147 matches found
CVE-2025-4632_POC
Samsung MagicINFO 9 서버 익스플로잇 CVE-2025-4632 이 저장소는 CVE-2025-4632에 대한 Python 재현 스크립트를 포함하고 있습니다. 이 취약점은 Samsung MagicINFO 9 Server버전 21.1052 이전에서 발견된 인증되지 않은 원격 코드 실행RCE 취약점입니다. 취약점은 SWUpdateFileUploader 서블릿에서 경로명에 대한 부적절한 제한으로 인해 발생합니다. 경로 순회../../를 이용하여 인증되지 않은 공격자가 SYSTEM 권한으로 임의의 파일을 작성할 수 있으며,...
Exploit for Path Traversal in Samsung Magicinfo_9_Server
Samsung MagicINFO 9 Server Exploit CVE-2025-4632 This repos...
CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added four vulnerabilities impacting SimpleHelp, Samsung MagicINFO 9 Server, and D-Link DIR-823X series routers to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The list of...
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2024-7399link is external Samsung MagicINFO 9 Server Path Traversal Vulnerability CVE-2024-57726link is external SimpleHelp Missing Authorization Vulnerability...
Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority...
Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Samsung MagicINFO 9 Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the produ...
CVE-2026-25203
Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1...
CVE-2026-25203
Samsung MagicINFO 9 Server is affected by an Incorrect Default Permissions Local Privilege Escalation vulnerability in versions before 21.1091.1. The issue, with CVSSv3.1 metrics of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H and a base score of 7.8 (HIGH), indicates that an attacker with local access an...
EUVD-2026-21252
Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1...
SAMSUNG MagicINFO 9 Server 安全漏洞
SAMSUNG MagicINFO 9 Server is an enterprise-level digital signage content management and device monitoring platform developed by South Korean company Samsung. Previous versions of SAMSUNG MagicINFO 9 Server, such as 21.1090.1, contained security vulnerabilities. These vulnerabilities allowed...
SAMSUNG MagicINFO 9 Server 安全漏洞
SAMSUNG MagicINFO 9 Server is an enterprise-level digital signage content management and device monitoring platform developed by South Korean company Samsung. Previous versions of SAMSUNG MagicINFO 9 Server, such as 21.1090.1, contained security vulnerabilities. These vulnerabilities stemmed from...
EUVD-2025-22427
Malicious code in bioql PyPI...
EUVD-2025-22409
Malicious code in bioql PyPI...
EUVD-2025-22423
Malicious code in bioql PyPI...
EUVD-2025-22426
Malicious code in bioql PyPI...
EUVD-2025-22422
Malicious code in bioql PyPI...
EUVD-2025-22408
Malicious code in bioql PyPI...
EUVD-2025-22432
Malicious code in bioql PyPI...