CVE-2022-22965-Spring4Shell

Spring4Shell Spring4Shell CVE-2022-22965 취약한 Tomcat 서버와 취약한 spring4shell 애플리케이션을 포함한 개념 증명PoC. 이 취약점에 대한 세부 정보 https://websecured.io/blog/624411cf775ad17d72274d16/spring4shell-poc https://www.springcloud.io/post/2022-03/spring-0day-vulnerability...

log4j-shell-csw

Log4j 간단한 익스플로잇 CVE-2021-44228 취약점에 대한 개념 증명 익스플로잇입니다. 보안 및 성능 정보를 기록하는 데 사용되는 Log4j는 다양한 소비자 및 엔터프라이즈 서비스, 웹사이트 및 애플리케이션은 물론 의료 기기 및 지원 시스템에서 Java를 사용하는 30억 개 이상의 기기에 영향을 미칩니다. 참고: 이것은 '클릭 한 번'으로 동작하는 익스플로잇이 아닙니다. 초기 트리거 페이로드가 생성되지만, 이를 적절한 위치예: HTTP 헤더/채팅 등에 주입하는 것은 사용자의 몫입니다. 사전 요구 사항 python3...

EDIDFuzzer

EDID 퍼저 Enhanced Display Identification Data를 퍼징하기 위한 도구 NCC Group Plc가 오픈소스로 공개 - http://www.nccgroup.com/ Andy Davis가 개발, andy dot davis at nccgroup dot com https://www.github.com/nccgroup/EDIDFuzzer AGPL에 따라 공개됨, 자세한 내용은 LICENSE 참조 문서 저장소에 포함된 백서whitepaper를 참조하십시오:...

CVE-2020-17453

Badges 라이선스 MIT 설치 CVE-2020-17453을 npm으로 설치 npm install cve-2020-17453 -g 사용법 단일 URL 예제 CVE-2020-17453 -u http://example.com 사용법 URL 목록 예제 CVE-2020-17453 -l urls.txt -o out.txt 스크린샷 도움말 메뉴 모든 항목 가져오기 👋 Hey karthithehacker .-----------------------------. | Tool : CVE-2020-17453 💉 | | Author :...

Atlassian Data Center Products Arbitrary File Access Mitigation

An F5 BIG-IP iRule and validation scripts mitigate and test the arbitrary file access vulnerability in affected Atlassian Data Center products. The probe sends traversal requests while discarding response bodies and reports only HTTP status and size...

Linux Distros Unpatched Vulnerability : CVE-2026-96812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Exposure of Resource to Wrong Sphere in the host file helper gofer in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled...

Linux Distros Unpatched Vulnerability : CVE-2026-106437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can...

Linux Distros Unpatched Vulnerability : CVE-2026-106434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The explicit decryption component of MongoDB libmongocrypt can return an unrecognized encrypted payload unchanged instead of returning a decryption error. An...

PT-2026-109676

1MCP Agent @1mcp/agent 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions. Attackers holding a single-tag token can send a filter like not to list and invoke...

Linux Distros Unpatched Vulnerability : CVE-2026-107324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON...

Linux Distros Unpatched Vulnerability : CVE-2026-98379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ip6trpfilter: reject routes without inet6dev ip6routelookup can return an error-free route whose rt6iidev is NULL. Lowering an external nexthop...

Linux Distros Unpatched Vulnerability : CVE-2026-98378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Skip unsettled links in link iterator bpflinkprime inserts a link into linkidr before anoninodegetfile succeeds and before bpflinksettle publishes the ID i...

Linux Distros Unpatched Vulnerability : CVE-2026-106429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This ca...

Linux Distros Unpatched Vulnerability : CVE-2026-98380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: reject IDR error pointers when deleting actions tcfactiondelete drops the reference held by its lookup before calling tcfidrdeleteindex with the save...

Linux Distros Unpatched Vulnerability : CVE-2026-105829

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - League CommonMark from 1.3.0 before 2.10.2 contains a cross-site scripting vulnerability that allows users posting Markdown to bypass the DisallowedRawHtml...

Linux Distros Unpatched Vulnerability : CVE-2026-98376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Use arraymapmetaequal for percpu array inner map replacement percpuarraymapops.mapmetaequal points to the generic bpfmapmetaequal, which does not compare...

Linux Distros Unpatched Vulnerability : CVE-2026-106428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed...

Linux Distros Unpatched Vulnerability : CVE-2026-106430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driv...

Linux Distros Unpatched Vulnerability : CVE-2026-98377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vlan: require the MAC header to be present in vlaninsertinnertag vlaninsertinnertag only guarantees head room via skbcowhead, never that maclen bytes of MAC...

Linux Distros Unpatched Vulnerability : CVE-2026-106433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document...