47 matches found
CVE-2025-38678_POC
CVE-2025-38678POC The first poc for CVE-2025-38678 今日（2026/1/21）Googleを検索したところ、この脆弱性を発見した方の記事を見つけました。筆者の推測が裏付けられました。この脆弱性の悪用手法は過去の攻撃手法を踏襲したものです。そのため、新しいバージョンのカーネルでは、たとえこの脆弱性が存在しても、悪用が困難、あるいは不可能である可能性が高いです。 link：https://196082.github.io/2025/12/19/CVE-2025-38678/...
cve-2022-27666-exploits
cve-2022-27666 エクスプロイト CVE-2022-27666 を悪用する 2 つのエクスプロイト手法があります。これらのコードベースの使用方法の詳細については、私のブログをこちらでご確認ください。...
pentesting-writeups
🔐 Pentesting Writeups Personal penetration testing document...
pentesting-notes
🔐 Pentesting Notes Personal penetration testing documentati...
Bug-Bounty-and-Learning-Space
Bug Bounty & Learning Space A markdown backup of my personal...
sssxdera
sssxdera AutoPWN |...
PT-2025-44300
Name of the Vulnerable Software and Affected Versions Blu-Castle BCUM221E version 1.0.0P220507 Description A Cross-Site Request Forgery CSRF issue exists in the administrative web GUI. This can be exploited through various methods, including a crafted URL, loading an image, or using an...
EUVD-2017-1823
Malware in sbrugna...
EUVD-2020-1646
Malware in sbrugna...
EUVD-2020-12464
Malware in sbrugna...
CVE-2012-0439
An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via 1 a pointer argument to the SetEngine method or 2 an XPItem pointer argument to an unspecified method...
Cisco IOS XE Software DHCP Snooping Denial of Service Vulnerability
A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service DoS condition. This vulnerability is due to improper handling of DHCP request packets. An...
How Cybercriminals Exploit Notification Channels
Cybercriminals are always looking for new ways to take advantage of people. One effective method they use is…...
CISA: STS Scenarios Workshop 1 Scenario 3 Deep Disinformation
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
ROS-2-2115
2.2115 Apache Ant utility vulnerability CVE-2021-36374, CVE-2021-36373 1. Vulnerability Description: CVE-2021-36374 A vulnerability in the Apache Ant utility, is related to the application improperly controlling internal resource consumption when processing ZIP archives. Exploitation of the...
PT-2024-6388 · Xiaomi +3 · Xiaomi +3
Name of the Vulnerable Software and Affected Versions: MediaTek Wi-Fi chipsets affected versions not specified Description: The issue is related to a buffer overflow caused by improper input validation in the wlan service, which could lead to remote code execution with no additional execution...
IBM DB2 Denial of Service Vulnerability (CNVD-2023-100313)
IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM DB2 versions 10.5, 11.1, and 11.5, which can be...
ROS-2-2090
2.2090 Apache Ant utility vulnerability CVE-2021-36374, CVE-2021-36373 1. Vulnerability Description: CVE-2021-36374 A vulnerability in the Apache Ant utility, is related to the application improperly controlling internal resource consumption when processing ZIP archives. Exploitation of the...
ROS-2-1645
2.1645 Mozilla Firefox browser vulnerability CVE-2021-29970, CVE-2021-29976 1. Vulnerability description: CVE-2021-29970 A vulnerability in the Mozilla Firefox browser, is related to a release error in accessibility functions when processing HTML content. Exploitation of the vulnerability could...