380776 matches found
CVE-2026-42945
CVE-2026-42945 PoC Go 中文 | English A detection and exploitation helper for nginx HTTP/2 CVE-2026-42945. Use it only in authorized environments to verify vulnerability presence, compare patched vs. vulnerable behavior, and reproduce PoC logic in a controlled lab. Affected versions heuristic: nginx...
CVE-2026-107565 Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...
CVE-2026-107565 Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...
EUVD-2026-95032
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...
CVE-2026-107565
A flaw in luksmeta allows a local attacker with administrative privileges to cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. The root cause is identified as incorrect boundary calculations and flawed overlap detection within the luks1 metadata allocator. Con...
CVE-2026-107565
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...
CVE-2026-107565
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...
CVE-2026-90460
A flaw was found in OpenStack Keystone. Tokens obtained via delegated authentication methods trusts, application credentials, OAuth1 access tokens can move a credential to an unauthorized project by supplying a new projectid in a PATCH /v3/credentials request, because only the pre-update project ...
CVE-2026-79993
A flaw was found in Apache ZooKeeper. The deleteContainer opcode is processed without verifying Access Control List ACL permissions. A remote, unauthenticated attacker with network access to the ZooKeeper client port can delete any empty persistent znode, including container and TTL nodes. This c...
CVE-2020-11019
CVE-2020-11019 FreeRDP 2.0.0 이하 버전에서 로거가 "WLOGTRACE"로 설정된 상태로 실행하면, 잘못된 배열 인덱스를 읽어 애플리케이션 충돌이 발생할 수 있습니다. 데이터가 로컬 터미널에 문자열로 출력될 수 있습니다. 이 문제는 2.1.0에서 수정되었습니다. 인증| 복잡성| 벡터 ---|---|--- SINGLE| LOW| NETWORK 기밀성| 무결성| 가용성 ---|---|--- NONE| NONE| PARTIAL CVSS 점수: 4 참고 자료...
cve-2025-66478_rce_vulnerable
shadcn/ui를 사용한 현대적인 블로그 Next.js 16, React 19, shadcn/ui 및 Tailwind CSS로 구축된 현대적이고 세련된 블로그입니다. 중요: Next JS VULNERABLE 프로젝트는 교육, 테스트 및 익스플로잇 목적으로만 만들어졌습니다. 프로덕션 환경에는 설치하지 않는 것이 좋으며, 로컬 또는 통제된 환경에서만 사용하세요. PoC POST / HTTP/1.1 Host: localhost:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...
CVE-2023-30146
CVE-2023-30146 - Assmann/HooToo 웹캠 익스플로잇 - 민감한 데이터 노출 설명 HooToo 및 Assmann 브랜드의 IP 카메라에서 문제가 발견되었습니다. 펌웨어는 관리자와 사용자 자격 증명을 백업에 평문으로 저장합니다. 인증 없이 백업을 검색하고 압축 해제할 수 있어 원격 공격자가 네트워크에 접근할 수 있습니다. 취약점 유형 민감한 데이터 노출 공격 유형 원격 영향 네트워크 침해 가능 배경 IoT 시장에서 판매되는 많은 IP 카메라가 HiSilicon H35xx SoC 1를 기반으로 하는 것으로...
CVE-2024-0044-EXP
CVE-2024-0044-EXP CVE-2024-0044를 활용하여 Android 12, 13 2024년 3월 보안 업데이트 이전 데이터 백업 사용법 ./CVE-2024-0044-EXP.sh 샘플 ./CVE-2024-0044-EXP.sh com.tencent.mm 설명 취약점 발견 https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html 취약점 검증...
opencast-CVE-2021-43821-env
opencast-CVE-2021-43821-env opencast cve-2021-43821 민감 정보 유출 취약점 환경 재현 문서：https://mp.weixin.qq.com/s/fjna3mHraPmEy1b1wnEYrQ...
s2-048
s2-048 s2-048, CVE-2017-9791에 대한 익스플로잇입니다. / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc:...
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence AI pen testing tool named ARTEX to carry out the attacks. The activity, per CrowdStrike Intelligence, was active from late September to early...
CVE-2026-105826
A security policy bypass exists in the ImageMagick MAT decoder in versions before 6.9.13-55 and 7.x before 7.1.2-30 . A remote attacker can submit a specially crafted MAT image containing highly compressed data that causes the decoder to fail to enforce configured temporary file size limits. This...
EUVD-2026-95010
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...