perl_spreadsheet_excel_rce_poc

ParseExcel 보안 취약점 TL;DR: 형식 문자열 파싱 로직에서 발생하는 RCE. 익스플로잇에 대한 간략한 설명 익스플로잇의 근본 원인은 Utility.pm에서 검증되지 않은 사용자 입력에 대해 eval을 호출하는 데서 비롯됩니다. https://github.com/jmcnamara/spreadsheet-parseexcel/blob/e33d626d9b9cec91be7520dec1686712313957fb/lib/Spreadsheet/ParseExcel/Utility.pmL171 root@kitploit: Uitlity....

msfrpc

참고: 이 도구는 더 이상 적극적으로 유지 관리되지 않습니다. ===================== Metasploit MSGRPC 모듈 Ryan Linn [email protected] http://www.trustwave.com Metasploit MSGRPC와 통신하기 위한 모듈 소개 이 저장소에는 Metasploit의 MSGRPC 서버와 통신하기 위한 두 개의 모듈이 포함되어 있습니다. 다음 모듈은 언어별로 구분됩니다: root@kitploit: Net-MSFRPC - Perl Metasploit MSGRPC...

CVE-2026-85484

HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup, CheckboxGroup and HorizCheckboxGroup widgets render a group label unescaped, Select into a label attribute and the other three into element...

CVE-2026-85485

HTML::FormHandler for Perl (versions before 0.410002 ) fails to HTML-escape error messages in the Table form layout and the Bootstrap 2 and 3 wrappers , splicing raw error strings directly into surrounding markup. Attacker-influenced content, such as rejected field values, could embed JavaScript ...

CVE-2026-81928

A flaw was found in Net::DNS versions before 1.57 for Perl. An attacker can cause a denial of service DoS by sending a specially crafted DNS message with a misplaced Transaction Signature TSIG record. When a system using Net::DNS, such as a forwarder or proxy, attempts to re-encode this message, ...

Linux Distros Unpatched Vulnerability : CVE-2026-85484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup,...

Linux Distros Unpatched Vulnerability : CVE-2026-85630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the processattrs method. Any application with field...

CVE-2026-86287

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...

CVE-2026-16028

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that streamstate never removes from the connection stream table. When a stream reaches the CLOSED state, streamstate returns the concurrency slot and clears most of the stream's keys, but the entry itself sta...

CVE-2026-16028

Protocol::HTTP2 (Perl), versions before 1.14 , is vulnerable to memory exhaustion via closed streams that are never removed from the connection stream table. When a stream reaches the CLOSED state, stream_state returns its concurrency slot and clears most keys, but the table entry persists for th...

EUVD-2026-72526

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...

EUVD-2026-72177

MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parseassertion builds Net::SAML2::Binding::POST without a trust anchor. parseassertion in MojoX::Authentication::Model::SAML2 calls Net::SAML2::Binding::POST-new with no cacert, certtext or anchors...

UBUNTU-CVE-2026-86219

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept...

CVE-2026-86304 MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust anchor

MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parseassertion builds Net::SAML2::Binding::POST without a trust anchor. parseassertion in MojoX::Authentication::Model::SAML2 calls Net::SAML2::Binding::POST-new with no cacert, certtext or anchors...

CVE-2026-86219

Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 in Perl suffer from an unverified nonce in server_step. The server generates a fresh nonce in server_start but never compares it against the nonce returned by the client; instead, server_step derives the expected digest from the client's own p...

Linux Distros Unpatched Vulnerability : CVE-2026-86219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates...

CVE-2026-82309

Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it queries. checkdns issues one PTR query for the client address, keeps the returned names matching the rule's domain, and...

CVE-2026-82309 Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it queries

Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it queries. checkdns issues one PTR query for the client address, keeps the returned names matching the rule's domain, and...

CVE-2026-82309

Robots::Validate (Perl CPAN module), versions 0.3.2 through 0.3.10 , is vulnerable to unbounded outbound DNS queries via its _check_dns function. The forward-confirmation loop issues a PTR query for the client address and then a forward query for each returned name, with no cap on the list length...

CVE-2026-82309 Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it queries

Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it queries. checkdns issues one PTR query for the client address, keeps the returned names matching the rule's domain, and...