CVE-2024-50379

Apache Tomcat CVE-2024-50379 TOCTOU リモートコード実行...

Popcorn-TJNULL-OSCP-

HackTheBox: Popcorn 攻略記 日付: 2026年6月5日 難易度: Easy プラットフォーム: HackTheBox 主要テクニック: ポート・サービス列挙、ディレクトリファジング（Gobuster）、ファイルアップロード回避、HTTPリクエスト操作（Burp Suite）、リモートコード実行（RCE）、高度なTTYシェル安定化（Python）、ローカルカーネル/PAMエクスプロイト（MOTDファイル改ざん） 1. 偵察と列挙 ポートスキャン（クイック偵察） まず、65,535 ポートすべてに対して高速 TCP...

CVE-2026-55094

Taskcluster, a task execution framework used by Mozilla, is vulnerable to unauthenticated remote code execution (RCE) in versions prior to 100.3.0 . The vulnerability exists in the web-server component when an anonymous role is present that exposes the GraphQL endpoint . Specifically, the applica...

CVE-2026-55094 Taskcluster: Unauthenticated remote code execution in `web-server` via GraphQL `filter` argument (sift `$where`)

Taskcluster is the task execution framework that supports Mozilla's continuous integration and release processes. Prior to version 100.3.0, Taskcluster is vulnerable to unauthenticated RCE on Taskcluster deployments with an anonymous role that exposes the GraphQL endpoint and parses filter...

CVE-2026-55094 Taskcluster: Unauthenticated remote code execution in `web-server` via GraphQL `filter` argument (sift `$where`)

Taskcluster is the task execution framework that supports Mozilla's continuous integration and release processes. Prior to version 100.3.0, Taskcluster is vulnerable to unauthenticated RCE on Taskcluster deployments with an anonymous role that exposes the GraphQL endpoint and parses filter...

CVE-2026-103475 yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

CVE-2026-103475

Versions of yii2-starter-kit through 4.2.0 are vulnerable because the default development configuration sets allowedIPs to ['*'], exposing the Yii debug and Gii modules to all IP addresses. Unauthenticated remote attackers can exploit this to access the debug endpoint to read sensitive data, such...

CVE-2026-19445

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

CVE-2026-103241

A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has bee...

CVE-2026-103232

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqliquery of the file admin/tablebooking.php. This manipulation of the argument Name causes sql injection. Remote exploitation of the attack is...

CVE-2026-103233

A security vulnerability has been detected in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This impacts an unknown function of the file /admin/ of the component Admin Area. Such manipulation of the argument ID leads to authorization bypass. The attac...

CVE-2026-102489

Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also present in version 7.0.0 to version 7.1.3, but not exploitable due to environment conditions...

Security Bulletin: Vulnerabilities in Netty, Spring Boot, ACE, jackson-core might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty, Spring Boot, ACE, jackson-core. Vulnerabilities include A single TCP connection can create hundreds of thousands of long-lived stream objects, A remote peer could send frames that would result in the...

Security Bulletin: Vulnerabilities in http-proxy-middleware,jackson-databind,uuid,Snakeyaml,Netty,DOMPurify,Micrometer might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in http-proxy-middleware,jackson-databind,uuid,Snakeyaml,Netty,DOMPurify,Micrometer. Vulnerabilities include a crafted Host header that is only a superstring match for a configured host+path key can still route a...

CVE-2020-17533

一、最近、Apache Struts2 のリモートコード実行の脆弱性（CVE番号：CVE-2020-17530）が発見されました。Apache Struts2フレームワークは、Java EE Webアプリケーションを開発するためのWebフレームワークです。広く使用されているため、脅威の影響範囲は広いです。 二、脆弱性の説明 開発者が %… 構文を使用した場合、攻撃者は悪意のあるOGNL式を構築することで、OGNL式の二次解析を引き起こし、リモートコード実行が可能になります。 三、影響範囲 • Apache Struts 2.0.0 - 2.5.25 四、解決策 Apache...

Samsung-CVE-2025-21042

🔐 CVE-2025-21042 — Samsung イメージコーデック リモートコード実行 ⚙️ 概要 Samsung の画像処理ライブラリ libimagecodec.quram.so （Galaxy Android デバイスで使用）における重大な 脆弱性です。 🧩 悪意のある画像ファイル （DNG など）を解析する際にトリガーされる領域外書き込み out-of-bounds write の欠陥です。 📸 巧妙に細工された画像により、攻撃者はデバイス上で任意のコードをリモート実行 できます。 「SMR Apr-2025 Release 1 より前の...

CVE-2024-6387-POC

OpenSSH CVE-2024-6387 脆弱性の悪用 🚀 OpenSSH CVE-2024-6387 のリモートコード実行 RCE 脆弱性を悪用するために設計された Python スクリプト。この脆弱性はハンドラの競合状態に関連し、任意のコード実行につながる可能性があり、攻撃者が root アクセスを取得することを可能にします。これは概念実証であり、教育目的のみを対象としています。 概要 📖 OpenSSH の CVE-2024-6387 は深刻な脆弱性です。これは、root 権限で任意のコードを実行するために悪用される可能性のあるハンドラの競合状態に関連しています。 特徴 🌟...

Security Bulletin: Vulnerabilities in Angular,Netty,snakeYAML,Next.js might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Angular,Netty,snakeYAML,Next.js. Vulnerabilities include high-severity information disclosure vulnerability, allowing attackers to find hash collisions, uncontrolled resource consumption which lead to a Denial...

CVE-2024-0692-SolarWinds-SEM-RCE

CVE-2024-0692-SolarWinds-SEM-RCE ペネトレーションテスト中の私の研究に基づき、詳細はこちらをご覧ください https://www.sprocketsecurity.com/blog/cve-2024-0692-building-the-exploit-that-didnt-exist...

CVE-2026-55107 Kobako Vulnerable to Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)

Kobako is a Ruby gem that embeds a Wasm-isolated mruby interpreter inside applications, allowing execution of untrusted Ruby scripts LLM-generated code, user formulas, student submissions, third-party plugins in-process without giving them access to host memory, files, network, or credentials. Fr...