11997 matches found
cve-2019-14514
CVEID : CVE-2019-14514 影響を受ける製品とバージョン : Microvirt MEmu（7.0.2より前のすべてのバージョン） 問題タイプ : CWE-78: OSコマンドに使用される特殊要素の不適切な無害化（'OSコマンドインジェクション'） 概要 MEmuはWindows向けのAndroidエミュレータです。テスト中に、root権限でコード実行を得るために悪用される可能性のある開放されたTCPポートを発見しました。 Microvirt...
CVE-2026-76866
Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user-supplied DDNS input in DDNSsetcgi.c and related ddnsProc.c components, enabling os command argument injection. Attackers can exploit the unsanitized parameters to inject additional command arguments...
CVE-2026-76866
Netcore NR255-V router firmware version 1.5.130703 is affected by an OS command argument injection vulnerability in its DDNS functionality. The DDNSset_cgi.c and related ddns_Proc.c components construct root-run command lines from unquoted user-supplied DDNS input, allowing an authenticated attac...
CVE-2026-66890
The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable...
CVE-2026-19774
A flaw was found in BlueZ. This vulnerability, a stack-based buffer overflow in the Advanced Audio Distribution Profile A2DP stack, allows a network-adjacent attacker to execute arbitrary code. By pairing a malicious Bluetooth device with the target system, an attacker can exploit improper...
CVE-2026-76690
CVE-2026-76690 affects a component of HPE Networking EdgeConnect SD-WAN Gateways , allowing an authenticated remote attacker to achieve remote code execution as root by supplying a specially crafted input. The CVSS 3.1 score is 7.2 (HIGH) , with low attack complexity, no user interaction, and hig...
CVE-2023-22906
CVE-2023-22906 CVE-2023-22906は、HCD0102V1.3820220125バージョンを実行しているHero Qubo Smart Doorbellデバイスに影響を与える深刻な脆弱性です。この特定のデバイスは、デフォルトでパスワードを必要とせずにroot権限でのTelnetアクセスを許可しています。この脆弱性は、不正アクセス、ユーザープライバシーの侵害、デバイスに保存された機密情報の漏洩、さらには侵害されたデバイスがボットネットの悪意ある活動の一部として利用される可能性があるため、重大なセキュリティリスクをもたらします。 研究論文 概念実証ビデオ シェルアクセス...
CVE-2021-39273-CVE-2021-39274
CVE-2021-39273 XeroSecurity Sn1per 9.0무료 버전에서는 애플리케이션 실행 시 안전하지 않은 권한0777이 설정되어, 권한이 없는 사용자가 애플리케이션, 모듈 및 구성 파일을 수정할 수 있습니다. 이로 인해 루트 권한으로 임의 코드 실행이 가능합니다. CVE-2021-39274 XeroSecurity Sn1per 9.0무료 버전에서는 설치 중에 안전하지 않은 디렉터리 권한0777이 설정되어, 권한이 없는 사용자가 메인 애플리케이션과 애플리케이션 구성 파일을 수정할 수 있습니다. 이로 인해 루트 권한으...
cve-2025-50946
cve-2025-50946 CVE-2025-50946（OliveTin get-theme RCE）用のエクスプロイトスクリプトです。文字の要件が非常に厳しく、複数の引数を含む多くのコマンドは正しく実行されない可能性があります。根本原因の調査やスクリプトの堅牢化にはまだ時間をかけていません。必要な場合はご連絡いただくか、PRを開いてください。 このスクリプトの基となったオリジナルの調査は chrisWalker11 によるものです: リンク 使用例 基本PoC: root@kitploit: python cve-2025-50946.py -t...
Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-
Webmin 1.580 RCE 실행 가이드 Webmin 1.580의 /file/show.cgi 구성 요소를 통해 인증된 원격 코드 실행RCE을 수행하기 위한 빠른 참고 자료입니다. 1. 공격 머신 리스너 페이로드를 실행하기 전에 로컬 머신에서 다음 명령을 실행하여 들어오는 연결을 캐치하세요: root@kitploit: rlwrap nc -lnvp 4444 2. 대상 익스플로잇 페이로드 다음 URL을 브라우저 주소 표시줄에 직접 붙여넣으세요 먼저 Webmin 대시보드에 로그인되어 있는지 확인하십시오: root@kitploit:...
EUVD-2026-78164
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...
CVE-2026-12944
IBM Langflow OSS 1.0.0 through 1.10.0 contains a vulnerability in its code security scanner where the DANGEROUS_IMPORTS blocklist correctly blocked subprocess but omitted the socket and urllib standard library modules. This allowed authenticated users to submit components containing socket.connec...
CVE-2026-12944 Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...
CVE-2026-12944 Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...
CVE-2026-84568
A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network directory server may be able to execute arbitrary code with root privileges...
CVE-2026-43786
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...
CVE-2026-43689
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges...
CVE-2026-64701
CVE-2026-64701 is a permissions issue in macOS that was addressed with additional restrictions. The vulnerability allows a malicious app to potentially gain root privileges , constituting a high-impact local privilege escalation. The issue is fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6 . C...