CVE-2020-29599

CVE-2020-29599 Artifex ImageMagick 라이브러리 Artifex 버전 6.9.11-40 및 7.0. 10-40 SVG 파일이 이미지로 변환됩니다...

dhcpoptinj

DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...

telegram-osint-lib

Telegram OSINT 시나리오 라이브러리 설명 많은 Telegram API 라이브러리들이 있지만, 채널에서 모든 사진을 가져오거나, 사용자 존재를 모니터링하거나, 새 계정을 등록하는 것과 같은 복잡한 시나리오를 실행하는 방법을 보여주는 라이브러리는 없습니다. 이 프로젝트는 이 상황을 개선하는 것을 목표로 합니다: 이제 새로운 시나리오를 쉽게 만들고 기존 시나리오를 원클릭으로 실행할 수 있습니다. 공식 Android 클라이언트의 Telegram API를 사용합니다. 근거 Telegram 프로토콜...

wch-ch56x-lib

wch-ch56x-lib 이 라이브러리는 WCH569 칩을 기반으로 하는 Facedancer USB 에뮬레이션 라이브러리의 새로운 백엔드인 Hydradancer와 함께 구축되었습니다. 이 프로젝트에는 안정적인 드라이버가 필요했으며, WCH 예제에는 많은 기능이 누락되어 있거나 테스트되지 않은 상태였습니다. 이 라이브러리는 tests/ 디렉토리의 벤치마크/무결성 테스트를 통해 검증된 USB3, USB2, HSPI 및 SerDes 드라이버를 제공합니다. wch-ch56x-bsp를 기반으로 하되, 더 높은 수준의 라이브러리를 제공하...

CVE-2026-64837

ICEcoder through 8.1 passes an unescaped filesystem path into a shell command in lib/properties.php, allowing authenticated users to inject OS commands through directory names. Attackers can create directories with shell metacharacters in their names and access the Properties function to execute...

CVE-2026-64837 ICEcoder through 8.1 OS Command Injection via lib/properties.php

ICEcoder through 8.1 passes an unescaped filesystem path into a shell command in lib/properties.php, allowing authenticated users to inject OS commands through directory names. Attackers can create directories with shell metacharacters in their names and access the Properties function to execute...

CVE-2026-64837

ICEcoder through 8.1 is vulnerable to OS command injection in lib/properties.php . The root cause is an unescaped filesystem path passed to a shell command via popen() . An authenticated attacker can create directories containing shell metacharacters in their names and then invoke the Properties ...

CVE-2026-64837 ICEcoder through 8.1 OS Command Injection via lib/properties.php

ICEcoder through 8.1 passes an unescaped filesystem path into a shell command in lib/properties.php, allowing authenticated users to inject OS commands through directory names. Attackers can create directories with shell metacharacters in their names and access the Properties function to execute...

UBUNTU-CVE-2026-86564

Missing length validation before reading commanddata in virtio-net control queue handler...

CVE-2026-86564

Missing length validation before reading commanddata in virtio-net control queue handler...

PT-2026-89418

ICEcoder through 8.1 passes an unescaped filesystem path into a shell command in lib/properties.php, allowing authenticated users to inject OS commands through directory names. Attackers can create directories with shell metacharacters in their names and access the Properties function to execute...

EUVD-2026-74296

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

DEBIAN-CVE-2026-86564

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

CVE-2026-86564

A flaw in DPDK lib/vhost results from missing length validation before reading command_data in the virtio-net control-queue handler , which can cause an out-of-bounds read and a host process crash . The CVSS v3.1 score is 3.3 (LOW) , with a local attack vector, low privileges required, no user in...

The vulnerability in the `lib/rhashtable.c` component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the lib/rhashtable.c component of the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-86564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio- net control-queue handler can cause an out-of-bounds rea...

cve-2020-1015

CVE-2020-1015 CVE-2020-1015용 PoC 더 자세한 내용은 여기에서 확인할 수 있습니다. 컴파일하려면: 1. Visual Studio에서 빈 C++ 프로젝트를 만듭니다. 2. cve20201015.cpp 및 Source.idl을 프로젝트에 소스 파일로 추가합니다. 3. Source.idl을 컴파일합니다. 그러면 Sourcec.c, Sourceh.h, Sources.c 세 개의 파일이 생성됩니다. 4. 처음 두 파일을 프로젝트에 소스 파일로 추가합니다. 5. rpcrt4.lib을 프로젝트에 추가 종속성으로...

jenkinsci__workflow-cps-global-lib-plugin_CVE-2022-25174_544-vff04fa68714d

Pipeline 共享库 当你有多个 Pipeline 作业时，你通常希望在不同作业之间共享部分 Pipeline 脚本，以保持 Pipeline 脚本的 DRY 原则。一个非常常见的场景是你有多个以相似方式构建的项目。 该插件通过允许你创建 "共享库脚本" SCM 仓库来添加这一功能。它可以通过两种模式使用： 一种传统模式，其中存在一个由 Jenkins 自身托管的单一 Git 仓库，你可以向其中推送更改。 一种更通用的模式，你可以在你选择的任何位置定义由任何 SCM 托管的库。 完整的用户文档可以在 用户手册的 Pipeline 章节 中找到。...

CVE-2026-84368 joi: Prototype pollution via a `__proto__` language key in custom messages

joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.6 and 18.2.5, the @hapi/joi package through 17.1.1 and the successor joi package contain prototype pollution in lib/messages.js, where exports.compile and exports.merge reuse inherited objects for...

CVE-2026-83619

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.7.0 until 0.8.15, the release-0.8.x parser in lib/sax.js trims captured end-tag names with the unanchored global expression / \t\n\r+$/g. For an end tag containing a long whitespace run...