RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111

Windows 11 RRAS 취약점 시뮬레이션 실습 환경 CVE-2026-25172, CVE-2026-25173, CVE-2026-26111 ⚠️ 중요 – 교육 및 방어 목적으로만 사용 이 가이드는 Windows 라우팅 및 원격 액세스 서비스RRAS 관리 도구의 정수 오버플로우 취약점을 이해하기 위해 격리된 제어된 실습 환경 을 구축하기 위한 것입니다. 명시적 승인 없이 어떠한 시스템에서도 이러한 기술을 사용하지 마십시오. 실습 환경이 인터넷이나 프로덕션 네트워크에 접근할 수 없도록 하십시오. 📋 개요 이 실습은 RRAS 관리...

Kan <= 0.5.4 - Server-Side Request Forgery

Kan, an open-source project management tool Trello alternative, versions 0.5.4 and below are vulnerable to an unauthenticated Server-Side Request Forgery in the /api/download/attatchment endpoint. The endpoint passes the attacker-controlled url query parameter straight to a server-side fetch...

adminer_CVE-2021-43008

CVE-2021-43008 — Adminer 취약점 악성 MySQL 서버를 통한 임의 파일 읽기 1. Adminer란 무엇인가? Adminer는 MySQL, PostgreSQL, SQLite 또는 SQL Server 데이터베이스를 쉽게 관리할 수 있는 웹 기반PHP 도구입니다. phpMyAdmin의 가벼운 대안으로 널리 배포됩니다. 영향을 받는 버전: Adminer ≤ 4.6.2 2. 취약점의 본질은 무엇인가? 2.1. 접근 제어 실패 Adminer는 임의의 원격 MySQL 서버 에 대한 연결을 허용합니다. 그런데 MySQL...

cved

CVED 취약한 도커 컨테이너를 관리하는 도구 설치 qt = 5.x docker git qmake make sudo make install 사용법 docker 그룹이 아직 없다면 생성합니다. sudo groupadd docker 사용자를 docker 그룹에 추가합니다. sudo usermod -aG docker $USER 로그아웃 후 다시 로그인하여 그룹 멤버십이 다시 평가되도록 합니다. docker 서비스를 시작합니다. sudo systemctl start docker cved를 시작합니다. cved 기여 코드:...

[SECURITY] Fedora 45 Update: evolution-3.62.0-1.fc45

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The components which make up Evolution are tightly integrated with one another and act as a seamless personal information-management tool...

Astra Linux – Vulnerability in snmptt

Before version 1.4.2 of SNMPTT, attackers could execute shell code through EXEC, PREXEC, or unknowntrapexec...

ROS-20260907-73-0063

The vulnerability of the closesqleditorsession and checktransactionstatus functions in the pgAdmin 4 database management tool is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the pgAdmin 4 database management tool, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the pgAdmin 4 database management tool is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2026-85028: Creation of Temporary File in Directory with Insecure Permissions

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

CVE-2026-30865: Improper Neutralization of Input During Web Page Generation

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting XSS vulnerability in the dashboard save functionality. This issue has been fixed in version 3.2.3...

CVE-2026-15267: Improper Neutralization of Special Elements used in an SQL Command

The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to SQL Injection via the 'wppmprojfilter' parameter in versions up to, and including, 5.0.9. This is due to insufficient escaping on the user-supplied parameter and the lack of...

Security Bulletin: Eclipse IDE versions 2023-09 (4.29) is vulnerable to external attack

Summary A vulnerability in Eclipse IDE version 2023-09 4.29 was found. The IBM Enterprise Records configuration manager tool was using Eclipse IDE to help present the user interface for customers to configure their software. Vulnerability Details CVEID:CVE-2023-4218 DESCRIPTION: In Eclipse IDE...

CVE-2026-12110: Improper Neutralization of Special Elements used in an SQL Command

The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to generic SQL Injection via the 'tasksearch' parameter in all versions up to, and including, 5.0.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-12090: Improper Neutralization of Special Elements used in an SQL Command

The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to generic SQL Injection via the 'wppmprojfilter' parameter in all versions up to, and including, 5.0.8 due to insufficient escaping on the user supplied parameter and lack of sufficie...

CVE-2024-40646

Vertex is a management tool for PT Private Tracker users to manage streaming and watching videos. Versions prior to commit fbde301b97986d5913fc4bc95f5445750d282e11 are vulnerable to path traversal. Users should upgrade to a version containing commit fbde301b97986d5913fc4bc95f5445750d282e11 to...

CVE-2024-40646

Vertex is a management tool for PT Private Tracker users to manage streaming and watching videos. Versions prior to commit fbde301b97986d5913fc4bc95f5445750d282e11 are vulnerable to path traversal. Users should upgrade to a version containing commit fbde301b97986d5913fc4bc95f5445750d282e11 to...

VERTEX 路径遍历漏洞

VERTEX is an integrated management tool developed by the individual developer of lswl.in, designed for binge-watching and stream watching. VERTEX has a path traversal vulnerability; this vulnerability arises from path traversal attacks, which may allow attackers to access unauthorized files...

CVE-2026-46140

CVE-2026-46140 affects the Linux kernel Bluetooth btmtk driver. The wmt event handling in btmtk_usb_hci_wmt_sync() casts SKB data to btmtk_hci_wmt_evt structures (7/9 bytes) without ensuring sufficient payload, risking out-of-bounds reads from SKB tailroom when a short firmware response is receiv...

The vulnerability of the Prisma SD-WAN ION network management tool, related to errors in the certificate validation process, allows a hacker to execute a type of “man-in-the-middle” attack.

The vulnerability of the Prisma SD-WAN ION network management tool is related to errors in the certificate authentication process. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

CVE-2026-6225: Improper Neutralization of Special Elements used in an SQL Command

The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'projectsearch' parameter in all versions up to, and including, 5.0.6 due to insufficient escaping on the user supplied parameter and lack of...