mariadb-13-rce-lab

MariaDB 13.0.1-rc RCE ラボ 未改変の標準 MariaDB 13.0.1-rc Docker イメージ 上で、uid 999 mysql としてリモートコード実行を行います。 2つのエクスプロイト亜種: 亜種| ファイル| 要件| 備考 ---|---|---|--- Pure SQL （推奨）| exploitpuresql.py| 低権限 MariaDB アカウント + TCP| ホストアクセス不要、docker 不要、/proc/mem 不要、root パスワード不要 ホスト支援型 PoC| exploit.py| Docker ホスト上の root|...

Rclone RC - Broken Access Control

Rclone = 1.45.0 and = 1.45.0 and 1.73.5 contains a broken access control vulnerability caused by unauthenticated access to the RC endpoint options/set allowing mutation of global runtime configuration, letting unauthenticated attackers access sensitive administrative functions, exploit requires R...

XWiki >= 2.5-milestone-2 - Cross-Site Scripting

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the resubmit template to perform a XSS, e.g. by using URL such as:...

xwiki__xwiki-commons_CVE-2023-29528_14-9-rc-1

XWiki Commons XWiki Commons は、他のいくつかのトップレベル XWiki プロジェクトに共通する技術ライブラリです。 これらのライブラリは、XWiki エコシステム外のプロジェクトでも利用でき、汎用的であり、wiki ドメインには関連しません。 XWiki Platform、XWiki Commons、XWiki Rendering は、XWiki.org ソフトウェアフォージの一部です。これらは一緒にリリースされ、同じバージョンを共有します。 ドキュメント ドキュメント API 開発ゾーン ダウンロード XWiki Commons の JAR は、で入手できま...

CVE-2025-55182

CVE-2025-55182 React2Shell 解析レポート 課題ガイドラインで必須とされているセクションには「必須」と記載されています。 1. 環境 必須 1.1. Dockerfile 必須 この環境では、公式のNode.js AlpineイメージをベースにしたカスタムDockerfileを使用します。 FROM node:20-alpine WORKDIR /app COPY package.json ./ RUN npm install --legacy-peer-deps COPY . . EXPOSE 3000 CMD "npm", "run", "dev"...

CVE-2026-41179

CVE-2026-41179 — rclone RC API 未認証RCE ⚠️ 教育目的専用 このリポジトリは、セキュリティ研究、教育、および許可されたラボ環境でのみ使用することを目的としています。PSSecおよびこのリポジトリの貢献者は、ここに含まれる情報、コード、または手法の不正、違法、または悪意のある使用を容認、支持、または一切の責任を負いません。このリポジトリを使用することにより、あなたは自己の行動に単独で責任を負い、所有するシステムまたは明示的な書面による許可を得たシステムに対してのみテストを行うことに同意したものとみなされます。 概要 CVE-2026-41179...

ROS-20260928-73-0127

The vulnerability in the drivers/media/rc/imon.c component of the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

BIT-RCLONE-2026-79777 rclone before v1.75.0 Information Disclosure via RC API

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...

PT-2026-99016

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...

CVE-2026-88044

A flaw was found in rclone, a command-line program for syncing files with cloud storage providers. The serve/start RC interface, specifically within the FTP and S3 services, incorrectly handles authentication proxy settings. This can allow a remote attacker to bypass intended authentication,...

BIT-RCLONE-2026-88044 rclone: RC per-server auth-proxy bypass

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.0 until 1.75.1, the serve/start RC interface accepts per-server proxyOpt.AuthProxy settings, and the FTP and S3 constructors in cmd/serve/ftp/ftp.go and cmd/serve/s3/server.go...

CVE-2026-63199 Perses: Missing authorization in datasource proxy allows cross-scope secret disclosure

Perses is an open-source dashboard and visualization project for observability data. From 0.43.0 until 0.54.0-rc.0, the datasource creation and unsaved datasource proxy paths authorize the caller on a Datasource or GlobalDatasource scope but do not require read permission for the separately...

parsec-cloud v3.10.0-rc.0

.. raw:: html Simple, secure, end-to-end encrypted file sharing in the cloud Parsec Parsec is a cloud-based application for simple and cryptographically secure file sharing. 🔐 Client-side E2EE to ensure your data is only accessed by you and the people you share it with. ✒️ Cryptographic signature...

PT-2026-93524

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sunxi-cir media remote control rc component where the system fails to unregister the rc device during a probe failure. When rc register device succeeds but...

CVE-2026-89883: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: rc: sunxi-cir: Unregister rc device on probe failure After rcregisterdevice succeeds, later probe failures must undo the registration with rcunregisterdevice. The current error path jumps to the allocation cleanup label an...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5e: Fixed a deadlock in the tc route query code The cited commit caused a ABBA deadlock0 when peer flows were created while holding the devcom rw semaphore. Due to the peer flow offload implementation, the lock is taken...

Astra Linux – Vulnerability in Linux

A vulnerability was discovered in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

A flaw related to the use of “free” in the Linux kernel’s integrated infrared receiver/transceiver driver was discovered in the way local users detach RC devices. This flaw could be exploited by local users to crash the system or potentially escalate their privileges on the system...

flipperzero-firmware v1.5.0-rc

Flipper Zero Firmware Flipper Zero Official Website - A simple way to explain to your friends what Flipper Zero can do. Flipper Zero Firmware Update - Improvements for your dolphin: latest firmware releases, upgrade tools for PC and mobile devices. User Documentation - Learn more about your...

secureCodeBox v5.9.0-rc.0

OWASP secureCodeBox secureCodeBox is a kubernetes based, modularized toolchain for continuous security scans of your software project. Its goal is to orchestrate and easily automate a bunch of security-testing tools out of the box. Overview OWASP secureCodeBox Overview Purpose of this Project...