CVE-2024-21388

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 우리는 테러 단체 하마스에 의해 인질로 잡힌 모든 시민의 안전한 귀환을 요구합니다. 모든 인질이 석방되어 안전하게 집으로 돌아올 때까지 우리는 쉬지 않을 것입니다. 여러분도 그들을 집으로 데려오는 데 도움을 줄 수 있습니다.https://stories.bringthemhomenow.net/ Microsoft Edge 취약점 익스플로잇 CVE-2024-21388 이 Python 스크립트는 Microsoft Edge의 취약점CVE-2024-21388을 악용하여, 비공개...

CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282는 Ivanti Connect Secure에서 발견된 치명적인 취약점으로, 버퍼 오버플로우 익스플로잇을 통해 원격 명령 실행RCE을 가능하게 합니다. 이 취약점은 공격자가 악성 파일예: 웹 셸을 업로드하고 상승된 권한으로 대상 시스템에서 명령을 실행할 수 있게 합니다. 악용 위험을 완화하려면 영향을 받는 시스템을 최신 버전으로 업데이트하는 것이 강력히 권장됩니다. 웹 셸 업로드 대상 시스템에 웹 셸을 업로드하려면 도구를 다음과 같이 사용합니다:...

LolDriverScan

LolDriverScan LolDriverScan은 사용자가 시스템에서 취약한 드라이버를 탐지할 수 있는 golang 도구입니다. 이 도구는 loldrivers.io 목록을 API에서 가져와 시스템에 취약한 드라이버가 있는지 스캔합니다. 이 프로젝트는 Go로 구현되었으며 실행에 관리자 권한이 필요하지 않습니다. 기능 시스템에서 취약한 드라이버를 스캔합니다. 상세 정보를 위한 자세한 출력verbose을 제공합니다. 다른 도구와의 쉬운 통합을 위해 JSON 출력을 지원합니다. 관리자 권한이 필요하지 않습니다. 설치 릴리스 GitH...

CVE-2026-84830 OS command injection in privileged configuration handling

SEPPmail Secure Email Gateway before 15.0.7 contains a command injection vulnerability that allows authenticated administrators to execute commands with elevated privileges...

CVE-2026-84830

SEPPmail Secure Email Gateway versions before 15.0.7 are affected by an OS command injection vulnerability in privileged configuration handling. An authenticated administrator can exploit this flaw to execute commands with elevated privileges, resulting in high impact to confidentiality, integrit...

CVE-2024-40635_POC

CVE-2024-40635POC CVE-2024-40635 漏洞的概念验证代码 数据来源：https://nvd.nist.gov/vuln/detail/CVE-2024-40635 1. 导入 Docker 库 root@kitploit: import docker 这将导入 Python 的 docker 库，允许通过其 API 与 Docker 交互。如果尚未安装该库，可以通过运行以下命令添加： root@kitploit: pip install docker 2. 初始化 Docker 客户端 root@kitploit: client =...

CVE-2026-73750

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could...

CVE-2026-73749

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

CVE-2026-73749 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

EUVD-2026-69613

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

AZL-98448 CVE-2026-56143 affecting package rubygem-elasticsearch 8.9.0-1

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

CVE-2026-56143

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

CVE-2026-56143 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

CVE-2026-56143 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

CVE-2026-17203

IBM Application Runtime Expert (ARE) for IBM i version V1R1M0 is vulnerable to improper authentication enforcement (CWE-287), allowing a remote authenticated attacker to obtain sensitive information. The CVSS 3.1 score is 7.5 (HIGH) with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, in...

CVE-2026-57910

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...

CVE-2026-57910 WatchGuard Agent improper authentication allows unauthenticated remote code execution

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...

EUVD-2026-65438

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...

CVE-2026-57910

CVE-2026-57910 affects the WatchGuard Agent , where an improper authentication flaw allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges . The vulnerability is rated CVSS 4.0: 9.3 (CRITICAL) , with a network attack vector, lo...

PT-2026-81270

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...