copy.fail-mitigation-MLM

Multi-Linux Managerで、copy-fail.slsファイルのコードを使用して新しい設定チャネル（State Channel）を作成します。設定チャネルをすべてのマシンに割り当てて実行するか、Highstateを実行してください。 これは一時的な修正です！...

iVANTI-CVE-2021-38560

iVANTI-CVE-2021-38560 Ivanti Service Manager 2021.1 は、ConfigDB 呼び出しに関連付けられた appName パラメータを介して反映型 XSS に感染しており、例えば RelocateAttachments.aspx などで発生します。 脆弱性タイプ: クロスサイトスクリプティング XSS 製品ベンダー: IVANTI 影響を受ける製品バージョン: Service Manager - = ペイロード:...

CVE-2026-20805-POC

CVE-2026-20805 PoC Microsoft の Desktop Windows Manager dwm.exe における情報漏えい脆弱性の概念実証コードです。 📋 脆弱性の概要 ID: CVE-2026-20805 製品: Microsoft Windows コンポーネント: Desktop Windows Manager dwm.exe CWE-ID: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor 深刻度 CVSS 3.1: 5.5 中 ベクター:...

CVE-2021-45010-TinyFileManager-Exploit

CVE-2021-45010 CVE-2021-45010：Tiny File Manager 项目中的 Tiny File Manager = 2.4.3 的 tinyfilemanager.php 文件上传功能存在路径遍历漏洞，允许拥有有效用户账户的远程攻击者将恶意 PHP 文件上传到 Web 根目录，并在目标服务器上实现代码执行。...

CVE-2026-47574

A flaw was found in the NVIDIA Virtual GPU vGPU Manager for Linux. A local user with basic privileges can exploit an incorrect transfer of resources across isolation spheres. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, cause a denial of service...

CVE-2026-47519

A flaw was found in nvidia-vgpu-software's Virtual GPU vGPU Manager for Linux. A local user with basic privileges can trigger an out-of-bounds read in the kernel-mode driver, accessing memory outside designated boundaries. A successful exploit could allow the attacker to execute arbitrary code,...

opencode-secure

オープンソースのAIコーディングエージェント。 インストール YOLO curl -fsSL https://opencode.ai/install | bash パッケージマネージャー npm i -g opencode-ai@latest または bun/pnpm/yarn scoop install opencode Windows choco install opencode Windows brew install anomalyco/tap/opencode macOS と Linux（推奨、常に最新版） brew install opencode macOS と...

CVE-2021-35587

CVE-2021-35587 説明 - CVE-2021-35587のPOC: 悪用が容易な脆弱性により、HTTP経由でネットワークアクセスを持つ認証されていない攻撃者がOracle Access Managerを侵害できます。 - 作成者: antx、2022年3月14日。 詳細 - Oracle Fusion MiddlewareのOracle Access Manager製品（コンポーネント: OpenSSO Agent）における脆弱性。 - 悪用が容易な脆弱性により、HTTP経由でネットワークアクセスを持つ認証されていない攻撃者がOracle Access...

PYSEC-2026-4055 JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

JupyterLab's PyPI extension manager runs python -m pip uninstall with the extension name taken from the request body. ExtensionHandler.post validates the name for cmd=install but not for cmd=uninstall, so a name that begins with - reaches the command line and pip reads it as an option rather than...

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

JupyterLab's PyPI extension manager runs python -m pip uninstall with the extension name taken from the request body. ExtensionHandler.post validates the name for cmd=install but not for cmd=uninstall, so a name that begins with - reaches the command line and pip reads it as an option rather than...

CVE-2024-4956-Sonatype-Nexus-Repository-Manager

CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Nexus Repository Manager は、ビルド成果物を保存するための中央プラットフォームを提供します。 CVE-2024-4956 は、Sonatype Nexus Repository Manager におけるパストラバーサルの脆弱性です。攻撃者は、認証を一切必要とせずに、Nexus Repository アプリケーションのスコープ外にあるシステムファイルを含む任意のファイルをダウンロードとして返す URL を作成できます。 影響を受けるバージョン :...

CVE-2020-10199

CVE-2020-10199 以前、PTの際に、対象環境にNexus Repository Managerが構築されていることに遭遇し、いくつか壁にぶつかりながらも最終的にShellを取得できました。 少し記録を残しておくと、今後使うときに振り返りやすくなります。 対象バージョン: Sonatype Nexus Repository Manager OSS 3.20.1-01 PoC を使って Code Execution をテストし、脆弱性の存在を確認しました。（注: この時点ではログインセッションでした。対象環境のデフォルトクレデンシャルの問題を偶然発見したためです） curl -i...

CVE-2026-79896

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...

CVE-2026-12627

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Cisco 버그: CSCur90888 Exploit 제목 : Cisco UCS Manager - 2.21d - 원격 명령 실행 설명 : Cisco FX-OS 1.1.2 이전 버전Firepower 9000 장치 및 Cisco Unified Computing SystemUCS Manager 2.24b 이전 버전, 2.252.25a 이전 버전, 3.02e 이전 3.0 버전의 특정 CGI 스크립트는 원격 공격자가 조작된 HTTP 요청을 통해...

tinyfilemanager-2.4.3-exploit

CVE-2021-45010 Tiny File Manager-2.4.3 익스플로잇 Tiny File Manager Project의 Tiny File Manager = 2.4.6에 포함된 tinyfilemanager.php의 파일 업로드 기능에 존재하는 경로 탐색Path traversal 취약점으로 인해, 유효한 사용자 계정을 가진 원격 공격자가 악성 PHP 파일을 웹 루트에 업로드하고 대상 서버에서 코드 실행을 수행할 수 있습니다...

CVE-2026-12627 Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

CVE-2026-12627

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in the boks_autoregisterd component. A remote attacker with network access to the autoregistration service may trigger memory corruption during client response processing. The vulnerability is asso...

CVE-2026-12627 Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

EUVD-2026-90882

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...