Ruby-On-Rails-Path-Traversal-Vulnerability-CVE-2018-3760-

Ruby On Rails 경로 탐색 취약점 CVE-2018-3760 중국어 버전Chinese version Ruby On Rails는 잘 알려진 Ruby 웹 개발 프레임워크로, 개발 환경에서 Sprockets를 정적 파일 서버로 사용합니다. Sprockets는 정적 리소스 파일을 컴파일하고 배포하는 Ruby 라이브러리입니다. Sprockets 3.7.1 이하 버전에는 이중 디코딩으로 인한 경로 탐색 취약점이 있습니다. 공격자는 %252e%252e/를 사용하여 루트 디렉토리에 접근하고 대상 서버의 모든 파일을 읽거나 실행할 수...

dll-proxy-generator

DLL プロキシジェネレータ 任意の DLL 用のプロキシ DLL を生成し、ユーザー定義のセカンダリ DLL も読み込みます。 使い方 dll-proxy-generator.exe OPTIONS --import-dll --import 引数 Path to dll to proxy オプション -d, --import-dll Extra dll to import -i, --import Import name or ordinal -p, --proxy-target Target of proxy, defaults to path of same file in...

Seecret.it

📦 Seecret.it — 안전한 일회용 링크 공유 Seecret.it은 암호화된 일회용 링크를 통해 비밀번호, 문서 또는 민감한 정보를 공유할 수 있는 온라인 서비스입니다. 귀하의 데이터는 보이지 않고 안전하게 유지되며 열람 후 자동 파기됩니다. IT팀, 기업, 프리랜서 및 기밀 정보를 안전하게 전송하려는 모든 사람에게 이상적입니다. 🔐 주요 기능 서버 측 암호화 및 열람 후 자동 삭제 일회용 또는 사용자 지정 기간 링크 비밀번호, 메모, 메시지 또는 파일의 안전한 공유 선택적 2차 비밀번호 보호 액세스 통계 날짜, IP,...

CVE-2026-100371

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2, an authorization guard to Users::changepassword, was added to address a previous authorization flaw that allowed a secondary administrator usertype=1, userid != 1 to directly chan...

CVE-2026-100392

In InvoicePlane version 1.7.2 , a missing object-level authorization check in the Users::form() function allows for a Primary Administrator Privilege Downgrade . A Secondary Administrator (user_type = 1, user_id != 1) can modify the Primary Administrator's (user_id = 1) user_type to 2, effectivel...

CVE-2026-100392 InvoicePlane: Primary Administrator Privilege Downgrade via `Users::form()` (Missing Object-Level Authorization)

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2, Users::form performs no object-level authorization check on userid = 1. A Secondary Administrator usertype = 1, userid != 1 can rewrite the Primary Administrator's usertype to 2...

DiagTrackEoP

DiagTrackEoP SeImpersonate 特権を悪用するもう 1 つの方法です。 この PoC は、@crisprss によるこのブログに基づいています。 このブログで @crisprss 氏は、最近のバージョンの SQL Server に同梱されている AzureAttestService を使用して SeImpersonate 特権を悪用する興味深い方法を紹介しました。その PoC はこちら https://github.com/crisprss/magicAzureAttestService にあります。 また、そのブログでは DiagTrack サービスを使用して...

CVE-2026-19033

For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized zone contents to ...

UBUNTU-CVE-2026-19033

For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized zone contents to ...

CVE-2026-19033

For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized zone contents to ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: Rockchip – Fix for kernel hangs during SMP initialization To address this issue, the trampoline code that writes data from the secondary CPUs to SRAM is executed when the secondary CPUs are powered on at least this is true f...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fixed a memory leak in inetdelifa. The following warning was encountered during the fuzzing test: unregisternetdevice: waiting for bond0 to become free. Usage count = 2 This issue can be reproduced as follows: ip link...

Astra Linux – Vulnerability in bind9

In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions of BIND 9 Supported Preview Edition such as 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1, as well as the release version 9.17.0 - 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: “riscv”: prevents corruption of pt regs for secondary idle threads. The top of the kernel thread stack should be reserved for pt regs. However, this is not the case for the idle threads of the secondary boot harts. Their stacks...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Properly handle cases where an enclosure contains only one primary component. This fix reverts to commit 3fe97ff3d949 “scsi: ses: Do not attach if the enclosure has no components”. It also introduces proper handling fo...

CVE-2026-90693 D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflow

A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible...

Linux Distros Unpatched Vulnerability : CVE-2026-89744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can ente...

AZL-100527 CVE-2026-89744 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can enter an infinite loop if the secondary fwnode has more than one child...

CVE-2026-89744

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can enter an infinite loop if the secondary fwnode has more than one child...

UBUNTU-CVE-2026-89744

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can enter an infinite loop if the secondary fwnode has more than one child...