CVE-2026-97474

A flaw was found in the Linux kernel's Intel Wi-Fi driver iwlwifi. This vulnerability can lead to a Denial of Service DoS when a wireless network interface encounters a firmware error during connection reconfiguration. Because the driver fails to immediately discard pending asynchronous...

CVE-2021-20323

CVE-2021-20323 설명 18.0.0 이전 및 10.0.0 이후의 Keycloak에는 clients-registrations 엔드포인트에 반사형 XSS 취약점이 있습니다. 이 버그는 POST로 엔드포인트가 지원하지 않는 키를 매개변수 이름으로 포함하는 JSON 구조를 제공할 때 트리거됩니다. 응답은 오류 메시지에서 JSON 키를 반사하며 헤더가 Content-Type: text/html로 설정됩니다. 브라우저에서 실행되면 JSON 키의 HTML 코드가 해석되어 JavaScript 코드를 실행할 수 있습니다. 인증은 필요...

CVE-2026-102721

A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive path checks only that the datagram is at least four bytes long nxdtftpclient.c:1229, 1521, 1984. When the opcode is NXTFTPCODEERROR the message string is copied with ...

Origin Validation Error

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Origin Validation Error via the OpenURLFromTab navigation path, when a sandboxed iframe with allow-popups but without...

CVE-2026-102721

A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive path checks only that the datagram is at least four bytes long nxdtftpclient.c:1229, 1521, 1984. When the opcode is NXTFTPCODEERROR the message string is copied with ...

CVE-2026-67406

A flaw was found in rabbitmq-server. When the Shovel plugin worker process crashes due to network or connection failures, it fails to sanitize its internal state before logging error reports. As a result, sensitive connection details and unencrypted credentials, including plaintext passwords, are...

CVE-2019-10092_Docker

CVE-2019-10092 Docker - Apache HTTP Server 사용 방법 $ docker-compose up Docker Hub로부터 사용 $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC Disclosures/CVE-2019-10092-Limited Cross-Site Scripting in modproxy Error Page-Apache httpd at master · DrunkenShells/Disclosures...

CVE-2019-10092

CVE-2019-10092: Apache HTTP Server의 "Proxy Error" 페이지를 통한 제한적 크로스 사이트 스크립팅 Apache HTTP Server 2.4.0-2.4.39에서 modproxy 오류 페이지에 영향을 주는 제한적 크로스 사이트 스크립팅 문제가 보고되었습니다. 공격자는 오류 페이지의 링크를 잘못된 형태로 만들어 자신이 선택한 페이지를 가리키도록 할 수 있습니다. 이 취약점은 프록시가 활성화되어 있지만 Proxy Error 페이지가 표시되도록 잘못 구성된 서버에서만 악용될 수 있습니다. 공급업체 공...

Exploit for CVE-2026-96876

CVE-2026-96876: Reflected XSS in export error messages Report...

local-gov-sqli-poc-and-remediation

Penetration Testing PoC and Portfolio — Luqman Hadi Autho...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN 预认证远程代码执行 描述 CVE-2022-42475 是 FortiOS SSL VPN 服务中的一个基于堆的缓冲区溢出漏洞，允许未认证的攻击者通过向 /remote/error 端点发送特制的 HTTP 请求来远程执行任意代码（RCE）。 该漏洞在官方补丁发布之前已被在野积极利用（0-day）。 PoC 执行 以下截图展示了在授权实验室环境中执行 PoC 的画面： 输出展示了 PoC 的执行过程以及与用于测试的 FortiOS 实例的交互。 CVE 信息 字段| 值 ---|--- CVE ID|...

CVE-2026-100722

A flaw was found in vm2. An attacker who can execute untrusted code within the sandbox can trigger an unhandled error by instantiating host-provided functions that return a rejected asynchronous operation Promise. Due to missing error handling in the sandbox-to-host object construction trap, the...

CVE-2026-24418

CVE-2026-24418 OpenSTAManager = 2.9.8 — Scadenzario 일괄 작업 모듈의 오류 기반 SQL 인젝션 개요 필드| 세부정보 ---|--- CVE ID| CVE-2026-24418 심각도| HIGH 8.8 CWE| CWE-89: SQL Injection 영향받는 버전| OpenSTAManager = 2.9.8 취약한 매개변수| idrecords POST array 취약한 엔드포인트| /actions.php?idmodule=18 공격 유형| Error-Based SQL Injection...

CVE-2023-25157-GeoServer-SQLi-Lab

GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 — 脆弱性ラボ & PoCレポート GeoServer CVE-2023-25157 とライブラリ GeoTools CVE-2023-25158 における SQLインジェクション（エラーベース） 脆弱性の実践環境（Vulnerable Lab）と詳細な攻撃分析レポートです。 詳細分析・攻撃レポート 各層を図解したPoC画像付きの完全な分析ドキュメントは、公式レポートをご覧ください： 👉 詳細な攻撃レポートを見る（REPORT.md）...

CVE-2026-101278

A flaw was found in OpenDMARC. A remote attacker can supply manipulated domain names to trigger an origin validation error when processing wildcard entries in the Public Suffix List PSL. This flaw affects the domain extraction routine and may allow an attacker to bypass domain verification checks...

Advanced-SQL-Injection-Cheatsheet

MySQL エラーベース SQLインジェクション チートシート これはおそらくSQLインジェクション攻撃の中でも最も簡単な脆弱性です。攻撃者はSQLエラーメッセージを利用して、MySQLデータベースを列挙およびダンプすることができます。 脆弱性の検出http://domain.com/index.php?id=1 Website loads successfully http://domain.com/index.php?id=1' エラーメッセージが表示されます：You have an error in your SQL syntax; check the manual that...

DEBIAN-CVE-2026-101278

A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...

CVE-2026-101278

A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...

UBUNTU-CVE-2026-101278

A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...

CVE-2026-101278 Trusted Domain Project OpenDMARC PSL Wildcard opendmarc_tld.c : opendmarc_get_tld origin validation

A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...