CVE-2022-22978-demo

CVE-2022-22978-demo Пример кода для уязвимости CVE-2022-22978 Условия эксплуатации Хотя уязвимость классифицируется как высокая, условия её эксплуатации довольно строгие, лично я считаю эту уязвимость довольно ограниченной. 1. Во-первых, spring-security должен быть в зоне поражения уязвимости. 2...

CVE-2021-40859

CVE-2021-40859 Эксплойт бэкдоров Auerswald COMpact 8.0B Описание Бэкдоры были обнаружены в устройствах Auerswald COMpact 5500R версий 7.8A и 8.0B, которые предоставляют злоумышленникам, имеющим доступ к веб-интерфейсу управления, полный административный доступ к устройству. Детали продукта Продук...

CVE-2021-44228-DFIR-Notes

CVE-2021-44228 DFIR-Notes 집에 운전해서 가는 중에 log4shell 취약점에 대한 첫 메시지가 흘러들어오기 시작했습니다. 2021년 12월 9일, Apache Log4j 2 유틸리티의 여러 버전에 영향을 미치는 높은 심각도의 취약점CVE-2021-44228이 프로젝트의 GitHub를 통해 공개적으로 공개되었습니다. 알리바바 클라우드 보안 팀의 Chen Zhaojun이 발견한 이 취약점은 Apache Log4j 2 버전 2.0부터 2.14.1까지 영향을 미칩니다. 집에 도착하자마자 바로 뛰어들었습니다. 평소...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The inappropriate implementation of Autofill in Google Chrome prior to version 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: 9317/1: kexec: Make smp stop calls asynchronous If a panic is triggered by a hrtimer interrupt, all online CPUs will be notified and set to offline. However, as highlighted in the commit 19dbdcb8039c “smp: Warn on function...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In the net subsystem, hsr: rejecting HSR frames if skb cannot hold the tag. Receiving an HSR frame with insufficient space to hold the HSR tag in the skb can result in a crash kernel BUG. 45.390915 skbuff: skbunderpanic:...

Astra Linux – Vulnerability in Linux, Linux 5.10

Rogue backends can cause Denial of Service DoS attacks on guests through high-frequency events. This CNA information record relates to multiple Common Vulnerabilities and Exposures CVEs; the text explains which aspects/vulnerabilities correspond to which CVEs. Xen allows for the execution of PV...

Astra Linux – Vulnerability in Chromium

The use of after-free in Media in Google Chrome before version 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

CVE-2026-11645

🚨 CVE-2026-11645 🚨 🌐 Уязвимость повреждения памяти нулевого дня в Google Chrome V8 🔥 Эксплуатируемый в реальных атаках нулевой день ⚡ Повреждение памяти движка V8 🛡️ Немедленно установите исправление 📖 Обзор ⚠️ CVE-2026-11645 — это уязвимость нулевого дня высокого уровня серьезности, затрагивающая...

wifi_leak

WiFi-баг - CVE-2018-4084 ZeroFest 2017 Среда протестировано на macOS High Sierra 10.13.1 протестировано на MacBook Pro Retina, 15-inch, Mid 2015 Ссылки https://support.apple.com/en-us/HT208465...

GhostLock_MT6983V_5.10

GhostLockMT6983V5.10 고위험 취약점 CVE-2026-43499, 5.10 커널 및 MediaTek MT6983V 구현...

CVE-2026-105237

A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAuthController.java of the component Login Endpoint. The manipulation results in improper restriction of excessive...

CVE-2021-46079

CVE-2021-46079 Название эксплойта: Vehicle Service Management System - 'Multiple' File upload Leads to Html Injection Автор эксплойта: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 HIGH Ссылки: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection...

CVE-2024-9326-PoC

CVE-2024-9326 PoC-скрипт эксплуатации Этот PoC-скрипт предназначен для проверки наличия CVE-2024-9326 — критической уязвимости SQL-инъекции в PHPGurukul Online Shopping Portal v2.0. Он автоматизирует процесс эксплуатации, чтобы определить, уязвимо ли целевое веб-приложение, позволяя специалистам ...

CVE-2026-105237: Improper Restriction of Excessive Authentication Attempts

A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAuthController.java of the component Login Endpoint. The manipulation results in improper restriction of excessive...

PT-2026-104726

A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAuthController.java of the component Login Endpoint. The manipulation results in improper restriction of excessive...

WordPress-News-and-Blog-Designer-Bundle-CVE-2025-14502

CVE-2025-14502 Отчет об анализе уязвимости Обзор уязвимости Тип уязвимости : Локальное включение файлов Local File Inclusion, LFI Версии под воздействием : News and Blog Designer Bundle 1.1 и все предыдущие версии Степень серьезности : Высокая Сложность эксплуатации : Низкая без аутентификации...

vulnerability-poc

취약점 PoC 저장소 고위험 CVE에 대한 엄선된 PoCProof-of-Concept 코드, 테스트 랩, 예방 규칙 모음 — 공인된 보안 테스트, 침투 테스트, CTF 챌린지, 보안 연구 를 위해 제작되었습니다. SeekersLab 팀이 관리합니다. 모든 항목에는 탐지 전용 PoC 스크립트, Docker 테스트 랩취약한 앱 + 패치된 앱, 이중 언어영어 / 한국어 문서, 즉시 배포 가능한 예방 규칙이 포함되어 있습니다. ⚠️ 면책 조항 이 코드는 교육 목적, 공인된 침투 테스트, CTF 챌린지 및 보안 연구 용도로만 제공됩니다...

CVE-2024-21689

CVE-2024–21689 RCE в Bamboo Data Center и Server Atlassian CVSS Score - 7.6 🔥 Описание Эта уязвимость RCE удаленное выполнение кода высокой степени серьезности, CVE-2024-21689, была введена в версиях 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 и 9.6.0 Bamboo Data Center и Server. Эта уязвимость удаленного...