mariadb-13-rce-lab

MariaDB 13.0.1-rc RCE 실습 환경 수정되지 않은 순정 MariaDB 13.0.1-rc Docker 이미지 에서 uid 999mysql로 원격 코드 실행RCE을 수행합니다. 두 가지 익스플로잇 변형: 변형| 파일| 요구 사항| 비고 ---|---|---|--- 순수 SQL 권장| exploitpuresql.py| 낮은 권한의 MariaDB 계정 + TCP| 호스트 접근 불필요, docker 불필요, /proc/mem 불필요, root 비밀번호 불필요 호스트 지원 PoC| exploit.py| Docker 호스트의...

Rclone RC - Broken Access Control

Rclone = 1.45.0 and = 1.45.0 and 1.73.5 contains a broken access control vulnerability caused by unauthenticated access to the RC endpoint options/set allowing mutation of global runtime configuration, letting unauthenticated attackers access sensitive administrative functions, exploit requires R...

XWiki >= 2.5-milestone-2 - Cross-Site Scripting

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the resubmit template to perform a XSS, e.g. by using URL such as:...

xwiki__xwiki-commons_CVE-2023-29528_14-9-rc-1

XWiki Commons XWiki Commons는 여러 다른 최상위 XWiki 프로젝트에 공통으로 사용되는 기술 라이브러리입니다. 이 라이브러리들은 XWiki 생태계 외부의 프로젝트에서도 사용할 수 있으며, 범용적이고 위키 도메인과 관련이 없습니다. XWiki Platform, XWiki Commons 및 XWiki Rendering은 XWiki.org 소프트웨어 포지의 일부입니다. 이들은 함께 릴리스되며 동일한 버전을 공유합니다. 문서 문서 API 개발 공간 다운로드 XWiki Commons JAR은 에서 사용할 수 있습니...

CVE-2025-55182

CVE-2025-55182 React2Shell 분석 보고서 과제 지침에서 요구하는 섹션은 "Required"로 표시되어 있습니다. 1. 환경 Required 1.1. Dockerfile Required 이 환경은 공식 Node.js Alpine 이미지를 기반으로 하는 커스텀 Dockerfile을 사용합니다. FROM node:20-alpine WORKDIR /app COPY package.json ./ RUN npm install --legacy-peer-deps COPY . . EXPOSE 3000 CMD "npm",...

CVE-2026-41179

CVE-2026-41179 — rclone RC API 인증 없는 RCE ⚠️ 교육 목적으로만 제공 이 저장소는 보안 연구, 교육 및 인가된 실습 환경에서만 사용하도록 엄격히 제한됩니다. PSSec 및 이 저장소의 기여자들은 본 저장소에 포함된 정보, 코드 또는 기술의 무단, 불법 또는 악의적 사용을 묵인하거나 지지하지 않으며 이에 대한 어떠한 책임도 지지 않습니다. 이 저장소를 사용함으로써 귀하는 자신의 행동에 전적으로 책임이 있으며, 소유한 시스템 또는 명시적 서면 허가를 받은 시스템에 대해서만 테스트를 수행할 것에...

ROS-20260928-73-0127

The vulnerability in the drivers/media/rc/imon.c component of the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

BIT-RCLONE-2026-79777 rclone before v1.75.0 Information Disclosure via RC API

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...

PT-2026-99016

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...

CVE-2026-88044

A flaw was found in rclone, a command-line program for syncing files with cloud storage providers. The serve/start RC interface, specifically within the FTP and S3 services, incorrectly handles authentication proxy settings. This can allow a remote attacker to bypass intended authentication,...

BIT-RCLONE-2026-88044 rclone: RC per-server auth-proxy bypass

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.0 until 1.75.1, the serve/start RC interface accepts per-server proxyOpt.AuthProxy settings, and the FTP and S3 constructors in cmd/serve/ftp/ftp.go and cmd/serve/s3/server.go...

CVE-2026-63199 Perses: Missing authorization in datasource proxy allows cross-scope secret disclosure

Perses is an open-source dashboard and visualization project for observability data. From 0.43.0 until 0.54.0-rc.0, the datasource creation and unsaved datasource proxy paths authorize the caller on a Datasource or GlobalDatasource scope but do not require read permission for the separately...

parsec-cloud v3.10.0-rc.0

.. raw:: html Simple, secure, end-to-end encrypted file sharing in the cloud Parsec Parsec is a cloud-based application for simple and cryptographically secure file sharing. 🔐 Client-side E2EE to ensure your data is only accessed by you and the people you share it with. ✒️ Cryptographic signature...

PT-2026-93524

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sunxi-cir media remote control rc component where the system fails to unregister the rc device during a probe failure. When rc register device succeeds but...

CVE-2026-89883: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: rc: sunxi-cir: Unregister rc device on probe failure After rcregisterdevice succeeds, later probe failures must undo the registration with rcunregisterdevice. The current error path jumps to the allocation cleanup label an...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5e: Fixed a deadlock in the tc route query code The cited commit caused a ABBA deadlock0 when peer flows were created while holding the devcom rw semaphore. Due to the peer flow offload implementation, the lock is taken...

Astra Linux – Vulnerability in Linux

A vulnerability was discovered in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

A flaw related to the use of “free” in the Linux kernel’s integrated infrared receiver/transceiver driver was discovered in the way local users detach RC devices. This flaw could be exploited by local users to crash the system or potentially escalate their privileges on the system...

flipperzero-firmware v1.5.0-rc

Flipper Zero Firmware Flipper Zero Official Website - A simple way to explain to your friends what Flipper Zero can do. Flipper Zero Firmware Update - Improvements for your dolphin: latest firmware releases, upgrade tools for PC and mobile devices. User Documentation - Learn more about your...

secureCodeBox v5.9.0-rc.0

OWASP secureCodeBox secureCodeBox is a kubernetes based, modularized toolchain for continuous security scans of your software project. Its goal is to orchestrate and easily automate a bunch of security-testing tools out of the box. Overview OWASP secureCodeBox Overview Purpose of this Project...