html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.22.16 security update

Red Hat build of MicroShift release 4.22.16 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.35 packages and security update

Red Hat OpenShift Container Platform release 4.21.35 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...

CVE-2020-14882-WebLogic-Analysis

취약점 연구: Oracle WebLogic Server의 CVE-2020-14882 및 CVE-2020-14883 체인 익스플로잇 이 저장소는 Oracle WebLogic Server 관리 콘솔 구성 요소에서 인증 우회Authentication Bypass 및 원격 코드 실행RCE 취약점 체인을 시연하기 위한 기술 보고서Write-up와 개념 증명Proof of Concept, PoC을 포함합니다. 🛑 경고 및 면책 조항: 본 자료는 교육 목적과 합법적인 보안 감사Pentest 수행을 위해서만 준비되었습니다. 소유자의 사전 서...

mini-shai-hulud-scanner

미니 샤이훌루드 스캐너 현재 주요 패키지를 감염시키고 있는 npm/PyPI 공급망 웜을 위한 무료 오프라인 스캐너입니다. Intrudify 팀이 제작했습니다. 회원가입 불필요, 원격 측정 없음, 완전히 오프라인으로 실행됩니다. NHS CC-4781 · CVE-2026-45321 CVSS 9.6 · GHSA-g7cv-rxg3-hmpx 이 스캐너는 무엇인가요? 지난 몇 주 동안 npm install 또는 pip install을 실행했다면, 이 스캐너가 필요합니다. 특히 @tanstack/, @uipath/, @mistralai/,...

CVE-2026-11499

🚨 CVE-2026-11499 Tenda HG7 / HG9 / HG10 라우터의 스택 기반 버퍼 오버플로우 📖 개요 CVE-2026-11499 는 여러 Tenda 라우터 모델HG7, HG9, HG10에 영향을 미치는 스택 기반 버퍼 오버플로우 취약점 으로 보고되었습니다. 악용에 성공할 경우, 취약한 코드 경로와 배포 구성에 따라 공격자가 충돌, 서비스 거부DoS 또는 잠재적으로 원격 코드 실행RCE 을 유발할 수 있습니다. ⚠️ 현재 기술적 세부 사항은 제한적이며, 공개적인 공개가 진행 중인 것으로 보입니다. 🎯 영향받는 제품...

FortiLPE

설명 Windows에서 실행되는 FortiClient VPN을 대상으로 하는 CVE-2025-62676 / EUVD-2025-206993용 로컬 권한 상승 PoC 익스플로잇입니다. 임의의 XML 파일 쓰기를 통해 일반 사용자 컨텍스트에서 SYSTEM 컨텍스트로 페이로드를 실행합니다. PoC는 Windows 11 Pro에서 FortiClient 버전 7.4.0을 대상으로 테스트되었습니다. 공급업체에 따르면 다음 버전이 취약합니다: 7.4.0 - 7.4.4 7.2.0 - 7.2.12 7.0 모든 버전 해당 취약점은 Trend...

CVE-2026-48939

CVE-2026-48939 — iCagenda Joomla RCE 익스플로잇 인증 전 임의 파일 업로드 → PHP 코드 실행 개요 CVE-2026-48939 는 Joomla용 iCagenda 이벤트 캘린더 확장 기능의 CVSS 10.0 치명적 취약점입니다. 프론트엔드 이벤트 등록 양식의 파일 첨부 기능은 접근 제어를 뷰 레이어에서만 적용하고 컨트롤러에서는 적용하지 않아, 인증 없이 확장자 검증 없이 파일 업로드가 가능합니다. 업로드된 파일은 웹 루트 아래 /images/icagenda/frontend/attachments/에 ...

packetfence-CVE-2024-39024

소개 보안 연구원: ly1g3, ly1g3attuta.io GPG 지문: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 개요: 원격 코드 실행RCE - 저권한 인증 사용자에서 관리자 RCE CVE: CVE-2024-3924 타임라인: 발견 - ly1g3 보고 - ly1g3 수정 - packetfence 참고:...

wp2shell-scanner

wp2Shell Scanner – PoC 포함 CVE-2026-63030 및 CVE-2026-60137 – WordPress wp2shell 취약점 체인 스캐너 선택적 명령 검증 PoC가 포함된 인가된 보안 연구용 도구 wp2shell-scanner는 공개된 WordPress 증거를 검증하고, 노출된 버전을 핑거프린팅하며, REST 배치 동작을 확인하고, 활성 타이밍 차이를 측정하여 WordPress wp2shell 취약점 체인을 감지합니다. 이 도구는 인가된 방어적 연구, CTF 환경, 그리고 본인이 소유하거나 관리하는 시스...