Find-WSUS

🧭 Find-WSUS GPO（グループポリシーオブジェクト）全体でWSUSサーバー構成を発見します。隠れたグループポリシー基本設定（GPP）も含みます。 Find-WSUS は、セキュリティ専門家とシステム管理者 向けのPowerShellスクリプトで、GPOを介して構成されたすべてのWSUS（Windows Server Update Services）サーバーURLを特定します。以下の両方から構成を検出します： 管理用テンプレートポリシー（HKLM\Software\Policies） グループポリシー基本設定（GPP） のレジストリ設定（XMLレポートに隠されている） ⚠️...

CVE-2022-4556

CVE-2022-4556 - SOGo Webmail v5.7.1 中的存储型XSS漏洞 🧠 摘要 在 SOGo Web 界面的身份偏好设置 部分的 fullName 字段中发现了一个存储型跨站脚本（XSS）漏洞，影响版本 5.7.1 。经过认证的攻击者可以注入恶意脚本，当任何用户（包括攻击者自身）访问邮件标签页时该脚本都会执行。 🆔 CVE 详情 CVE ID : CVE-2022-4556 CVSS v3.1 : 6.1 中等 向量 : AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 漏洞类型 : 存储型 XSS OWASP WSTG-INPV-02 攻击...

CVE-2020-36287

CVE-2020-36287 Jira ServerおよびJira Data Centerで使用されるAtlassian gadgetsプラグインのダッシュボードガジェット設定リソースは、バージョン8.13.5より前、およびバージョン8.14.0から8.15.1より前のバージョンにおいて、権限チェックが欠如しているため、リモートの匿名攻撃者がガジェット関連の設定を取得できる脆弱性があります。 Affected software: Atlassian Jira Data Center, Jira Server also tested on Jira Project Management...

RosarioSIS 6.7.2 - Cross-Site Scripting

RosarioSIS version 6.7.2 and earlier contains a reflected cross-site scripting XSS vulnerability in the Preferences module. The 'tab' parameter in Modules.php is not properly sanitized, allowing an attacker to inject arbitrary JavaScript code via a crafted URL. id: CVE-2020-15718 info: name:...

GPOCrack

GPOCRACK.py Active Directory グループ ポリシー基本設定 Group Policy Preferences の cpassword クラッカー/復号化ツール。 使用方法 python2 gpocrack.py cGc4817iMQclr1Ssixv35UpaH/FXy+1s5FnM2RqD4BI...

RabbitMQ 4.2.x < 4.2.8 / 4.3.x < 4.3.2 Non-RFC-Conformant Auth Mechanism Cookie Name

The version of RabbitMQ installed on the remote host is 4.2.x prior to 4.2.8, or 4.3.x prior to 4.3.2. It is, therefore, affected by a vulnerability: - getauthmechanism/1 used termtobinary/1 on the strictauthmechanism or preferredauthmechanism atom when clearing the corresponding cookie, producin...

SUSE CVE-2026-100804

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100804

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100804 Sandbox escape due to use-after-free in the Preferences: Backend component

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

CVE-2026-100804 Sandbox escape due to use-after-free in the Preferences: Backend component

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Firefox 157...

CVE-2026-100804

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

EUVD-2026-88957

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Firefox 157...

CVE-2026-100804

The Firefox browser is affected by a sandbox escape vulnerability caused by a use-after-free flaw in the Preferences: Backend component. This issue allows for potential sandbox circumvention, and the vulnerability was resolved in Firefox 157 . No specific exploit details or in-the-wild exploitati...

PT-2026-102578

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Thunderbird versions prior to 157 Description A use-after-free issue exists in the Preferences: Backend component, which can lead to a sandbox escape. A use-after-free occurs when a program continues to use a...

CVE-2026-67234

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, getauthmechanism/1 used termtobinary/1 on the strictauthmechanism or preferredauthmechanism atom when clearing the corresponding cookie, producing a non-ASCII cookie name that violates RFC 6265 and can prevent the...

DEBIAN-CVE-2026-67234

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, getauthmechanism/1 used termtobinary/1 on the strictauthmechanism or preferredauthmechanism atom when clearing the corresponding cookie, producing a non-ASCII cookie name that violates RFC 6265 and can prevent the...

CVE-2026-67234

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, getauthmechanism/1 used termtobinary/1 on the strictauthmechanism or preferredauthmechanism atom when clearing the corresponding cookie, producing a non-ASCII cookie name that violates RFC 6265 and can prevent the...

UBUNTU-CVE-2026-67234

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, getauthmechanism/1 used termtobinary/1 on the strictauthmechanism or preferredauthmechanism atom when clearing the corresponding cookie, producing a non-ASCII cookie name that violates RFC 6265 and can prevent the...

EUVD-2026-87146

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, getauthmechanism/1 used termtobinary/1 on the strictauthmechanism or preferredauthmechanism atom when clearing the corresponding cookie, producing a non-ASCII cookie name that violates RFC 6265 and can prevent the...

CVE-2026-67234 RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preference

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, getauthmechanism/1 used termtobinary/1 on the strictauthmechanism or preferredauthmechanism atom when clearing the corresponding cookie, producing a non-ASCII cookie name that violates RFC 6265 and can prevent the...