DSL-2750U-Full-chain

펌웨어 분석 1. DSL-2750U 버그 : tftp 서버의 잘못된 구성 CVE-2021-3707 명령어 인젝션 버그 CVE-2021-3708...

Log4j-_Vulnerability

웹은 CVE-2021-44228에 취약합니다 이 웹 애플리케이션은 Apache Log4j 2의 치명적인 보안 취약점으로 Log4Shell로 알려진 CVE-2021-44228에 취약합니다. 이 취약점은 인증되지 않은 공격자가 로그 시스템에 기록되는 특정 입력값을 전송하는 것만으로 원격에서 악성 코드를 실행할 수 있게 하여, 서버에 대한 완전한 장악으로 이어질 수 있습니다...

Malicious code in eyiouss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bedee2fc7da5658522543d3fe376d8fbf1d3bc8386eb8f53df3ee080830b250 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15836 Malicious code in eyiouss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bedee2fc7da5658522543d3fe376d8fbf1d3bc8386eb8f53df3ee080830b250 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-21017-LDAP-Anonymous-Bind-Privilege-Escalation

CVE-2026-21017 – LDAP 匿名バインド特権昇格 プログラムコード Python ldap3 シミュレーション root@kitploit: ldapanonsim.py - LDAP server allowing anonymous bind with write access from ldap3 import Server, Connection, ALL Simulated: real server would be misconfigured server = Server'ldap://localhost:389', getinfo=ALL conn =...

CVE-2026-48908

🚨 CVE-2026-48908 — 임의 파일 업로드를 통한 완전한 서버 장악 인증되지 않은 파일 업로드 → 원격 코드 실행 RCE SP Page Builder 의 중대한 취약점으로, 인증되지 않은 공격자가 임의 파일을 업로드하고 원격 코드 실행RCE 을 달성하여 잠재적으로 전체 서버를 장악할 수 있습니다. 📖 개요 CVE-2026-48908 는 SP Page BuilderJoomla용 인기 확장 프로그램에 영향을 미치는 심각한 보안 취약점입니다. 이 결함은 파일 업로드 기능 내의 부적절한 접근 제어와 불충분한 검증에서 비롯되며...

CVE-2026-84700 Pika Unauthenticated Replication Access via Internal Protobuf Port

PikiwiDB Pika v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000 e.g. 11221 when the default client port 9221 is used that does not authenticate incoming requests. Although requirepass is intended to gate replication — a slave presents it as...

CVE-2026-84700

PikiwiDB (Pika) v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000 (e.g., 11221 for the default 9221) that lacks authentication for non-MetaSync messages. The root cause is that the frame dispatcher (DealMessage ) does not require a completed o...

yolobox v0.19.4

root@kitploit: ██╗ ██╗ ██████╗ ██╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ╚██╗ ██╔╝██╔═══██╗██║ ██╔═══██╗██╔══██╗██╔═══██╗╚██╗██╔╝ ╚████╔╝ ██║ ██║██║ ██║ ██║██████╔╝██║ ██║ ╚███╔╝ ╚██╔╝ ██║ ██║██║ ██║ ██║██╔══██╗██║ ██║ ██╔██╗ ██║ ╚██████╔╝███████╗╚██████╔╝██████╔╝╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═════╝ ╚══════╝...

BadKernel

BadKernel CVE-2016-6754BadKernel用のフルエクスプロイト syscan2016上海向けのスライド "BadKernel --- タイポでV8をエクスプロイトする"...

CVE-2024-21545-PoC

CVE-2024-21545-PoC Proxmox VE 任意ファイル読み取り - システム全体の完全な侵害。まだテストしていません... 今週テストする予定です...

MAL-2026-15832 Malicious code in @viertechjs/wb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf0b89516ea99431b2f9d6629a3418779813f156d84bb4f3018dec0707b04a6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @viertechjs/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e369cb173ca8757829b6cb54f1d3e63c8b8baacb1f22241092a5a1032779d3c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @viertechjs/wb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf0b89516ea99431b2f9d6629a3418779813f156d84bb4f3018dec0707b04a6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15831 Malicious code in @viertechjs/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e369cb173ca8757829b6cb54f1d3e63c8b8baacb1f22241092a5a1032779d3c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @viertechjs/api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a35c7b86ec1a4d9922b7c74dbdab948b868f8cf43a8f5c01053692e6a85803 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15830 Malicious code in @viertechjs/api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a35c7b86ec1a4d9922b7c74dbdab948b868f8cf43a8f5c01053692e6a85803 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2022-4262

CVE-2022-4262 CVE-2022-4262 전체 분석 근본 원인, PoC 및 익스플로잇 포함...

CVE-2026-73701

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...

cve-2025-14325-full-repro

이 저장소에는 README가 없습니다...