CVE-2025-55182-POC

CVE-2025-55182 POC & Detection React Server Components RSC Unsafe Deserialization 취약점 익스플로잇 및 탐지 도구 모음 취약점 정보 CVE-ID : CVE-2025-55182 영향 버전 : React 19.x, Next.js 15.x/16.x App Router 사용 시 공격 벡터 : RSC Flight 프로토콜 역직렬화 시 프로토타입 오염을 통한 RCE 위험도 : Critical CVSS 10.0 📦 구성 요소 1. 취약한 환경 Docker...

EUVD-2026-95934

ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of Mythology games. Prior to version 1.15.2, the AoE3 POST /game/cloud/getFileURL handler in the bundled game server has no request body size limit or cap on the...

php_hack

Этот инструмент эксплуатирует уязвимость под названием CVE-2019-11043, являющуюся примером небезопасной арифметики указателей, для получения доступа к плохо настроенным серверам PHP. Его можно скачать здесь вам нужно будет запускать его из командной строки Использование: phphack target IP target...

CVE-2025-32433

CVE-2025-32433 Введение В данном документе представлено исследование уязвимости CVE-2025-32433 , затрагивающей реализацию встроенного SSH-сервера в платформе Erlang/OTP. Эта уязвимость представляет собой возможность удалённого выполнения произвольного кода Remote Code Execution, RCE без...

CVE-2020-11097-POC

краш FreeRDP с использованием PoC CVE-2020-11097 запустите сервер с помощью python3 test.py подключитесь к серверу следующей командой xfreerdp /v:127.0.0.1:3389 /u:user /p:pass /gt:127.0.0.1 /log-level:DEBUG...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server for Windows 0.1은 원격 공격자가 MS-DOS 장치 이름에 대한 HTTP 요청을 통해 서비스 거부를 유발할 수 있습니다. 외부 참조: https://marc.info/?l=bugtraq&m=101174569103289&w=2 작성자 Alex Hernandez 일명 @alt3kx...

CVE-2026-107824 x64dbg-MCP Server exposes debugger operations to unauthenticated network clients

x64dbg-MCP Server is a native Model Context Protocol MCP plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.1, x64dbg-MCP Server exposes all MCP debugger tools over HTTP and SSE without authentication while listening on 0.0.0.0 by default. Any unauthenticated...

CVE-2026-107824

The x64dbg-MCP Server plugin, a native Model Context Protocol (MCP) tool for x64dbg, is vulnerable to an authentication bypass in versions prior to 1.1 . The software exposes full debugger functionality over HTTP and SSE while listening on the default interface (0.0.0.0 ) without authentication. ...

CVE-2025-59528-PoC

CVE-2025-59528 PoC 격리된 실험실 환경에서 CVE-2025-59528 을 연구하기 위한 개념 증명PoC입니다. !WARNING 면책 조항 이 프로젝트는 교육 목적, 보안 연구, 그리고 귀하가 소유했거나 명시적 테스트 승인을 받은 시스템 테스트 를 위해서만 엄격히 사용해야 합니다. 소유자의 허가 없이 이 PoC를 제3자 서버, 공공 서비스 또는 인프라에 사용하지 마십시오. 저자는 이 프로젝트의 오용으로 인한 손해, 데이터 손실, 서비스 중단 또는 법적 결과에 대해 책임을 지지 않습니다. 설명 이 PoC는...

CVE-2024-38077-check

CVE-2024-38077check 135 포트를 기반으로 대상이 CVE-2024-38077 취약점에 영향을 받는지 탐지합니다. 대상 머신의 방화벽이 135 포트를 제한하지 않아야 하며, 대상이 RDL 서비스를 활성화한 경우 해당 취약점의 영향을 받습니다. 대상 서버가 패치를 업데이트한 경우 RPC를 통해 서비스에 연결을 시도하면 ncasfaultaccessdenied가 반환됩니다. 참고: 2008, 2012의 패치가 성공적으로 적용되지 않아 accessdenied가 반환되는지 확실하지 않습니다. 그림에서 취약점 패치가 적용된...

CVE-2026-107820 x64dbg-MCP Server vulnerable to pre-authentication denial of service through Content-Length integer overflow

x64dbg-MCP Server is a native Model Context Protocol MCP plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/mcpserver.zig parses an unbounded Content-Length value in parseContentLength and uses it in unchecked usize addition in wsRecv before token...

CVE-2026-107820

The x64dbg-MCP Server (prior to version 1.2 ) is vulnerable to a pre-authentication denial of service due to an integer overflow in src/core/mcp_server.zig. The parseContentLength() function fails to bound the Content-Length value, which is subsequently used in an unchecked usize addition within ...

CVE-2026-107823

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER and CREATE VIEW WITH GRANT OPTION could...

CVE-2026-107822

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component. ...

CVE-2026-107821

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...

EUVD-2026-95921

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...

CVE-2026-107818

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv...

CVE-2026-107817 MariaDB: mysql_json plugin OOB reads

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysqljson plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL table containing invalid JSON data cou...

CVE-2026-107817

The MariaDB server is vulnerable to an out-of-bounds read within the mysql_json plugin affecting versions 10.6.1 to 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2. The root cause is that the plugin incorrectly assumes imported MySQL tables contain valid MySQL binary JSON data . A speciall...

CVE-2026-107817

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysqljson plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL table containing invalid JSON data cou...