CVE-2022-2414-Proof-Of-Concept

CVE-2022-2414-Proof-Of-Concept pki-core에서 결함이 발견되었습니다. XML 문서를 파싱할 때 외부 엔터티에 접근하면 XML 외부 엔터티XXE 공격으로 이어질 수 있습니다. 이 결함으로 인해 원격 공격자는 특수하게 조작된 HTTP 요청을 전송하여 임의 파일의 내용을 검색할 수 있습니다. 참조: https://nvd.nist.gov/vuln/detail/CVE-2022-2414 https://access.redhat.com/security/cve/CVE-2022-2414...

Project-CVE-2015-1635

CVE-2015-1635 CVE-2015-1635,MS15-034 취약점 탐지 사용법 python MS15-034.py www.xxx.com:80 테스트 프로그램 HTTP.sys 원격 코드 실행 취약점（CVE-2015-1635，MS15-034） 원격 코드 실행 취약점은 HTTP 프로토콜 스택 HTTP.sys에 존재하며, HTTP.sys가 특수하게 조작된 HTTP 요청을 올바르게 분석하지 못할 때 이 취약점이 발생합니다. 성공적으로 이 취약점을 악용한 공격자는 시스템 계정의 컨텍스트에서 임의 코드를 실행할 수 있습니다...

CVE-2026-21962

🚨 CVE-2026-21962 - 치명적인 인증 우회 취약점 🧾 요약 🔥 Oracle 미들웨어 시스템에 인증되지 않은 원격 액세스 를 가능하게 하는 최대 심각도10.0 취약점입니다. CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category : Authentication Bypass CWE : CWE-284 Improper Access Control 🧠 기술적 분석 - Authentication boundary is improperly enforced...

EUVD-2025-210998

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests...

Fortinet Fortigate Null Pointer Dereference in Log Report (FG-IR-26-173)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-173 advisory. - A NULL Pointer Dereference vulnerability CWE-476 vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all...

MiracleLinux 9 : nginx:1.26 (AXSA:2026-1869:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1869:01 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the...

RLSA-2026:67314 Important: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

nginx security update

An update is available for nginx. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other protocols, with a...

AlmaLinux 8 : nginx:1.24 (ALSA-2026:67315)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67315 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the AlmaLinux...

AlmaLinux 9 : nginx:1.24 (ALSA-2026:67308)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67308 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the AlmaLinux...

RockyLinux 10 : nginx (RLSA-2026:67314)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67314 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the RockyLin...

AlmaLinux 10 : nginx (ALSA-2026:67314)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67314 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the AlmaLinux...

nginx:1.24 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

RLSA-2026:67283 Moderate: nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

nginx:1.24 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

Important: Red Hat Security Advisory: nginx security update

An update for nginx is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

RHEL 9 : nginx:1.24 (RHSA-2026:67308)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67308 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security...

ALSA-2026:67315 Moderate: nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

RockyLinux 8 : nginx:1.24 (RLSA-2026:67315)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67315 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the RockyLinu...

RockyLinux 9 : nginx:1.24 (RLSA-2026:67308)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67308 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the RockyLinu...