140981 matches found
Vite-CVE-2025-30208-EXP
CVE-2025-30208 탐지 도구 취약점 분석 CVE-2025-30208은 Vite 개발 서버의 임의 파일 읽기 취약점입니다. 공격자는 특수 경로예: @fs 접두사를 구성하여 서버의 민감한 파일예: /etc/passwd 또는 C:\windows\win.ini을 읽을 수 있습니다. 이 도구는 단일 대상 탐지, 시스템 정보 조사 및 심층 환경 분석을 지원하며 복잡한 네트워크 환경에 맞춘 프록시 기능을 제공합니다. 기능 특성 단일 대상 탐지 : 명령줄 매개변수로 단일 대상 URL을 지정하여 취약점을 검증합니다. 시스템 정보 조사...
EUVD-2026-94412
A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...
CVE-2026-107166 Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources
A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...
CVE-2026-107166
The Open5GS software (versions up to 2.7.7 ) is vulnerable to a remote attack affecting the GTP-U Receive Path component. The flaw exists in the ogs_pfcp_xact_local_create function within the src/upf/gtp-path.c file, where a manipulation can lead to an allocation of resources (CWE-770, CWE-400). ...
CVE-2026-107166 Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources
A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...
CVE-2026-107166 Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources
A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...
Security Bulletin: Multiple vulnerabilities have been addressed in IBM Aspera Shares
Summary Multiple vulnerabilities have been addressed in IBM Aspera Shares Version 1.11.5 Vulnerability Details CVEID:CVE-2026-63435 DESCRIPTION: Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and...
SSE4-CVE-2022-22965
Spring Boot CVE-2022-22965 Spring Boot 버전 2.6.5 기반 CVE-2022-22965 Docker PoC 시작하기 1. 취약한 애플리케이션을 빌드하고 시작하려면 docker compose up --build를 실행하세요. 2. Tomcat 구성 밸브를 변경하려면 curl -H "Accept: text/html;"...
-Linux-PrivEsc-CVE-2024-48990
Privesc-need-restart-2024-48990 익스플로잇 설명 CVE-2024-48990 - 순수 Python 이 스크립트는 needrestart 유틸리티의 CVE-2024-48990 취약점을 라이브러리 경로 하이재킹PYTHONPATH hijacking을 통해 익스플로잇합니다. 원래 벡터와 달리 이 방법은 Python만을 사용하므로, 대상 머신에 gcc 같은 컴파일러가 설치되어 있어야 한다는 요구 사항을 우회할 수 있습니다. 단계별 작동 방식 1. 디렉토리 구조: /tmp/malicious/importlib 디렉토리...
CVE-2026-49009
▄█████ ██ ██ ██████ ████▄ ▄██▄ ████▄ ▄██▀▀▀ ██ ██ ▄█▀▀█▄ ▄██▄ ▄██▄ ▄█▀▀█▄ ██ ██▄▄██ ██▄▄ ▄▄▄ ▄██▀ ██ ██ ▄██▀ ██▄▄▄ ▄▄▄ ▀█████ ▀▀▀██ ██ ██ ██ ██ ▀▀▀██ ▀█████ ▀██▀ ██▄▄▄▄ ███▄▄ ▀██▀ ███▄▄ ▀█▄▄█▀ ██ ▄▄██▀ ▀██▀ ▀██▀ ▄▄██▀ ░█▄█░█▀▀░█▀█░█▀▄░█▀▀░█▀▄░░░█▀▀░█▀▀░█▀▄░█░█░█▀▀░█▀▄░░░█▀▄░█▀▀░█▀▀░...
CVE-2026-106560
Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...
CVE-2025-46822
CVE-2025-46822 絶対パスによる認証なしの任意ファイル読み取り 説明: Path.resolve メソッドがパストラバーサル対策として使用されている一方で、絶対パスを使用すると内部ファイルが正常に読み取れることを発見しました。このエンドポイントは認証もされておらず、つまり、application-dev.properties で設定されているストアルート files.store.root = /file-store/ から誰でも組織全体のファイルやファイルシステムを読み取ることができ、機密性の高い内部ファイルへの不正アクセスを引き起こします。 詳細:...
CVE-2026-106560
The Backstage open framework for developer portals contains an improper repository path validation vulnerability in the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package. Specifically, a scaffolder backend module fails to properly validate repository paths, allowing an au...
EUVD-2026-94373
Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...
CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module
Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...
CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module
Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...
CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module
Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...
CVE-2020-5421
Spring 보안 취약점 CVE-2020-5421 재현 취약점 개요 CVE-2020-5421은 jsessionid 경로 매개변수를 통해 RFD 공격을 방어하는 보호를 우회할 수 있습니다. 이전의 RFD 방어는 CVE-2015-5211에 대응하여 추가되었습니다. RFD란 무엇인가 반사형 파일 다운로드 취약점RFD은 신뢰할 수 있는 도메인에서 파일을 가상으로 다운로드하게 하여 공격자가 피해자 컴퓨터에 대한 완전한 접근 권한을 얻을 수 있는 공격 기술입니다. 영향받는 버전 Spring Framework 5.2.0 - 5.2.8...
CVE-2026-77621
A flaw was found in Vector. A path traversal vulnerability in the file sink may allow a remote attacker who controls event fields referenced in the output path template to create or overwrite arbitrary files with the privileges of the Vector process. Depending on the files affected, this may resu...