jboss-autopwn

⚠️ 주의: 이 도구는 더 이상 적극적으로 유지보수되지 않습니다. JBoss Autopwn Script Christian G. Papathanasiou http://www.spiderlabs.com 소개 이 JBoss 스크립트는 대상 JBoss AS 서버에 JSP 셸을 배포합니다. 일단 배포되면, 이 스크립트는 업로드 및 명령 실행 기능을 사용하여 대화형 세션을 제공합니다. 주요 기능은 다음과 같습니다: 멀티플랫폼 지원 - Windows, Linux 및 Mac 대상에서 테스트됨 바인드bind 및 리버스 바인드reverse bin...

artemis

Let AI assistants and test suites use real phones like a human. English • 中文文档 • Workflow Showcase • Quick Start • MCP for IDEs • Benchmarks • Discord Community Live Demo: Setup driving routes and calculate total durations in Google Maps, then open YouTube to play a Coldplay song. Key Highlights...

CVE-2025-15030

CVE-2025-15030 User Profile Builder 3.15.2 - 인증되지 않은 임의 비밀번호 재설정 CVE-2025-15030 User Profile Builder — 인증되지 않은 비밀번호 재설정 → 관리자 계정 탈취 + 셸 업로드 / / \ |/ / / / / / \ / / / \ / \ | / | | //| \ / /| / | / /| \ | || | / | / || / | | | // | /\/ /| /|/ /\ |\| |\ || /| \ || /| // \...

CVE-2026-55396

Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows adjacent unauthenticated attackers to intercept, hijack, or modify control traffic against Teledyne FLIR...

detaped

Detaped 소개 Detaped는 DuktapeGitHub용 Python 디스어셈블러이자 디컴파일러입니다. 블랙박스 평가와 같이 컴파일된 Duktape 바이트코드 바이너리만 있는 상황에서 소스 코드 검토 및 분석을 위해 설계되었습니다. 기능 JSE 파일 형식 파싱 JSE 바이너리 또는 바이너리 디렉터리 디스어셈블 ASM 스타일 명령어 생성바이트코드 일대일 매핑 저수준 JavaScript "유사" 출력 생성 디컴파일러는 기본적인 고수준 JavaScript "유사" 출력 생성 지원 버전 v2.7.0 사용법 └─$ detaped...

GHSA-WV8Q-QHHJ-9H54 vulnerabilities

Vulnerabilities for packages: apache-tika-fips, apache-polaris-fips, opensearch-fips, camunda, ruby3.2-jrjackson, neo4j, traccar-fips, cruise-control-fips, tinkerpop, s3proxy-fips, zookeeper, tez, nuxeo, pinot-fips, commercial-elasticsearch, solr, logstash-fips, ruby4.0-jrjackson, thingsboard,...

GHSA-CXP5-3PX4-PW24 vulnerabilities

Vulnerabilities for packages: apache-tika-fips, apache-polaris-fips, opensearch-fips, camunda, ruby3.2-jrjackson, neo4j, traccar-fips, cruise-control-fips, tinkerpop, s3proxy-fips, zookeeper, tez, nuxeo, pinot-fips, commercial-elasticsearch, solr, logstash-fips, ruby4.0-jrjackson, thingsboard,...

CVE-2026-91776 vulnerabilities

Vulnerabilities for packages: apache-tika-fips, apache-polaris-fips, opensearch-fips, camunda, ruby3.2-jrjackson, neo4j, traccar-fips, cruise-control-fips, tinkerpop, s3proxy-fips, zookeeper, tez, nuxeo, pinot-fips, commercial-elasticsearch, solr, logstash-fips, ruby4.0-jrjackson, thingsboard,...

CVE-2026-91777 vulnerabilities

Vulnerabilities for packages: apache-tika-fips, apache-polaris-fips, opensearch-fips, camunda, ruby3.2-jrjackson, neo4j, traccar-fips, cruise-control-fips, tinkerpop, s3proxy-fips, zookeeper, tez, nuxeo, pinot-fips, commercial-elasticsearch, solr, logstash-fips, ruby4.0-jrjackson, thingsboard,...

CVE-2026-97689 vulnerabilities

Vulnerabilities for packages: aws-cli, datadog-agent-fips, kubeflow-pipelines-fips, airflow-core, openstack-cinder-2026.1, openstack-tempest-2025.2, openstack-manila-2026.1, openstack-designate-2025.2, openstack-glance-2025.2, open-webui, openstack-horizon-2025.1-fips, presidio-analyzer,...

GHSA-8988-9CW3-XX77 vulnerabilities

Vulnerabilities for packages: aws-cli, datadog-agent-fips, kubeflow-pipelines-fips, airflow-core, openstack-cinder-2026.1, openstack-tempest-2025.2, openstack-manila-2026.1, openstack-designate-2025.2, openstack-glance-2025.2, open-webui, openstack-horizon-2025.1-fips, presidio-analyzer,...

GHSA-GH4C-6FX4-QH6G vulnerabilities

Vulnerabilities for packages: aws-cli, datadog-agent-fips, kubeflow-pipelines-fips, airflow-core, openstack-cinder-2026.1, openstack-tempest-2025.2, openstack-manila-2026.1, openstack-designate-2025.2, openstack-glance-2025.2, open-webui, openstack-horizon-2025.1-fips, presidio-analyzer,...

GHSA-VXQ7-64XX-V4GW vulnerabilities

Vulnerabilities for packages: aws-cli, datadog-agent-fips, kubeflow-pipelines-fips, airflow-core, openstack-cinder-2026.1, openstack-tempest-2025.2, openstack-manila-2026.1, openstack-designate-2025.2, openstack-glance-2025.2, open-webui, openstack-horizon-2025.1-fips, presidio-analyzer,...

CVE-2026-91777 vulnerabilities

Vulnerabilities for packages: ruby3.2-jrjackson, spdx-tools-java, solr, dependency-track, infinispan, apache-pulsar, ruby3.4-jrjackson, wavefront-proxy, cassandra-reaper, logstash, celeborn, strimzi-kafka-oauth, gradle, management-api-for-apache-cassandra-5.0, opensearch, zookeeper,...

GHSA-CXP5-3PX4-PW24 vulnerabilities

Vulnerabilities for packages: ruby3.2-jrjackson, spdx-tools-java, solr, dependency-track, infinispan, apache-pulsar, ruby3.4-jrjackson, wavefront-proxy, cassandra-reaper, logstash, celeborn, strimzi-kafka-oauth, gradle, management-api-for-apache-cassandra-5.0, opensearch, zookeeper,...

CVE-2026-91776 vulnerabilities

Vulnerabilities for packages: ruby3.2-jrjackson, spdx-tools-java, solr, dependency-track, infinispan, apache-pulsar, ruby3.4-jrjackson, wavefront-proxy, cassandra-reaper, logstash, celeborn, strimzi-kafka-oauth, gradle, management-api-for-apache-cassandra-5.0, opensearch, zookeeper,...

GHSA-WV8Q-QHHJ-9H54 vulnerabilities

Vulnerabilities for packages: ruby3.2-jrjackson, spdx-tools-java, solr, dependency-track, infinispan, apache-pulsar, ruby3.4-jrjackson, wavefront-proxy, cassandra-reaper, logstash, celeborn, strimzi-kafka-oauth, gradle, management-api-for-apache-cassandra-5.0, opensearch, zookeeper,...

GO-2026-6566 Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header in github.com/fabiolb/fabio

Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers clientip/tls/requestid still strippable via the Connection header in github.com/fabiolb/fabio...

GO-2026-6590 OpenShift Cluster Logging Operator missing authorization flaw in github.com/openshift/cluster-logging-operator

OpenShift Cluster Logging Operator missing authorization flaw in github.com/openshift/cluster-logging-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...

CVE-2026-78071

DPCalendar Free のロケーションタイトルを介した格納型XSS DPCalendar Free ≤ 10.11.2 — Authorロールのユーザーがコンテンツレビューを迂回し、ロケーションタイトルを介して永続的XSSを注入。任意の訪問者がホバーした際に発動 -orange 概要 $location-title フィールドは、defaultlocations.php 内で htmlspecialchars を使用せずにレンダリングされます。Joomla のサーバーサイド InputFilter::clean は文字列フィールドから を除去しますが、"...