CVE-2026-36980-Kernel-BSOD-DoS-PoC

CVE-2026-36980-Kernel-BSOD-DoS-PoC 프로젝트 날짜: 2026년 2월 / pwdrvio.sys 커널 드라이버의 IOCTL 핸들러에서 버퍼 오버플로우 취약점을 발견했습니다. 이 취약점을 통해 권한이 없는 로컬 공격자가 커널 풀 메모리를 손상시켜 즉각적인 시스템 충돌BSOD 및 서비스 거부Denial of Service를 유발할 수 있습니다. 2026-02-09 공급업체에 통보 2026-03-05 공급업체가 인정 2026-03-05 MITRE에 CVE 요청 2026-05-10 90일 조정 공개 기간 이후 ...

CVE-2026-96647

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsdremark' Parameter in all versions up to, and including, 6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for...

cve-2015-1187-dir820l-firmware-reverse-engineering

cve-2015-1187-dir820l-firmware-reverse-engineering Static firmware reverse engineering of CVE-2015-1187 in the D-Link DIR-820L using Strings, Ghidra, and Binwalk. Done by extracting MIPS root filesystem, identifying the ncc2 backend handler, and tracing pingaddr through command construction to...

CVE-2026-33718

CVE-2026-33718 OpenHands는 Git Diff 처리기를 통한 명령 삽입Command Injection 취약점이 있습니다. 기부 PayPal 또는 아래 QR 코드를 스캔하여 이 프로젝트의 유지보수를 지원해 주세요. ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 인가된 환경에서만 사용하세요: 로컬 가상 머신 Docker 컨테이너 격리된 랩lab 환경 인가된 침투 테스트 환경 예시 설정: git clone cd Project use python follow below Create a virtual...

EUVD-2026-91255

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsdremark' Parameter in all versions up to, and including, 6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for...

Voidgate

VOIDGATE 설명: AV/EDR 메모리 스캐너를 우회bypass하는 데 사용할 수 있는 기술입니다. 잘 알려지고 탐지되는 셸코드예: msfvenom를 개별 암호화된 어셈블리 명령어를 실시간on-the-fly 복호화하여 숨길 수 있으므로, 해당 메모리 페이지에 대해서는 메모리 스캐너가 무용지물이 됩니다. 작동 원리: 이 기술은 암호화된 어셈블리 명령어가 저장될 PAGEEXECUTEREADWRITE 메모리 영역을 생성합니다. 셸코드는 일부 패딩padding으로 감싸집니다. 프로그램은 셸코드의 엔트리포인트에 하드웨어...

CVE-2026-79618

The WP User Frontend WordPress plugin before 4.3.12 does not enforce its subscription-purchase requirement in one of its post-creation handlers, allowing authenticated users with subscriber-level access and above to create and, depending on the form's configuration, immediately publish posts...

CVE-2026-90988

The Request a Quote WordPress plugin through 2.5.6 does not perform an authorization check on one of its unauthenticated AJAX handlers, allowing unauthenticated users to read the contact records of quote-request submissions, including records the site has not published...

EUVD-2026-91189

The Request a Quote WordPress plugin through 2.5.6 does not perform an authorization check on one of its unauthenticated AJAX handlers, allowing unauthenticated users to read the contact records of quote-request submissions, including records the site has not published...

CVE-2026-90988

The Request a Quote WordPress plugin in versions through 2.5.6 is vulnerable to unauthenticated contact record disclosure. The root cause is a missing authorization check on an unauthenticated AJAX handler , specifically involving emd_get_std_pagenum. This allows unauthenticated users to read pri...

CVE-2017-14980

🐞 CVE-2017-14980: Sync Breeze Enterprise 10.0.28 - Stack-Based Buffer Overflow Stack-based buffer overflow in Sync Breeze Enterprise 10.0.28 reachable through the /login handler, demonstrating how unchecked input length can corrupt stack memory. 📑 Table of Contents Why this repository exists Why...

Likeshop < 2.5.7.20210311 - Arbitrary File Upload

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file with an...

CVE-2021-42013

CVE-2021-42013 Vulnerable service Installation Several options: 1. Docker container docker run -d -p 8080:80 12345qwert123456/apache2450cve-2021-42013 2. Dockerfile git clone https://github.com/12345qwert123456/CVE-2021-42013.git cd CVE-2021-42013-Vulnerable-service/2.4.50 docker build -t...

CVE-2026-103387

A weakness has been identified in garycourt uri-js up to 4.4.1. This affects the function URI.parse of the file src/schemes/mailto.ts of the component Mailto Header Handler. This manipulation of the argument to causes uncaught exception. The attack may be initiated remotely. The exploit has been...

Siemens SIMATIC S7-1500 CPU 1518 MFP Signal Handler Race Condition (CVE-2026-52910)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505980; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Linux Distros Unpatched Vulnerability : CVE-2026-42356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and...

libvirt security, bug fix, and enhancement update

11.10.0-12.7.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 11.10.0-12.7.el98 - remote: Fix integer overflow in RPC handler for virNodeGetFreePages CVE-2026-18917 RHEL-245282, CVE-2026-18917 - qemu: Always assume support for 'QEMUCAPSSETACTION' RHEL-242549 - qemu: Remove unused...

CVE-2026-103118

A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is...

PT-2026-104088

The Request a Quote WordPress plugin through 2.5.6 does not perform an authorization check on one of its unauthenticated AJAX handlers, allowing unauthenticated users to read the contact records of quote-request submissions, including records the site has not published...

CVE-2017-0199-Fix

CVE-2017-0199 수정 .hta 파일의 기본 핸들러를 변경하여 CVE-2017-0199의 코드 실행 기능을 제거합니다. OLE2COM 개체를 통해 호출되는 파일의 기본 핸들러는 로컬 시스템의 기본 애플리케이션과 별도로 저장되며 레지스트리를 통해서만 변경할 수 있습니다. 기본 익스플로잇 논리 이는 이 익스플로잇의 한 가지 실제 예시이며, 제가 이해한 대로 설명합니다. 모든 사례가 이 패턴을 따르는 것은 아니며, 제 평가가 정확하지 않을 수 있습니다. 그러나 다음 섹션에서 제시하는 수정은 제가 테스트한 상황에서는 실제로...