CVE-2021-20717

CVE-2021-20717-EC-CUBE-XSS NVD 説明 EC-CUBE 4.0.0 から 4.0.5 におけるクロスサイトスクリプティングの脆弱性により、リモートの攻撃者が EC-CUBE を使用して作成された EC サイトの特定の入力フィールドに特別に細工されたスクリプトを注入する可能性があります。その結果、管理者の Web ブラウザ上で任意のスクリプトが実行される可能性があります。 セットアップ 1. EC Cube のクローン root@kitploit: git clone https://github.com/EC-CUBE/ec-cube.git -b 4.0.5...

CVE_2022_38181_Gazelle

FireTV 第3世代Cube 上で動作する CVE-2022-38181 のエクスプロイト これは、セキュリティ研究者 Man Yue Mo 氏の CVE202238181 用の Pixel 6 POC のフォークです。詳細な脆弱性解説は こちら をご覧ください。FireOS の32ビットユーザースペースに対応するための変更が加えられています。このPOCは、ARM Mali カーネルドライバのバグを悪用してカーネルコードの任意実行を実現し、SELinuxを無効化してrootを取得します。 ndk-21 の clang を使用してコンパイルするには以下のコマンドを使用しました：...

CVE_2022_38181_Raven

CVE-2022-38181 用エクスプロイト - FireTV 第2世代 Cube これはセキュリティ研究者 Man Yue Mo 氏の Pixel 6 POC CVE202238181 用 のフォークです。彼の詳細な脆弱性解説は こちら をご覧ください。FireOS の 32 ビットユーザースペースと、第2世代 Cube の古い Bifrost ドライバー r16p0 および Linux カーネル 4.9.113 バージョンに対応するために変更が加えられています。この POC は ARM Mali カーネルドライバーのバグを悪用して任意のカーネルコード実行を達成し、SELinux...

CVE_2022_46395_Raven

用于在FireTV第二代Cube上运行的CVE-2022-46395漏洞利用 这是安全研究员 Man Yue Mo 为 CVE-2022-46395 编写的 Pixel 6 POC 的一个分支。请阅读他关于此漏洞的详细分析文章（这里）。已做出修改以适应 FireOS 的 32 位用户空间。该 POC 利用了 ARM Mali 内核驱动程序中的一个漏洞，以获得任意内核代码执行的能力，随后用于禁用 SELinux 并获取 root 权限。 该漏洞利用已在 PS7652/3564（2023年8月下旬）中进行了修补。作为参考，以下命令用于在 ndk-21 中使用 clang 进行编译：...

CVE-2013-3651

CVE-2013-3651 PoC - EC-CUBE 2 使用 依赖 Python 3 执行 root@kitploit: $ python poccve20133651.py - e.g. $ python poccve20133651.py http://127.0.0.1:9000/ Result: Vulnerable! PoC 漏洞 | EC网站构建·改版（EC开放平台EC-CUBE） https://www.ec-cube.net/info/weakness/weakness.php?id=49 参考 JVNDB-2013-000062 - JVN iPedia...

CVE-2026-72570

A stored cross-site scripting XSS vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a crafted filename containing HTML attribute-breaking characters...

CVE-2026-72570

CVE-2026-72570 affects the project cube-root/directory-serve up to version 1.3.7. The vulnerability is a stored XSS : uploading a file with a crafted filename containing HTML attribute-breaking characters allows the attacker to inject arbitrary JavaScript into the web interface. The root cause is...

CVE-2026-72570 cube-root directory-serve - Stored Cross-Site Scripting via Malicious Filename

A stored cross-site scripting XSS vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a crafted filename containing HTML attribute-breaking characters...

CVE-2026-72570

A stored cross-site scripting XSS vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a crafted filename containing HTML attribute-breaking characters...

EUVD-2026-55237

A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option...

CVE-2026-72569 cube-root directory-serve - Unauthenticated Path Traversal Arbitrary File Deletion

A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option...

CVE-2026-72569

The CVE-2026-72569 entry describes a path traversal vulnerability in cube-root/directory-serve

EulerOS 2.0 SP13 : lcms2 (EulerOS-SA-2026-3023)

According to the versions of the lcms2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

EulerOS 2.0 SP13 : lcms2 (EulerOS-SA-2026-2973)

According to the versions of the lcms2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

TencentOS Server 3: java-1.8.0-openjdk (TSSA-2026:0809)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0809 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...

Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...

Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...

Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...

Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...