CVE-2022-41544

CVE-2022-41544 CVE-2022-41544용 익스플로잇 스크립트 - get-simple CMS의 RCE 사용법 Usage: python3 CVE-2022-41544.py 예제...

go-get-rce

go-get-rce CVE-2018-6574...

adups-get-super-serial

adups-get-super-serial CVE-2015-2231 개념 증명PoC 제가 CVE-2015-2231 'Get Super Serial'을를 시연하기 위해 사용한 PoC입니다. 이 취약점이 있는 다른 ADUPS 펌웨어 기반 기기에서도 비슷한 방식으로 사용할 수 있도록 게시해 달라는 요청을 몇몇 사람들로부터 받았습니다. 노트북을 정리하면서 이 자료가 유실되기 전에 게시합니다. 사용법 이 애플리케이션은 클릭 가능한 버튼 하나만 생성하며, 클릭하면 sh /data/local/tmp/yay/shell.sh이가 system...

CVE-2026-34189

Cross-Site Request Forgery CSRF vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards...

BIT-RABBITMQ-2026-61837 RabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checks

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, AMQP 1.0 management GET /bindings exposes full binding topology to any authenticated AMQP user without resource/management permission checks. the AMQP 1.0 HTTP-over-AMQP management endpoint GET...

EUVD-2026-90592

Cross-Site Request Forgery CSRF vulnerability allows unauthorized deletion of alert commands via sequential, unvalidated GET requests when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-34189 CSRF in Event Response Deletion

Cross-Site Request Forgery CSRF vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards...

EUVD-2026-90591

Cross-Site Request Forgery CSRF vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-34189

A Cross-Site Request Forgery (CSRF) vulnerability exists in Pandora FMS (version 777 onwards). This flaw allows an attacker to trigger the unauthorized deletion of event responses by tricking an authenticated administrator into visiting a malicious page, which then executes a forged GET request ....

CVE-2025-66947

CVE-2025-66947 krishanmuraiji SMS v1.0의 시간 기반 블라인드 SQL 인젝션 ⏱️ 시각적 비교: 정상 응답 vs 약 6초 지연 응답 🔍 요약 TL;DR: 관리자 모듈의 GET 매개변수가 응답 지연을 통한 시간 기반 SQL 인젝션을 허용합니다. krishanmuraiji SMS v1.0에서 관리자 모듈의 GET 매개변수를 제대로 검증하지 않아 시간 기반 블라인드 SQL 인젝션 취약점 이 존재합니다. 🎯 영향을 받는 구성 요소 파일: /studentms/admin/edit-class-detail.php...

EUVD-2025-209818

The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the getsponsoredmeta AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract data from password protect...

AlmaLinux 9.2 [TuxCare] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc (ALMALINUX9.2:CLSA-2026:1785840756)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785840756 advisory. - ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPM...

AlmaLinux 9.6 [TuxCare] Security Update: opensc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778674879)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778674879 advisory. - A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. An attacker could use a crafted USB Device ...

AlmaLinux 9.2 [TuxCare] Security Update: opensc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1779190223)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779190223 advisory. - A vulnerability was found in OpenSC where PKCS1 encryption padding removal is not implemented as side- channel resistant. This iss...

CVE-2026-58415: Files or Directories Accessible to External Parties

Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...

AlmaLinux 9.6 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (ALMALINUX9.6:CLSA-2026:1777545654)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777545654 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17, a network-adjacent...

CVE-2026-34189: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards...

Rocky Linux 8 [CIQ] Security Update: cups / cups-client / cups-client-debuginfo / cups-debuginfo / etc (crlsa-2023_4864)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234864 advisory. cups: Information leak through Cups-Get-Document operation CVE-2023-32360 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9.6 [TuxCare] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc (ALMALINUX9.6:CLSA-2026:1783597433)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783597433 advisory. - ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface...

AlmaLinux 9.2 [TuxCare] Security Update: cups-filters / cups-filters-devel / cups-filters-libs (ALMALINUX9.2:CLSA-2025:1744716861)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1744716861 advisory. - CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing functionality including, but not limited...