CVE-2025-53772

CVE-2025-53772 - Microsoft Web Deploy 원격 코드 실행 익스플로잇 CVE-2025-53772를 대상으로 하는 Python 기반 익스플로잇으로, HTTP 헤더 데이터의 안전하지 않은 역직렬화로 인해 발생하는 Microsoft Web Deploymsdeploy 원격 코드 실행 취약점입니다. 🎬 POC 영상 취약점 개요 속성| 값 ---|--- CVE ID| CVE-2025-53772 CVSS 점수| 8.8 높음 영향을 받는 제품| Microsoft Web Deploy 4.0 취약한 버전| │...

CVE-2018-11788

요약 Apache Karaf는 현대적이고 다형적인polymorphic 애플리케이션 컨테이너입니다. OSGi로 구동되는 경량이면서도 강력하고 엔터프라이즈 환경에 적합한 컨테이너입니다. Apache Karaf는 '제품 프로젝트product project'로서 완전하고 턴키turnkey 방식의 런타임을 제공합니다. 이 런타임은 '다중 측면multi-facets'을 지니고 있어 OSGi 또는 비OSGi, 웹 애플리케이션, 서비스 기반 등 다양한 종류의 애플리케이션을 배포할 수 있습니다. Apache Karaf에 대한 최근 연구에서 저...

nimbostratus-target

Nimbostratus 대상 이 저장소에는 nimbostratus를 테스트하는 데 사용할 수 있는 대상 인프라가 포함되어 있습니다. 이 코드는 nimbostratus를 사용하여 악용할 수 있는 다양한 취약점과 취약한 구성 설정을 가진 Amazon AWS 인프라를 배포합니다. 이것이 무엇에 관한 것인지 확실하지 않다면, 여기에 있는 코드는 사용하지 않는 것이 좋습니다. 설치 sudo apt-get install python-mysqldb git clone...

deploy-goad

Ubuntu Linux 22.04에 GOAD v2 배포 이 스크립트는 https://github.com/Orange-Cyberdefense/GOAD에서 제공하는 Active Directory 랩을 배포할 때 필요한 사전 요구 사항을 간소화합니다. 개요 컴퓨터 BIOS에서 VTx 확장이 활성화되어 있는지 확인합니다. Ubuntu Server 22.04를 설치합니다. LAN을 통해 접근할 수 있도록 네트워킹을 고정 IP권장 또는 DHCP로 구성합니다. 최소 4코어, 24GB RAM, 160GB SSD 드라이브를 권장합니다. 스크립...

pgAdminOpendoor

pgAdminOpendoor CVE-2025-2945 개요 이것은 CVE-2025-2945에 대한 제 연구입니다. 이 저장소에는 postgress와 취약한 pgadmin이 포함된 테스트 스탠드와 익스플로잇이 포함되어 있습니다. CVE 유용한 링크: NVD 세부 정보 WIZ 분석 Metasploit 분석 Python으로 작성된 pgAdmin 백엔드에는 적절한 입력 검증이 부족한 두 개의 엔드포인트가 있습니다. 엔드포인트는 다음과 같습니다: /sqleditor/querytool/download - querycommited 매개변수...

egg-scripts-CVE-2018-3786

egg-scripts egg 프로젝트용 배포 도구입니다. 참고: Windows는 부분적으로 지원됩니다.22를 참조하세요. 설치 $ npm i egg-scripts --save 사용법 eggctl을 package.json 스크립트에 추가하세요: "scripts": "start": "eggctl start --daemon", "stop": "eggctl stop" 그런 다음 다음과 같이 실행합니다: npm start npm stop 참고: egg-scripts는 전역 설치를 권장하지 않습니다. npm 스크립트로 설치하여 사용해야...

cdt-samba-deploy

cdt-samba-deploy Ubuntu 시스템에 CVE-2017-7494일명 "SambaCry"를 배포하기 위한 CDT Ansible 플레이북...

CVE-2026-100611: Improper Privilege Management

Capgo capgo.app backend, versions ≤ 12.261.0 improperly restricts which roles the apikeymanager organization role may bind to newly created API keys. When an authenticated user holding only apikeymanager permissions org.manageapikeys and org.read calls POST /apikey with a JWT session, the only...

CVE-2026-79759

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the POST /credentials/:id/deploy-to-host endpoint resolves credential and target-host records from attacker-controlled credentialId and targetHostId integer values...

CVE-2026-79761

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a grep pattern from a user-controlled public-key token and interpolates it into double-quoted shell commands executed on...

CVE-2026-79759 Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host Endpoint

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the POST /credentials/:id/deploy-to-host endpoint resolves credential and target-host records from attacker-controlled credentialId and targetHostId integer values...

CVE-2026-79759 Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host Endpoint

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the POST /credentials/:id/deploy-to-host endpoint resolves credential and target-host records from attacker-controlled credentialId and targetHostId integer values...

CVE-2026-79759 Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host Endpoint

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the POST /credentials/:id/deploy-to-host endpoint resolves credential and target-host records from attacker-controlled credentialId and targetHostId integer values...

EUVD-2026-86160

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the POST /credentials/:id/deploy-to-host endpoint resolves credential and target-host records from attacker-controlled credentialId and targetHostId integer values...

CVE-2026-79759

The web-based server management platform Termix (versions 1.7.0 through 2.5.1) is vulnerable to cross-user information disclosure due to a missing ownership check in the POST /credentials/:id/deploy-to-host endpoint. Located in src/backend/database/routes/credentials.ts, the application fails to ...

EUVD-2026-86158

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a grep pattern from a user-controlled public-key token and interpolates it into double-quoted shell commands executed on...

CVE-2026-79761 Termix: Command injection in SSH key deployment verification

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a grep pattern from a user-controlled public-key token and interpolates it into double-quoted shell commands executed on...

CVE-2026-79761 Termix: Command injection in SSH key deployment verification

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a grep pattern from a user-controlled public-key token and interpolates it into double-quoted shell commands executed on...

CVE-2026-79761

The web-based server management platform Termix (versions 1.7.0 to 2.5.1 ) is vulnerable to command injection within the SSH key deployment flow. The root cause is located in src/backend/database/routes/credential-deploy-routes.ts, where the application derives a grep pattern from a user-controll...

PT-2026-97918

Name of the Vulnerable Software and Affected Versions Termix versions 1.7.0 through 2.5.0 Description Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing. The POST '/credentials/:id/deploy-to-host' endpoint fails to verify if the records associated...