CVE-2026-105841

lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader in src/lrz.c passes the unescaped ZMODEM/YMODEM...

CVE-2026-105920

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

CVE-2026-105921 Kusalkasilva Learning-Management-System search_class.php sql injection

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

CVE-2026-105921

A SQL injection vulnerability exists in the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2) within an unknown function of the search_class.php file. The flaw is triggered by manipulating the school_year argument and can be launched remotely . While ...

CVE-2026-105921 Kusalkasilva Learning-Management-System search_class.php sql injection

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

CVE-2026-105921 Kusalkasilva Learning-Management-System search_class.php sql injection

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

EUVD-2026-93423

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

follina-msdt-threat-investigation

Follina — CVE-2022-30190 위협 분석 Microsoft MSDT 원격 코드 실행 제로데이 — MUHAMMAD ZAWAR KHATTAK 의 활발한 악용 조사 🔗 전체 분석 문서 보기 → 🧪 시나리오 금요일 저녁, 팀은 실제 환경에서 활발히 악용되고 있는 새로운 RCE 취약점에 대한 알림을 받았습니다. 저는 주말 근무 팀을 위한 인텔리전스를 수집하기 위해 악성 샘플을 분석하고 조사하는 임무를 맡았습니다. 🧰 사용된 도구 도구| 용도 ---|--- VirusTotal| 정적 분석, 파일 해시, 통신한 URL...

CVE-2026-48908-joomla-sp-page-builder-detection

CVE-2026-48908 — Joomla SP Page Builder 검증 및 탐지 Joomla SP Page Builder 구성 요소의 CVE-2026-48908에 대한 실험실 검증으로, 기술적 증거, 이벤트 재구성 및 방어적 탐지 기회에 중점을 둡니다. 이 저장소는 SP Page Builder의 asset.uploadCustomIcon 엔드포인트가 업로드된 아이콘 아카이브를 수락하여 Joomla 미디어 디렉터리 아래에 PHP 아티팩트가 기록되도록 한 통제된 테스트를 문서화합니다. 업로드된 PHP 파일을 HTTP를 통해...

CVE-2026-56291

자동 버전 스캔 및 익스플로잇 CVE-2026-56291 POC Joomla Balbooa Forms에서의 인증되지 않은 임의 파일 업로드를 통한 RCE FOFA / Shodan FOFA: body="combaforms" Shodan: http.html:"baforms"...

firefox: thunderbird: Sandbox escape in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

firefox: thunderbird: Sandbox escape in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...

firefox: thunderbird: Sandbox escape in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...

firefox: thunderbird: Sandbox escape in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...

firefox: thunderbird: Sandbox escape in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

Vulnerability-Assessment-and-OSINT-CVE-2012-1823

脆弱性評価とOSINT: CVE-2012-1823 私のリポジトリは、ターゲットネットワークのスキャン中に検出された特定のセキュリティ脆弱性に関する、特定、分析、およびオープンソースインテリジェンス（OSINT）の収集プロセスを文書化しています。 プロセスの概要 この評価で実行されたワークフローは、主に4つのフェーズに分けられます。 1. 偵察と脆弱性検出 使用ツール : Nmap 実行内容 : 以下のコマンドを使用して高度なネットワークスキャンを実行しました: nmap --script-help http-vuln-cve2012-1823 調査結果 :...

CVE-2026-48282-coldfusion-rds-detection

CVE-2026-48282 — Adobe ColdFusion RDS 検証と検出 Adobe ColdFusion Remote Development Services RDS における CVE-2026-48282 のラボ検証。技術的証拠、イベント再構築、防御的検出の機会に焦点を当てています。 このリポジトリは、脆弱なRDS...