cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server Exploited Apache HTTP Server CVE-2021-41773 Exploited in the Wild CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 Shodan oneliner shodan...

CVE-2018-17456

CVE-2018-17456 1-day...

CVE-2026-21509

CVE-2026-21509 — Microsoft Office OLE Security-Feature Bypass Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here for an actively exploited vulnerability. A security-feature bypass in Microsoft Office that lets a crafted document load COM...

CVE-2021-41773-Apache-RCE

CVE-2021-41773-Apache-RCE Apache HTTP Server 2.4.49의 경로 정규화 변경 사항에서 결함이 발견되었습니다. 공격자는 경로 순회path traversal 공격을 사용하여 Alias 유사 지시문으로 구성된 디렉터리 외부의 파일에 URL을 매핑할 수 있습니다. 이 디렉터리 외부의 파일이 일반적인 기본 구성인 "require all denied"로 보호되지 않는 경우 이러한 요청은 성공할 수 있습니다. 또한 이러한 별칭aliased 경로에 대해 CGI 스크립트가 활성화된 경우 원격 코드 실행이 가...

CVE-2025-40602

CVE-2025-40602 📌 Overview CVE-2025-40602 is a local privilege escalation vulnerability affecting SonicWall Secure Mobile Access SMA 1000 series appliances. The flaw exists in the Appliance Management Console AMC due to insufficient authorization checks , allowing an authenticated low-privileged...

CVE-2025-55182

📌 CVE-2025-55182 — React2Shell Critical Unauthenticated Remote Code Execution RCE in React Server Components 📖 Overview CVE-2025-55182, informally dubbed React2Shell, is a critical remote code execution RCE vulnerability disclosed on December 3, 2025 in React Server Components RSC and related...

CVE-2026-76461

⚡ CVE-2026-76461 - Critical SQL Injection Cisco Secure Email Gatewayのメール解析ロジックに存在する、リモートから悪用可能な重大なSQLインジェクション脆弱性であり、root権限での任意コマンド実行につながる可能性があります。...

CVE-2026-20127

🛡️ CVE-2026-20127 — Cisco Catalyst SD-WAN Authentication Bypass 📌 Overview CVE-2026-20127 is a critical authentication bypass vulnerability affecting Cisco Catalyst SD-WAN components, including controllers and management systems. A remote unauthenticated attacker can exploit improper authenticatio...

CVE-2017-0144

🔵 EternalBlue CVE-2017-0144 Critical Microsoft SMBv1 Remote Code Execution Vulnerability 📌 Overview EternalBlue is a critical vulnerability in Microsoft's Server Message Block version 1 SMBv1 protocol that allows remote attackers to execute arbitrary code on vulnerable Windows systems without...

CVE-2023-35078

CVE-2023-35078 shodan dorks You can use the following shodan dorks to find public targets. http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs You can use the following to transform data from shodan API to format suitable for the checking script: jq -cr 'select.http.favicon.hash ==...

SonicWall-SMA1000-Zero-Day-IoC-Check

SonicWall SMA1000 Zero-Day IoC Check An unofficial Bash-based log check for selected indicators of compromise associated with the actively exploited SonicWall SMA 1000 Series vulnerabilities CVE-2026-15409 and CVE-2026-15410. !CAUTION Independent community project: This repository is not affiliat...

CVE-2024-5274-Detection

CVE-2024-5274-Detection Guardian Code: A Script to Uncover CVE-2024-5274 Vulnerabilities CVE-2024-5274 Google Chrome Zero-Day Vulnerability Detection and Update Script Overview Google recently patched a fourth zero-day vulnerability in Chrome, known as CVE-2024-5274, which allows attackers to...

cve-2025-32433-erlang_ssh_rce_reproduction

CVE-2025-32433: Erlang/OTP SSH Daemon Pre-Auth Remote Code Execution CVSS Score: 10.0 CRITICAL Status: Actively Exploited in the Wild Disclosure: June 2025 Overview CVE-2025-32433 is a critical unauthenticated remote code execution vulnerability in the SSH server implementation ssh application...

CVE-2023-29336

CVE-2023-29336 - Win32k Local Privilege Escalation - PoC Details have emerged about a now-patched actively exploited security flaw in Microsoft Windows that could be abused by a threat actor to gain elevated privileges on affected systems. The vulnerability, tracked as CVE-2023-29336, is rated 7....

patch-CVE-2026-31337

パッチ: CVE-2026-31337 脆弱性の詳細 CVE : CVE-2026-31337 製品 : Ivanti Connect Secure 説明 : 認証バイパスによる RCE 重要度 : 緊急 CISA KEV : はい（実環境での悪用が確認済み） パッチステータス: デプロイ済み フィールド| 値 ---|--- パッチ日付| 2026-08-15 ステータス| デプロイ済み 展開先| 本番環境（全リージョン） 検証者| SecOps チーム ロールバック計画| あり（RUNBOOK.md に記載） 是正手順 1. Ivanti Connect Secure...

CVE-2025-55182

CVE-2025-55182 — React2Shell Critical Remote Code Execution in React Server Components. Severity: CRITICAL | CVSS v3.1: 10.0 Maximum | Status: Actively Exploited What Is This? React2Shell is a critical security vulnerability in React Server Components RSC — a modern feature that lets React run...

Cisco IOS XE Web UI - Command Injection

A vulnerability in the web UI component of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to improper input validation in the web UI. An attacker could exploit...

CVE-2026-78938

CVE-2026-78938 — V8 TurboFan CheckMaps 实例迁移类型混淆 针对 CVE-2026-78938 的根因分析与漏洞利用，这是 V8 TurboFan 加载消除中的一个类型混淆漏洞，已在 Chrome 152.0.7977.64（V8 15.2.124.18）中修复。该漏洞被报告已在野外被利用。 该漏洞利用将缺陷转化为越界 Float64Array，进而实现 addrof / fakeobj 以及针对 V8 压缩堆的任意读写。初始写入之后的所有操作均在运行时定位——读写阶段没有硬编码的堆偏移。 受影响版本：Chrome 152.0.7977.54（V8...

mikrotrick-poc

MikroTrick ラボ PoC — CVE-2026-67276（RouterOS SSH公開鍵認証バイパス） ラボ用途のみ。 所有するRouterOSインスタンスに対してのみ実行してください。 所有していないデバイスへの攻撃は犯罪です（CFAA、ポーランド刑法第267条、各国の同等法規）。 背景 CERT PL（2026-09-05）は、「MikroTrick」 というチェーン（SSHがインターネットに到達可能な場合の未認証での完全なデバイス乗っ取り）として実際に悪用されている6件のRouterOS脆弱性を公開しました。MikroTikは2026-09-03 に7.25beta3 ...

CVE-2025-64446

🛡️ CVE-2025-64446 - FortiWeb Critical Authentication Bypass & Path Traversal Critical unauthenticated vulnerability allowing remote attackers to create administrator accounts on FortiWeb devices. 📌 Overview CVE-2025-64446 is a severe relative path traversal vulnerability in the FortiWeb Web...