1day-archive

1dayexploit - アーカイブ 最近公開されたCVEの技術的深掘りと根本原因分析。 概要 このリポジトリは、最近公開されたCVEの技術的な解説記事を収集したものです。パッチリリースから広範な悪用に至るまでの1-dayウィンドウを扱っています。 各分析には以下が含まれます: 影響を受ける製品、ベンダー、バージョン範囲 パッチ差分と根本原因分析 脆弱性を実証する概念実証 PoC 防御側向けの検知ガイダンス 元の開示情報への参照 分析 CVE| ベンダー| 製品| 分類| 深刻度| 解説 ---|---|---|---|---|--- CVE-2026-75816| DynamiApp...

threat-team

Google 위협 인텔리전스 그룹 알림: 이 저장소는 더 이상 유지 관리되지 않습니다. 최신 침해 지표IOC 및 위협 연구에 대해서는 Google Cloud Threat Intelligence 블로그와 무료 Google Threat Intelligence / VirusTotal 컬렉션을 참조하십시오. 이 저장소에는 2021년부터 2026년 초까지 Google에서 게시한 공개 블로그 게시물 및 보고서와 관련된 침해 지표IoC가 포함되어 있습니다. IoC는 연도별로 정리되어 있으며, 각 폴더는 특정 블로그 게시물 또는 보고서와...

0days-in-the-wild

야생에서 악용된 0-day 이 저장소는 야생에서 악용된 것으로 탐지된 0-day 취약점에 관한 문서 모음입니다. 각 0-day 익스플로잇에 대한 근본 원인 분석RCA과 각 0-day를 추적하는 표를 모두 포함합니다. 이 문서들은 Github Pages를 통해 열람하도록 작성되었습니다: https://googleprojectzero.github.io/0days-in-the-wild 고지 사항 이 제품은 공식적으로 지원되는 Google 제품이 아닙니다...

CVE-2022-4262

CVE-2022-4262 CVE-2022-4262에 대한 전체 분석근본 원인, PoC, 익스플로잇 및 슬라이드 포함. 면책 조항 이 저장소는 교육 목적으로만 제공되며 악의적인 활동에 사용되어서는 안 됩니다...

CVE-2022-4262

CVE-2022-4262 CVE-2022-4262 전체 분석 근본 원인, PoC 및 익스플로잇 포함...

Dirty-Frag-Research-CVE-2026-43284-

CVE-2026-43284 Dirty Frag – Linux 커널 취약점 연구 개요 이 저장소는 CVE-2026-43284 Dirty Frag — XFRM/IPsec 네트워킹 서브시스템에 영향을 미치는 Linux 커널 취약점 — 에 초점을 맞춘 완전한 방어적 보안 연구 프로젝트를 문서화합니다. 이 프로젝트의 목표는 취약점을 무기화하는 것이 아니라 , 취약점이 어떻게 동작하는지 이해하고, 통제된 실험실에서 안전하게 재현하며, Linux 커널 소스 코드를 분석하고, 보안 패치를 연구하며, 보안 전문가가 사용할 수 있는 실질적인 탐...

DeFiHackLabs

DeFi Hacks Reproduce - Foundry 2023 - List of Past DeFi Incidents 214 incidents included. 20231231 Channels BUSD&USDC 20231230 ChannelsFinance 20231228 CCV 20231228 DominoTT 20231225 Telcoin 20231222 PineProtocol 20231220 TransitFinance 20231217 Bob 20231217 FloorProtocol 20231216 GoodDollar...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2023-32233 — nftables Use-After-Free: Reproduction & Root...

CVE-2026-19244 HKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access control

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connectmcpservers of the file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope Handler. Performing a manipulation results in improper access controls. The attack is possible to be...

CVE-2026-19243 HKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injection

A security vulnerability has been detected in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool.guardcommand/ExecTool.spawn of the file nanobot/agent/tools/shell.py of the component Shell Allowlist Handler. Such manipulation leads to os command injection. The attack can be executed...

CVE-2026-10772

DUPLICATE This CVE Record has been rejected by the Zephyr Project CNA. CVE-2026-10772 was assigned to a vulnerability already covered by CVE-2026-2411, which was assigned earlier for the same defect: the Bluetooth GATT notify/indicate paths check the permissions of the Characteristic Declaration...

CVE-2026-62959

Coturn is a free open source implementation of TURN and STUN Server. From 4.5.2 through 4.14.0, when Coturn is started with --acme-redirect and exposes a plaintext-TCP listener, an unauthenticated remote client can send a single ordinary HTTP GET request and receive a 301 response whose Location...

kernel-nday-exploits

Linux Kernel N-Day Exploits Local privilege escalation rese...

CVE-2026-47394

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, the fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete. The original advisory description named four vulnerable handlers in mcpserver/adapters/clitools.py. Commit 68cc9427 "fixsecurity: harden MCP rules path handling…" adde...

PT-2026-59243

Summary StrictRolePermission and AuthorityCreatorPermission in lemur/auth/permissions.py call flask principal.Permission. init with zero Needs when their config flags are unset. Both flags defaulted to False in code prior to the fix, so this was the state of any Lemur install that hadn't explicit...

EUVD-2026-38129

vLLM versions = 0.10.2 and 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor invariant checks by default, an attacker can submit crafted embedding requests with malformed negative or out-of-bounds tensor indices, when the...

PT-2026-45053

Name of the Vulnerable Software and Affected Versions PraisonAI affected versions not specified Description An incomplete security fix allows unauthenticated users to read arbitrary files from the host system. The issue stems from a dispatcher in server.py that accepts unvalidated kwargs from the...

Exploit for CVE-2026-0532

CVE-2026-0...

GHSA-4G37-7P2C-38R9 Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls

IDOR: Retrieval API Bypasses Knowledge Base Access Controls Author: Andrew Orr Summary validatecollectionaccess PR 22109 checks the user-memory- and file- collection name prefixes but does not check knowledge base collections, which use raw UUIDs as collection names. Any authenticated user who...

PT-2026-40842

Four CVEs CVE-2026-29103, CVE-2026-29104, CVE-2026-29892, CVE-2026-30441 shared the same root cause. An MCP server's response to the client includes free-form text fields — tool descriptions, resource summaries, prompt argument hints. These fields are surfaced into the…...