H2-database-CVE-2022-23221

H2 Database RCE CVE-2022-23221 1. 요약 참고: https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2는 관계형 데이터베이스 관리 시스템으로, SQL 엔진 안에서 Java 코드를 직접 컴파일하고 실행할 수 있는 기능을 제공한다. H2 드라이버는 JDBC URL을 파싱하여 애플리케이션과 데이터베이스 간의 연결을 설정한다. 이때 URL에 포함된 설정 파라미터를 통해 데이터베이스의 초기 상태나 동작을 제어할 수 있다. 문제가 되는 H2 2.1.210 이전 버전에는 JDBC...

CVE-2023-34468-PoC

CVE-2023-34468 PoC（Apache NiFi 向け） CVE-2023-34468 （Apache NiFi の 1.22.0 より前のバージョンに影響）に対する教育用 proof-of-concept PoC です。このリポジトリは、H2 JDBC URL 設定の悪用が脆弱な Apache NiFi インストールにおいて認証済みリモートコード実行 RCE につながることを示しています。 概要 CVE-2023-34468 は、Apache NiFi のコントローラサービスに影響を与える認証済みリモートコード実行の脆弱性です。 この脆弱性は、INIT=RUNSCRIPT...

CVE-2025-32463_PoC

CVE-2025-32463 NVD CVE-2025-32463 ほとんどの場合、対象サーバーにはGCCがデフォルトでインストールされていません 。 このProof of Concept（PoC）は、影響を受けるシステム上で即座に実行できるよう、プリコンパイル済みのバージョンを提供します。 使用方法 1. woot1337.c ファイルをコンパイルします： gcc -shared -fPIC -Wl,-init,woot -o libwoot1337.so woot1337.c 2. .soファイルをC配列（バイト形式）に変換します： xxd -i libwoot1337.so...

CVE-2021-3493

CVE-2021-3493 — Ubuntu OverlayFS 本地权限提升 CVE-2021-3493 的一个可用的概念验证（PoC）——这是 Ubuntu 内核 OverlayFS 实现中的一个本地权限提升漏洞。 非特权用户可以在用户命名空间内挂载 overlay 文件系统，并通过 setxattr 设置任意文件能力（file capabilities）。内核未能验证这些能力的命名空间来源，因此它们会在 init 用户命名空间 中生效——从而允许任何本地用户提升至 root 权限。 受影响版本 此漏洞为 Ubuntu 特有 。Ubuntu 携带了一个允许非特权 overlay...

holos

KVM 用の Docker compose。1 つの YAML ファイルでマルチ VM スタックを定義。libvirt も XML も分散コントロールプレーンも不要。 ウェブサイトとドキュメント: https://zeroecco.github.io/holos/ プリミティブはコンテナではなく VM。すべてのワークロードインスタンスは独自の カーネル境界、qcow2 オーバーレイ、cloud-init シード、生成された SSH アクセスを 持ちます。 クイックスタート Linux + /dev/kvm が必要です。macOS ビルドでは validate、import、images、...

CVE-2023-25355-25356

エクスプロイトとクレジット このエクスプロイトは [email protected] によって発見され、以下の2つの素晴らしい資料で紹介されています。 完全開示記事 DEFCON31 スライド この脆弱性をさらに自動化するためのリポジトリが Alex Linov によって公開されています。 https://github.com/AlexLinov/sipxcom-RCE 目的 CVE-2023-25355 は、sipXcom サーバー上のファイルが攻撃者が制御する Web サーバーにアップロードされる、外部送信 exfiltration メカニズムです。...

witchcraft

🎉 あなたのOPSECコンパニオン。witchcraft help または witchcraft manual（完全なマニュアル）を実行してください 🎉 何をするのか？ WITCHCRAFTは、単なるエイリアス以上のものです。busyboxと連携できるinitシステム、シェル、そしてハッキング、OSINT、フォレンジックなどのための自動化エンジンです。 名前 witchcraft - サイバーセキュリティのための多目的ツールキット 概要 witchcraft MODULENAME OPTION... FILE... IP... 説明...

CVE-2026-82043

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...

CVE-2026-82043

Versions of UTMStack prior to 11.2.16 are vulnerable to an account enumeration flaw. An unauthenticated attacker can identify registered email addresses by sending requests to the POST /api/account/reset-password/init endpoint. The application provides different HTTP responses based on the existe...

CVE-2026-82043 UTMStack < 11.2.16 Account Enumeration via Password Reset Endpoint

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...

EUVD-2026-91798

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...

CVE-2026-82043 UTMStack < 11.2.16 Account Enumeration via Password Reset Endpoint

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...

f_hid-4.14-backports

fhid backports for Linux 4.14.190 SM-A525F Three fixes to drivers/usb/gadget/function/fhid.c, carried by hand to a 4.14.190 Android vendor kernel and verified on the device they run on. 4.14 is end-of-life. No stable backport exists for any of these, and none is coming. That is the whole reason...

CVE-2026-33725

CVE-2026-33725 一个针对 CVE-2026-33725 的概念验证漏洞利用程序，该漏洞是 Metabase 中 EE 序列化导入时通过 H2 JDBC INIT 注入导致的远程代码执行和任意文件读取漏洞。 受影响版本 Metabase Enterprise ≥ v1.47 且 v1.54.22 Metabase Enterprise ≥ v1.54.0 且 v1.54.22 Metabase Enterprise ≥ v1.55.0 且 v1.55.22 Metabase Enterprise ≥ v1.56.0 且 v1.56.22 Metabase Enterprise...

Rocky Linux 8 [CIQ] Security Update: cloud-init (crlsa-2025_11324)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202511324 advisory. cloud-init: Cloud init permissions flaw CVE-2024-6174 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Ness...

Rocky Linux 8.8 [CIQ] Security Update: cloud-init (ciqsa-2026_0383)

The Rocky Linux 8.8 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260383 advisory. This advisory aggregates security fixes for the cloud-init SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-6174. Tenable has extracted the preceding description...

AlmaLinux 9.2 [TuxCare] Security Update: cloud-init (ALMALINUX9.2:CLSA-2025:1760025490)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760025490 advisory. - Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed password...

Rocky Linux 9.4 [CIQ] Security Update: cloud-init (ciqsa-2026_0522)

The Rocky Linux 9.4 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260522 advisory. This advisory aggregates security fixes for the cloud-init SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2024-6174. Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: cloud-init (crlsa-2021_3081)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20213081 advisory. cloud-init: randomly generated passwords logged in clear-text to world-readable file CVE-2021-3429 Tenable has extracted the preceding description block directly fr...

AlmaLinux 9.2 [TuxCare] Security Update: cloud-init (ALMALINUX9.2:CLSA-2026:1782809708)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782809708 advisory. - Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could...