CVE-2026-101188

A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd.passwdset of the file /ubus. Such manipulation leads to weak password recovery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

CVE-2026-101205

A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This manipulation causes out-of-bounds read. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-101203

A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipulation leads to out-of-bounds write. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not...

CVE-2026-101204

A vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function of the file FSViewer.exe of the component TGA Image Handler. The manipulation results in out-of-bounds read. The attack can be launched remotely. The vendor was contacted early about this disclosure bu...

CVE-2026-0073

ADB TLS 인증 우회 익스플로잇 CVE-2026-0073 CVE-2026-0073 에 대한 자동화된 네트워크 스캐너 및 익스플로잇 도구입니다. 이 취약점은 Android Debug Bridge 데몬adbd의 취약점으로, 무선 디버깅을 통해 인증되지 않은 원격 코드 실행RCE 및 대화형 셸 액세스를 허용합니다. 이 도구는 현대 Android 기기Android 13+에 특별히 최적화되어 있으며, mDNS 자동 검색 을 통해 무작위화된 ADB 포트를 찾고 완전한 대화형 raw PTY 셸 을 제공합니다. 🚨 취약점 요약 Andro...

CVE-2025-81110-PoC

CVE-2025-81110-PoC Gogs의 PutContents API에서 부적절한 심볼릭 링크 처리로 인해 로컬 코드 실행이 가능합니다. 이 저장소는 Gogs 0.13.0 미만 버전의 치명적인 취약점에 대한 전문가 수준의 익스플로잇을 포함합니다. 익스플로잇은 Gogs API가 저장소 콘텐츠를 업데이트할 때 파일 유형을 검증하지 못하는 논리적 결함을 이용합니다. 서버 측 Git 훅pre-receive을 가리키는 심볼릭 링크를 주입하면 인증된 사용자가 악성 스크립트로 훅의 콘텐츠를 덮어쓸 수 있습니다. 이후 Git 푸시 작업이...

CVE-2026-101260 Ziroom ZHOME A0101 firstLogin command injection

A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some unknown functionality of the file /api/ZRnetwork/firstLogin. Performing a manipulation of the argument firstLogin results in command injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-101260

A command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 . The flaw is located within an unknown functionality of the /api/ZRnetwork/firstLogin file, where manipulating the firstLogin argument allows for remote command execution. The vulnerability has a CRITICAL severity rat...

CVE-2026-101260 Ziroom ZHOME A0101 firstLogin command injection

A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some unknown functionality of the file /api/ZRnetwork/firstLogin. Performing a manipulation of the argument firstLogin results in command injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-71981

Cypht CVE-2026-71981 PoC これはCVE-2026-71981（安全でないデシリアライゼーションによるRCE）のPoCです。実行したコマンドの結果は、ログアウトリクエストのレスポンス内のタグの後に出力されます。レスポンス全体も表示するには--print-allを使用してください。 影響を受けるバージョン: v2.12.2 依存関係のインストールと実行 このスクリプトは、unserializeペイロードを生成するために https://github.com/ambionics/phpggc のインストールが必要です。 セットアップと実行例: python3 -m ve...

cve-2022-27438

CVE-2022-27438 Caphyon Ltd Advanced Installer 19.3 "CustomDetection" 업데이트 확인 원격 코드 실행 취약점 사용법: python3 cve-2022-27438poc.py 세부 정보는 gerr.re의 보고서에 있습니다. 재현 단계 다른 영향을 받는 제품의 경우 업데이트 서버와 업데이트 구성 파일 이름을 변경해야 합니다. 이러한 파일은 일반적으로 응용 프로그램 설치 디렉터리의 업데이터 .ini에서 찾을 수 있습니다. 1. Advanced Installer 19.3을 설치합니다; ...

VTIGER-CRM-RCE-CVE-2026-23697

此存储库没有 README。...

EXPLOIT-CVE-2024-7804

CVE-2024-7804 — PyTorch分散型RPCの安全でないデシリアライゼーション（RCE） CVE-2024-7804 の自己完結型ラボ＋エクスプロイト：PyTorchの分散型RPCフレームワーク（torch.distributed.rpc）における、信頼されていないデータの安全でないデシリアライゼーション（CWE-502 ）によるリモートコード実行。 影響を受けるバージョン: torch 注：このアドバイザリは後にメンテナおよびRed Hatによって「既知の機能」として撤回/却下 されました — PyTorch RPCは設計上 信頼できるピア...

MAL-2026-17236 Malicious code in mini-hardhat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbdfc97da008f90f11ae03963e75237c8bb746cf93f9cdc5da43ba5807ed6c1e [email protected] presents itself as a pino-like JSON logger, but its main entry exports a middleware factory that, on instantiation, spawns...

MAL-2026-17235 Malicious code in items-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e49b1abd7c566b17104c5a2823251df2ca253a0fa509d7c19db1c1942ad13d On require, index.js invokes initializeDaemon at top level, which uses spawn'node', lib/check-items.js, detached: true, stdio: 'ignore' followed by...

Malicious code in items-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e49b1abd7c566b17104c5a2823251df2ca253a0fa509d7c19db1c1942ad13d On require, index.js invokes initializeDaemon at top level, which uses spawn'node', lib/check-items.js, detached: true, stdio: 'ignore' followed by...

CVE-2026-102269

A flaw was found in PyJWT. When decoding JSON Web Token JWT signature segments, the library accepts characters outside the standard Base64URL encoding format. A remote attacker can exploit this issue by appending extra characters to a valid token signature, creating an alternate token...

CVE-2026-101205 FastStone Image Viewer PCX Decoder out-of-bounds

A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This manipulation causes out-of-bounds read. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-101205

A vulnerability exists in FastStone Image Viewer up to version 8.3 . The issue resides within an unknown function of the PCX Decoder component, where specific manipulation can trigger an out-of-bounds read . This attack can be initiated remotely . No specific remediation or exploit details are pr...

CVE-2026-101205 FastStone Image Viewer PCX Decoder out-of-bounds

A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This manipulation causes out-of-bounds read. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way...