CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - 対話型シェル HTTPハイジャック + POST + AES-256-CBC/BASE64 検出 -dnslog DNSLog 出力なし検出 Nuclei -poc 脆弱性エコー検出 エクスプロイト -exp 対話型シェル base64 echo -exp2 対話型シェル HTTPハイジャック + POST + Base64 -exp3 対話型シェル HTTPハイジャック + POST + AES-256-CBC burpsuite...

Security Bulletin: IBM Edge Data Collector uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42033, CVE-2026-42034, CVE-2026-42035

Summary IBM Edge Data Collector Component uses uuid-8.3.2.tgz, uuid-9.0.1.tgz which is vulnerable to CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036, CVE-2026-42037, CVE-2026-42038, CVE-2026-42039, CVE-2026-42040, CVE-2026-42041, CVE-2026-42042, CVE-2026-42043, CVE-2026-42044. This...

CVE-2026-42033

Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios reads without a hasOwnProperty guard, an attacker can a silently intercept and modify every JSON response before the...