CVE-2022-22947

CVE-2022-22947 CVE-2022-22947 Spring-Cloud-Gateway 2022년 1분기에는 Actuator API를 이용하여 SpEL Injection을 수행하고 잠재적으로 시스템 손상을 초래할 수 있는 흥미롭고 심각한 기준 점수 10.0 Spring Cloud Gateway 코드 주입 취약점이 발견되었습니다. Spring Cloud Gateway 3.1.1+ 및 3.0.7+ 이전 버전 Spring Cloud Gateway에서 애플리케이션은 다음 조건에서 코드 주입 공격에 취약합니다. IF:Gateway...

CVE-2022-22947-Spring-Cloud-Gateway

Spring Cloud Gateway 远程代码执行漏洞 该漏洞对于线上业务风险较高，切勿进行未授权扫描 使用说明 root@kitploit: ╰─ ./CVE-2022-22947 -h ─╯ 执行命令：./CVE-2022-22947 -u http://127.0.0.1:8080 -c whoami 批量检测：./CVE-2022-22947 -l url.txt 启动漏洞环境 root@kitploit: java -jar vuln/spring-gateway-demo-0.0.1-SNAPSHOT.jar 漏洞分为5个请求...

CVE-2025-4427-CVE-2025-4428

CVE-2025-4428 & CVE-2025-4427 CVE-2025-4428 は、EPMM の DeviceFeatureUsageReportQueryRequestValidator における認証後のリモートコード実行（RCE）の脆弱性です。この脆弱性は、Spring の AbstractMessageSource を介して処理されるエラーメッセージ内でのユーザー提供入力の安全でない取り扱いに起因し、攻撃者が制御する EL（Expression Language）インジェクションを可能にします。/api/v2/featureusage エンドポイントの細工された forma...

CVE-2026-76867

Netcore NR255-V (firmware 1.5.130703 ) is affected by a stored cross-site scripting (XSS) vulnerability in four routing and NAT configuration CGI handlers: routing_tab_add_cgi , routing_table_list_show_cgi , route_policy_add_cgi , and route_policy_parame_show_cgi . Attackers with low privileges c...

CVE-2026-43042 mpls: add seqcount to protect the platform_label{,s} pair

In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platformlabel,s pair The RCU-protected codepaths mplsforward, mplsdumproutes can have an inconsistent view of platformlabels vs platformlabel in case of a concurrent resize...

CVE-2025-11356

A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and coul...

EUVD-2017-3770

Malware in sbrugna...

Tenda RX3 安全漏洞

Tenda RX3 is a dual-band WiFi 6 home wireless router from Tenda China. It is used for home network coverage and supports high-speed wireless connection. A buffer overflow vulnerability exists in Tenda RX3 version 16.03.13.11multiTDE01, which originates from the parameter list in the file...

Denial Of Service (DoS)

github.com/traefik/traefik is vulnerable to is vulnerable to Denial Of Service DoS. The vulnerability exists due to improper default route configuration when traefik is ran using docker, allowing an attacker to crash the application if they know the name of the running container...

SUSE-FU-2023:3283-1 Feature update for cloud-init

This update for cloud-init fixes the following issues: - Default route is not configured bsc1212879 - cloud-final service failing in powerVS bsc1210273 - Randomly generated passwords logged in clear-text to world-readable file bsc1184758, CVE-2021-3429...

CVE-2022-38310

Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg...

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

Vulnerability Profile Spring Cloud Gateway is a brand new pro...

cloud-init bug fix and enhancement update

An update is available for cloud-init. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cloud-init packages provide a set of init scripts for cloud instances...

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a router device. Tenda AC9 is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to execute arbitrary code or send a crafted POST request to /goform/SetStaticRouteCfg, resulting in a denial of service DoS...

CVE-2019-15225

In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service memory consumption. This is a related issue to CVE-2019-14993...