CVE-2020-10199

CVE-2020-10199 Ранее во время пентеста я столкнулся с целевой средой, где был развёрнут Nexus Repository Manager; помучился, но в итоге всё-таки получил Shell. Зафиксирую это здесь, чтобы потом было проще вспомнить, если понадобится. Целевая версия: Sonatype Nexus Repository Manager OSS 3.20.1-01...

CVE-2026-79896

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...

CVE-2026-12627

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Ошибка Cisco: CSCur90888 Название эксплойта : Cisco UCS Manager - 2.21d - Удалённое выполнение команд Описание : Неуказанный CGI-скрипт в Cisco FX-OS до 1.1.2 на устройствах Firepower 9000 и Cisco Unified Computing System UCS Manager до 2.24b,...

tinyfilemanager-2.4.3-exploit

CVE-2021-45010 Tiny File Manager-2.4.3 эксплойт Уязвимость обхода пути Path Traversal в функциональности загрузки файлов в tinyfilemanager.php в Tiny File Manager Project's Tiny File Manager = 2.4.6 позволяет удалённым злоумышленникам с действительными учётными записями пользователей загружать...

CVE-2026-12627 Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

CVE-2026-12627 Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

CVE-2026-12627

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in the boks_autoregisterd component. A remote attacker with network access to the autoregistration service may trigger memory corruption during client response processing. The vulnerability is asso...

EUVD-2026-90882

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

binfinder

binfinder 패키지 관리자를 통해 설치되지 않은 바이너리 파일 찾기 사전 요구 사항 소프트웨어 go 버전 = 1.12 docker 버전 = 19 binfinder 빌드 및 실행 방법 빌드 $ make build 빌드가 완료되면 다음 명령으로 bindfinder를 실행할 수 있습니다: $ ./binfinder --images --output data --top 20 출력은 이미지별 diff 파일입니다. top 플래그기본값 0가 0보다 크면 인기 있는 N개 이미지를 가져와 binfinder를 실행합니다. diff를 찾은 후...

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

JupyterLab's PyPI extension manager runs python -m pip uninstall with the extension name taken from the request body. ExtensionHandler.post validates the name for cmd=install but not for cmd=uninstall, so a name that begins with - reaches the command line and pip reads it as an option rather than...

EUVD-2026-89459

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs...

CVE-2026-97281

Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...

CVE-2026-79898

Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master...

CVE-2026-79899

Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKStmp may be able to obtain CA secret or host private-key...

CVE-2021-26714

CVE-2021-26714 Уязвимость Directory Traversal на портале Enterprise License Manager в Mitel MiContact Center Enterprise до версии 9.4. https://nvd.nist.gov/vuln/detail/CVE-2021-26714vulnCurrentDescriptionTitle https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-00...

CVE-2024-6244

🚀 pz-frontend-manager = 1.0.5 - CSRF-эксплойт аватара профиля 🛠️ Описание Этот скрипт использует CSRF-уязвимость в плагине WordPress pz-frontend-manager версии = 1.0.5 для смены аватара вошедшего в систему пользователя без его согласия. 🔴 CVE-2024-6244 Плагин не имеет надлежащей CSRF-защиты , что...

CVE-2026-79896 Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...

CVE-2026-79896 Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...

CVE-2026-79896

Fortra BoKS Manager is vulnerable to an out-of-bounds read in the custom TLS ClientHello parser utilized by boks_portmux . A remote unauthenticated attacker can exploit this by submitting a malformed ClientHello to terminate the boks_portmux daemon. While the daemon typically restarts automatical...