-76438 affects the web-based management interface of Cisco BroadWorks CommPilot Application Software , where missing authorization checks allow an authenticated, remote attacker with low privileges to send a crafted HTTP request and alter configurations on select pages . The vulnerability...

EUVD-2026-81140

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafte...

CVE-2026-20282 Cisco Identity Services Engine Authenticated Write Vulnerability

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafte...

CVE-2026-20282

Cisco Identity Services Engine (ISE) contains an authenticated write vulnerability caused by insufficient validation of user-supplied input . An attacker with valid administrative credentials can send a crafted HTTP request to gain write access to the underlying operating system . Cisco assigned ...

CVE-2026-20176 Cisco Identity Services Engine Remote Code Execution Vulnerability

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid high-privileged administrative credentials. This vulnerability is due to...

CVE-2026-20176

Cisco Identity Services Engine (ISE) contains a remote code execution vulnerability caused by insufficient validation of user-supplied input in an HTTP endpoint. An attacker with high-privileged administrative credentials can send a crafted HTTP request to achieve system-level access on the under...

CVE-2026-76423

CVE-2026-76423 affects the REST API web service in Cisco ISE and Cisco ISE-PIC , where insufficient authorization checks allow an unauthenticated remote attacker to gain administrative access by sending a crafted HTTP request to the exposed REST API port. A successful exploit permits the attacker...