CVE-2026-87114: Inclusion of Functionality from Untrusted Control Sphere

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-8819-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8819-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

CVE-2007-1567

🐞 CVE-2007-1567: War FTP Daemon 1.65 - 스택 기반 버퍼 오버플로우 War FTP Daemon 1.65의 고전적인 스택 기반 버퍼 오버플로우로, 잘못된 FTP 명령을 통해 올드스쿨 원격 코드 실행을 시연합니다. 📑 목차 이 저장소가 존재하는 이유 이 취약점이 흥미로운 이유 맥락 및 영향을 받는 소프트웨어 취약점 정보 크래시 트리거 익스플로잇 🎓 이 저장소가 존재하는 이유 이 저장소는 메모리 손상 익스플로잇을 가르칠 때 사용하는 자료의 일부입니다. 정규 업무 외에도 여러 사이버보안 강좌에서 강의하며...

CVE-2025-32433

🚨 CVE-2025-32433: Erlang/OTP SSH 서버의 인증 없는 원격 코드 실행 취약점 심각한 인증 전 원격 코드 실행 취약점 Erlang/OTP 내장 SSH 데몬의 심각한 결함으로, 인증되지 않은 원격 공격자 가 인증 완료 전에 조작된 SSH 연결 프로토콜 메시지를 전송하여 완전한 원격 코드 실행RCE을 달성할 수 있습니다. 📋 개요 CVE-2025-32433 은 Erlang/OTP 의 SSH 서버 구현에 영향을 미치는 심각한 취약점CVSS 10.0입니다. 공격자는 인증 전 단계 에서 SSH 메시지 번호 80...

CVE-2012-5519

cups-root-file-read.sh ⭐ bash로 구현된 metasploit 'cupsrootfileread.rb' 모듈로, 침투 테스트 및 CTF를 위해 설계되었습니다. 주로 짧은 bash 스크립팅 연습입니다. 리눅스 시스템에서 CVE-2012-5519를 익스플로잇하는 독립 실행형 프로그램입니다. 사용자에게 대화형 프롬프트를 제공하여 여러 제한된 파일을 빠르게 읽을 수 있습니다. 익스플로잇 - CVE-2012-5519 ❗ 이 스크립트는 CUPScommon UNIX printing system 1.6.2의 취약점을...

cve-2026-45185-detection-script

CVE-2026-45185 탐지 스크립트 c SECPlayground Platform —https://www.secplayground.com 이 탐지 스크립트는 SECPlayground Platform의 자산입니다. 두 가지 안전한 탐지 스크립트입니다. 둘 다 closenotify-mid-BDAT 트리거를 작동시키지 않으므로 데몬을 중단시키거나 패닉 로그 항목을 남기지 않습니다. 두 판정 모두 "likely vulnerable"취약할 가능성이 높음입니다. 익스플로잇 없이 원격으로 GnuTLS와 OpenSSL 빌드를 구별하는 것...

opencanary

Thinkst Canary による OpenCanary OpenCanary はマルチプロトコル対応のネットワークハニーポットです。主なユースケースは、攻撃者が非公開ネットワークに侵入した後に検知することです。リソース要件が非常に低く、調整・変更・拡張が可能です。 概要 OpenCanary はデーモンとして動作し、複数の一般的なネットワークプロトコルを実装しています。攻撃者がネットワークに侵入してハニーポットとやり取りすると、OpenCanary はさまざまな仕組みでアラートを送信します。 OpenCanary は Python...

CVE-2026-91838

A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped...

USN-8819-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - IPv6 networking; - Netfilter; CVE-2025-38724, CVE-2026-53131, CVE-2026-532...

USN-8819-2 linux-aws, linux-gcp, linux-gcp-4.15, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - IPv6 networking; - Netfilter; CVE-2025-38724, CVE-2026-53131, CVE-2026-532...

DEBIAN-CVE-2026-97554

In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid using uninitialized SIDs in cifsposixtofattr cifsposixtofattr ignores the return value of posixinfoparse. When a malformed POSIX directory entry is encountered e.g. invalid SID lengths from an untrusted server,...

CVE-2026-96455 Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachymini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Dependsgetappmanager, which just hands back the manager object from applicatio...

CVE-2026-96455 Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachymini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Dependsgetappmanager, which just hands back the manager object from applicatio...

EUVD-2026-85185

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachymini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Dependsgetappmanager, which just hands back the manager object from applicatio...

CVE-2026-96455 Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachymini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Dependsgetappmanager, which just hands back the manager object from applicatio...

CVE-2026-91798

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges...

CVE-2026-91798 Foxit PDF Editor/Reader Updater Privilege Escalation

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges...

EUVD-2026-85167

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges...

CVE-2026-91798

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader . The flaw is caused by an insecure permission configuration that allows regular users to modify the configuration file. This vulnerability could lead to arbitrary script execution with higher privil...

CVE-2026-91798 Foxit PDF Editor/Reader Updater Privilege Escalation

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges...