Password-Strength-Evaluator

Password Strength Evaluator Password Strength Evaluator 는 비밀번호의 강도를 평가하고 보안을 개선하기 위한 권장 사항을 제공하는 도구입니다. 이 도구는 또한 Have I Been Pwned API를 사용하여 비밀번호가 데이터 유출에 노출되었는지 확인합니다. 또한 평가 결과를 JSON 및 CSV 파일에 저장하여 향후 추가 분석에 활용할 수 있습니다. 사용 방법 1. Python 2.7 환경 준비 시스템에 Python 2.7 이 설치되어 있는지 확인하세요. 또한 requests 라이브러...

Exploit-CVE-2025-68613

Exploit-CVE-2025-68613 Security Advisory: Critical Remote Code Execution Vulnerability in n8n CVE-2025-68613 A critical vulnerability has been identified in the n8n workflow automation tool that allows for arbitrary code execution. Authenticated users with permissions to create or edit workflows...

cve-2026-58138

CVE-2026-58138: Conductor unauthenticated RCE Reproduction kit for CVE-2026-58138, a CVSS 9.8 code-injection vulnerability in Conductor. It contains the OpenTaint rule and GraalVM approximations, isolated rule tests, the scan result, and a working exploit. Read the case study Open the interactive...

CVE-2026-58138

CVE-2026-58138 — Conductor Unauthenticated RCE via GraalVM Evaluator -critical TL;DR: Orkes/OSS Conductor versions 3.21.21 to 3.30.2 evaluates user-supplied JavaScript in INLINE tasks using a GraalVM context with full host access HostAccess.ALL. Because the community API has no authentication by...

CVE-2026-58138-Conductor-Unauth-RCE

CVE-2026-58138 — Conductor Unauthenticated RCE via INLINE GraalVM Evaluator Conductor OSS / Orkes3.21.21 … before 3.30.2 evaluates user-supplied JavaScript in INLINE and LAMBDA / DOWHILE / SWITCH tasks with a GraalVM context built with full host access HostAccess.ALL. The script reflects up to...

safe-expr-eval

safe-expr-eval Fast and lightweight expression evaluator for JavaScript and TypeScript. A modern expression parser with a familiar API, zero dependencies, and full TypeScript support. Features Fast expression parsing and evaluation Lightweight and dependency-free Full TypeScript support Simple an...

CVE-2026-58138

🚨 CVE-2026-58138 — 認証不要のリモートコード実行 🔥 Conductorにおける重大な認証不要のリモートコード実行 影響を受けるバージョン:3.21.21 → 3.30.2 📌 概要 CVE-2026-58138 は、Conductor / Orkes Conductor に影響を与える重大な認証不要のリモートコード実行（RCE） 脆弱性です。 この脆弱性は、GraalVM を介して評価されるユーザー制御のスクリプト式をアプリケーショ...

CVE-2025-68613-Python-Exploit

CVE-2025-68613: n8n 워크플로우 표현식 RCE n8n 워크플로우 자동화 플랫폼의 심각한 원격 코드 실행RCE 취약점에 대한 개념 증명PoC 익스플로잇입니다. 설명 이 취약점은 n8n 표현식 평가 시스템에 존재합니다. 사용자가 제공한 표현식이 제대로 샌드박스 처리되지 않아, 인증된 공격자가 호스트 시스템에서 임의의 코드를 실행할 수 있습니다. CVE ID: CVE-2025-68613 취약점 유형: 원격 코드 실행 RCE 구성 요소: 표현식 평가기 영향을 받는 버전 n8n = 0.211.0 n8n -u -p...

CVE-2026-65591

CVE-2026-65591 脆弱なソフトウェアの名称と影響を受けるバージョン 1.123.64 より前の n8n バージョン 2.29.8 より前の n8n バージョン 2.30.1 より前の n8n バージョン 説明 レガシー式評価機の computed-member ハンドラにサニタイザーバイパスが存在します。ワークフローの作成または変更権限を持つ認証済みユーザーは、悪意のある式を作成してサニタイザーをバイパスし、n8n プロセスの権限でホストレベルのコード実行を引き起こす可能性があります。レガシー式エンジンは影響を受けるバージョンのデフォルトです。 推奨事項 バージョン...

ROS-20261002-73-0064

The vulnerability of the data selection evaluator in PostgreSQL database management systems is related to incorrect session duration. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

ROS-20261002-73-0065

The vulnerability of the data selection evaluator in PostgreSQL database management systems is related to incorrect session duration. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

ROS-20261002-73-0061

The vulnerability of the data selection evaluator in PostgreSQL database management systems is related to incorrect session duration. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

ROS-20261002-73-0063

The vulnerability of the data selection evaluator in PostgreSQL database management systems is related to incorrect session duration. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

ROS-20261002-73-0062

The vulnerability of the data selection evaluator in PostgreSQL database management systems is related to incorrect session duration. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

CVE-2026-76578

CVE-2026-76578 — FreeIPA 匿名管理者乗っ取り 製品: FreeIPA 4.9.x – 4.13.3 深刻度: 重大 CVSS 9.8 修正済み: FreeIPA 4.13.4 / 389-ds-base 3.2.0-10.el102 RHSA-2026:64785 法的通知 この概念実証は、認可されたセキュリティ研究および脆弱性検証を目的として、 隔離された私有のラボ環境 内でのみ開発および実行されました。 このスクリプトを使用する前に: 自身が所有するシステム、または明示的にテストを許可されたシステムに対してのみ使用してください...

BIT-RABBITMQ-2026-67413 RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmqjmstopicexchange plugin's x-jms-topic exchange accepted a client-controlled rjmserlangselector binding expression whose LIKE evaluator expanded percent and underscore wildcards in...

Exploit for CVE-2026-103446

CVE-2026-103446: Anonymous WikiLambda fragment execution Repo...

Amazon Linux 2 : 389-ds-base (ALAS-2026-3956)

The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3956 advisory. A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's...

CVE-2026-101085

Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger unrecovered panics in the alert evaluator goroutine. Attackers can submit a crafted alert rule via the POST /api/v1/alert-rule endpoint t...

CVE-2026-101085 Nezha before 2.3.8 Denial of Service via Alert Rule

Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger unrecovered panics in the alert evaluator goroutine. Attackers can submit a crafted alert rule via the POST /api/v1/alert-rule endpoint t...