CVE-2026-39023

CVE-2026-39023 RCE PoC - RESPONSIVE filemanager v.9.14.0 최신 버전 - 패치되지 않음 Github 프로젝트 : https://github.com/trippo/ResponsiveFilemanager 요구사항: 필요한 것은 없습니다. 이 익스플로잇은 인증이 필요하지 않습니다. Responsive Filemanager 애플리케이션은 서버의 파일을 처리하는 데 사용되는 웹 기반 파일 관리 도구입니다. 이 취약점CVE-2026-39023은 공격자가 중복 파일duplicate file을 악용하...

CVE-2023-38831

CVE-2023-38831 CVE-2023-38831에 대한 POC 데모 취약점에 대한 간략한 설명 CVE-2023-38831은 소프트웨어 취약점입니다. 악용된 소프트웨어는 거의 모든 사람이 널리 사용하는 WinRAR입니다. 이는 다양한 문서나 파일을 작은 아카이브zip 파일 형식로 만들어 공간을 절약하고 파일 공유를 더 쉽고 빠르게 해주는 소프트웨어입니다. 이 취약점은 2023년 4월에 발견되었습니다. Windows 운영 체제와 6.22 이하 버전에 영향을 미칩니다. 이는 WinRAR 백엔드 코드에서...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-49492: nvme-pci: fix a NULL pointer dereference in nvmeallocadmintags bsc1238954. CVE-2022-50116: kernel: tty: ngsm: fix deadlock and link starvation in...

Linux Distros Unpatched Vulnerability : CVE-2025-37952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: Fix UAF in closefiletableids A use-after-free is possible if one thread destroys the file via ksmbdclosefd while another thread holds a reference to it...

UBUNTU-CVE-2024-45025

In the Linux kernel, the following vulnerability has been resolved: fix bitmap corruption on closerange with CLOSERANGEUNSHARE copyfdbitmapsnew, old, count is expected to copy the first count/BITSPERLONG bits from old-fullfdsbits and fill the rest with zeroes. What it does is copying enough words...

Moderate: Red Hat Security Advisory: Satellite 6.10.2 Async Bug Fix Update

Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other clie...

CVE-2016-3750

libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the return value of the dup system call, which allows attackers to bypass an isolation protection mechanism via a crafted...

Pacific Software Carello 1.2.1 File Duplication and Source Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1245/info A remote user can gain read and write access on a target machine running Carello shopping cart software. First, a user may create a duplicate of a known file in a known directory on the target host through add.e...

DEBIAN-CVE-2006-5397

The Xinput module modules/im/ximcp/imLcIm.c in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor...