Lucene search
+L

849 matches found

Cvelist
Cvelist
โ€ขadded 2026/09/19 7:43 a.m.โ€ข10 views

CVE-2026-9832 Payment Gateway of Stripe for WooCommerce <= 5.0.8 - Unauthenticated Improper Verification of Cryptographic Signature via woocommerce_api_wt_stripe Webhook Endpoint

The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in all versions up to, and including, 5.0.8. This is due to the publicly accessible woocommerceapiwtstripe webhook endpoint EHStripeWebhookHandler::handle wrapping...

5.3CVSS0.00226EPSS
SaveExploits0References10
Kitploit
Kitploit
โ€ขadded 2026/09/19 3:38 a.m.โ€ข9 views

CVE-2024-52510

Nextcloud X-E2EE-SIGNATURE ์šฐํšŒ POC ์š”์•ฝ Nextcloud์˜ E2EEv2 ํ”„๋กœํ† ์ฝœ์ด ์ •์ƒ์ ์œผ๋กœ ์ž‘๋™ํ•˜๋Š” ๋™์•ˆ ํด๋ผ์ด์–ธํŠธ๋Š” ์„œ๋ฒ„์— ์—…๋กœ๋“œํ•˜๊ธฐ ์ „์— ํด๋” ๋ฉ”ํƒ€๋ฐ์ดํ„ฐ์— ์•”ํ˜ธํ•™์ ์œผ๋กœ ์„œ๋ช…ํ•ฉ๋‹ˆ๋‹ค. ์ด๋Š” ํŒŒ์ผ ๊ณต์œ ๋‚˜ ๋™๊ธฐํ™” ๋ณ€๊ฒฝ์„ ์œ„ํ•ด ๋ฉ”ํƒ€๋ฐ์ดํ„ฐ๋ฅผ ๋‹ค์‹œ ๊ฐ€์ ธ์˜ฌ ๋•Œ ๋ฉ”ํƒ€๋ฐ์ดํ„ฐ๊ฐ€ ๋ณ€์กฐ๋˜์ง€ ์•Š์•˜์Œ์„ ๋ณด์žฅํ•ฉ๋‹ˆ๋‹ค. ์„œ๋ช… ๊ฒ€์ฆ์€ ๊ฐ€์ ธ์˜จ ๋ฉ”ํƒ€๋ฐ์ดํ„ฐ๊ฐ€ ์ดˆ๊ธฐํ™”๋  ๋•Œ ํด๋ผ์ด์–ธํŠธ์˜ foldermetadata.cpp:177 ์—์„œ ์ˆ˜ํ–‰๋ฉ๋‹ˆ๋‹ค. ๊ทธ๋Ÿฌ๋‚˜ ์•…์˜์ ์ธ ์„œ๋ฒ„๊ฐ€ ์ด ๊ฒ€์‚ฌ๋ฅผ ์šฐํšŒํ•  ์ˆ˜ ์žˆ๋Š” ๋‘ ๊ฐ€์ง€ ๋ฐฉ๋ฒ•์ด ์žˆ์Šต๋‹ˆ๋‹ค: ๋นˆ...

7.5CVSS5.9AI score0.00738EPSS
SaveExploits0References6
Kitploit
Kitploit
โ€ขadded 2026/09/19 2:50 a.m.โ€ข8 views

Remediating-CVE-2013-3900-EnableCertPaddingCheck-

์ˆ˜์ • ๋ณด๊ณ ์„œ: Windows Server 2019 Azure VM์—์„œ์˜ CVE-2013-3900 CVE-2013-3900 EnableCertPaddingCheck ์ˆ˜์ • Tenable/Nessus๋ฅผ ์‚ฌ์šฉํ•œ ์ธ์ฆ๋œ ์ทจ์•ฝ์  ์Šค์บ” ์ค‘ Microsoft Azure์—์„œ ํ˜ธ์ŠคํŒ…๋˜๋Š” Windows Server 2019 Datacenter ์ธ์Šคํ„ด์Šค์—์„œ CVE-2013-3900์„ ํ™•์ธํ–ˆ์Šต๋‹ˆ๋‹ค. ์ด ์Šค์บ”์€ ์œ ํšจํ•œ ๊ด€๋ฆฌ์ž ์ž๊ฒฉ ์ฆ๋ช…์„ ์‚ฌ์šฉํ•˜์—ฌ ์‹ฌ์ธต ์ ๊ฒ€์„ ์ˆ˜ํ–‰ํ–ˆ์œผ๋ฉฐ, OS ์ˆ˜์ค€์—์„œ ์ด ์ทจ์•ฝ์ ์˜ ์กด์žฌ๋ฅผ ํ™•์ธํ–ˆ์Šต๋‹ˆ๋‹ค. CVE-2013-3900์€...

8.8CVSS7.6AI score0.44647EPSS
SaveExploits1
Kitploit
Kitploit
โ€ขadded 2026/09/19 2:31 a.m.โ€ข9 views

opgp-service-cve-2019-9153

CVE-2019-9153 ์ทจ์•ฝ์  BSI์˜ ์„ค์ •์— ๊ธฐ๋ฐ˜ํ•œ PoC ์žฌํ˜„ opgp-service API์˜ ์ด๋Ÿฌํ•œ ๊ณต๊ฒฉ์— ๋Œ€ํ•œ ์ทจ์•ฝ์  ์กฐ์‚ฌ ๋‹ค์Œ์œผ๋กœ ํ…Œ์ŠคํŠธ ์‹คํ–‰: root@kitploit: npm test ๊ฒฐ๋ก : opgp-service๋Š” ๊ธฐ๋ณธ์ ์œผ๋กœ AEADprotect=true๋กœ ์„ค์ •๋˜์–ด ์žˆ์œผ๋ฉฐ, ์ด๋Š” CVE-2019-9153์—์„œ ์„ค๋ช…๋œ ์„œ๋ช… ์šฐํšŒ ๊ณต๊ฒฉ์„ ๋ฐฉ์–ดํ•ฉ๋‹ˆ๋‹ค. ๋ผ์ด์„ ์Šค: MIT ์ €์ž‘๊ถŒ 2019 Stรฉphane M. Catala ์ด๋กœ์จ ๋ณธ ์†Œํ”„ํŠธ์›จ์–ด ๋ฐ ๊ด€๋ จ ๋ฌธ์„œ ํŒŒ์ผ์ดํ•˜ "์†Œํ”„ํŠธ์›จ์–ด"์˜ ์‚ฌ๋ณธ์„ ํš๋“ํ•˜๋Š” ๋ชจ๋“  ์‚ฌ๋žŒ์—๊ฒŒ ์†Œํ”„ํŠธ์›จ์–ด...

7.5CVSS7.3AI score0.02013EPSS
SaveExploits1
Nuclei
Nuclei
โ€ขadded 2026/09/19 2:05 a.m.โ€ข196 views

MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on...

8.7CVSS7.2AI score0.02428EPSS
SaveExploits0References2
Kitploit
Kitploit
โ€ขadded 2026/09/19 12:42 a.m.โ€ข7 views

CVE-2022-39299_PoC_Generator

CVE-2022-39299 ์•…์šฉ ๋‹ค์ค‘ ๋ฃจํŠธ ์š”์†Œ๋ฅผ ํ†ตํ•œ ์„œ๋ช… ์šฐํšŒ ๋ณด์•ˆ ๊ถŒ๊ณ  : https://github.com/node-saml/passport-saml/security/advisories/GHSA-m974-647v-whv7 ํŒจ์น˜ : https://github.com/node-saml/passport-saml/commit/8b7e3f5a91c8e5ac7e890a0c90bc7491ce33155e node-saml ํ…Œ์ŠคํŠธ ์ผ€์ด์Šค์—์„œ ์ถ”์ถœํ•œ ๊ธฐ๋ณธ ํŽ˜์ด๋กœ๋“œ ์˜ˆ์ œ:...

8.1CVSS7.8AI score0.03398EPSS
SaveExploits1References7
Kitploit
Kitploit
โ€ขadded 2026/09/19 12:06 a.m.โ€ข10 views

cve-2026-25262-sm8450-research

ะญะบัะฟะตั€ะธะผะตะฝั‚ะฐะปัŒะฝะพะต ะฟะพะดั‚ะฒะตั€ะถะดะตะฝะธะต CVE-2026-25262 ะฝะฐ Snapdragon 8 Gen 1 SM8450 ะกั‚ะฐั‚ัƒั: ะงะฐัั‚ะธั‡ะฝั‹ะน ัƒัะฟะตั… โ€” ะฟั€ะพะธะทะฒะพะปัŒะฝะฐั ะทะฐะฟะธััŒ ะฒ SRAM ะฟะพะดั‚ะฒะตั€ะถะดะตะฝะฐ, ะฟะพะปะฝะฐั ะธะฝะธั†ะธะฐะปะธะทะฐั†ะธั Firehose ะพะถะธะดะฐะตั‚ัั. ะ’ ัั‚ะพะผ ั€ะตะฟะพะทะธั‚ะพั€ะธะธ ัะพะดะตั€ะถะฐั‚ัั ั€ะตะทัƒะปัŒั‚ะฐั‚ั‹ ัะบัะฟะตั€ะธะผะตะฝั‚ะฐะปัŒะฝะพะณะพ ะธััะปะตะดะพะฒะฐะฝะธั ะฟั€ะธะผะตะฝะธะผะพัั‚ะธ CVE-2026-25262...

7AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/18 10:46 p.m.โ€ข8 views

CVE-2025-29775

SAMLStorm CVE-2025-29775 ๋žฉ ํ™˜๊ฒฝ ์ด๋Š” xml-crypto ๋ผ์ด๋ธŒ๋Ÿฌ๋ฆฌ ๋ฐ Node.js์˜ SAML ๊ตฌํ˜„์— ์˜ํ–ฅ์„ ๋ฏธ์น˜๋Š” SAMLStorm ์ทจ์•ฝ์ CVE-2025-29775์„ ์‹œ์—ฐํ•˜๊ธฐ ์œ„ํ•œ ๋žฉ ํ™˜๊ฒฝ์ž…๋‹ˆ๋‹ค. ์ฐธ๊ณ : ์ด๋Š” ์ทจ์•ฝ์ ์˜ ์‹ค์ œ ์•…์šฉ์ด ์•„๋‹ˆ๋ฉฐ, ์ทจ์•ฝ์ ์ด ์–ด๋–ป๊ฒŒ ์ž‘๋™ํ•  ์ˆ˜ ์žˆ๋Š”์ง€ ๋ณด์—ฌ์ฃผ๊ธฐ ์œ„ํ•œ ์žฌํ˜„์ž…๋‹ˆ๋‹ค. ๊ตฌ์„ฑ ์š”์†Œ ์„œ๋น„์Šค ์ œ๊ณต์žService Provider : @node-saml/node-saml์„ ์‚ฌ์šฉํ•˜๋Š” ์ทจ์•ฝํ•œ SAML ์„œ๋น„์Šค ์ œ๊ณต์ž ID ์ œ๊ณต์žIdentity Provider : ๊ฐ„๋‹จํ•œ ๋ชจ์˜ SAML I...

9.3CVSS8.3AI score0.09509EPSS
SaveExploits1
Kitploit
Kitploit
โ€ขadded 2026/09/18 9:44 p.m.โ€ข9 views

PowerShell-Obfuscation-Bible

PowerShell ๋‚œ๋…ํ™” ๋ฐ”์ด๋ธ” ์„œ๋ช… ๊ธฐ๋ฐ˜ ํƒ์ง€๋ฅผ ์šฐํšŒํ•˜๊ธฐ ์œ„ํ•ด PowerShell ์Šคํฌ๋ฆฝํŠธ๋ฅผ ์ˆ˜๋™์œผ๋กœ ๋‚œ๋…ํ™”ํ•˜๋Š” ๊ธฐ๋ฒ•, ์˜ˆ์ œ, ๊ทธ๋ฆฌ๊ณ  ์•ฝ๊ฐ„์˜ ์ด๋ก ์„ ๋ชจ์•„ ๋‘” ์ž๋ฃŒ๋กœ, ๊ต์œก ๋ชฉ์ ์œผ๋กœ ์ž‘์„ฑ๋˜์—ˆ์Šต๋‹ˆ๋‹ค. ์ด ์ €์žฅ์†Œ์˜ ๋‚ด์šฉ์€ ๊ฐœ์ธ ์—ฐ๊ตฌ์˜ ๊ฒฐ๊ณผ๋ฌผ์ด๋ฉฐ, ์˜จ๋ผ์ธ ์ž๋ฃŒ ์ฝ๊ธฐ์™€ ์‹คํ—˜์‹ค ๋ฐ ํŽœํ…Œ์ŠคํŠธ์—์„œ์˜ ์‹œํ–‰์ฐฉ์˜ค ์‹œ๋„๋ฅผ ํฌํ•จํ•ฉ๋‹ˆ๋‹ค. ๋ชจ๋“  ๋‚ด์šฉ์„ ๊ทธ๋Œ€๋กœ ๋ฏฟ์ง€๋Š” ๋งˆ์‹ญ์‹œ์˜ค. YouTube ๋™์˜์ƒ ํ”„๋ ˆ์  ํ…Œ์ด์…˜ : youtube.com/watch?v=tGFdmAhlXE โš ๏ธ ๊ณ ์ง€ ์‚ฌํ•ญ : ์ด ์ €์žฅ์†Œ์— ์„ค๋ช…๋œ ๊ธฐ์ˆ ๊ณผ ๊ฐœ๋…์„ ํ…Œ์ŠคํŠธํ•  ๊ถŒํ•œ์ด ์—†๋Š” ์‹œ์Šคํ…œ์—...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
โ€ขadded 2026/09/18 7:53 p.m.โ€ข9 views

spd_flasher

CVE-2022-38694 ๊ฐ•ํ™” ์ต์Šคํ”Œ๋กœ์ž‡ โ€” RP2350 USB ํ˜ธ์ŠคํŠธ ์ž๋™ ํ”Œ๋ž˜์…” ์ค‘๊ตญ์–ด ๋ฒ„์ „ README ํŠœํ† ๋ฆฌ์–ผ UDX710 ๋ถ€ํŠธ ์ฒด์ธ ๋ฆฌ๋ฒ„์Šค ์—”์ง€๋‹ˆ์–ด๋ง ๋ฐ RP2350 ๊ฐ•ํ™” ๋ถ€ํŠธ ํŠœํ† ๋ฆฌ์–ผ CVE-2022-38694 Unisoc BootROM ์ทจ์•ฝ์ ์„ Raspberry Pi RP2350 USB ํ˜ธ์ŠคํŠธ๋ฅผ ํ†ตํ•ด ์•…์šฉํ•˜์—ฌ ๋ถ€ํŒ… ์‹œ SPL ๋กœ๋”๋ฅผ ์ž๋™์œผ๋กœ ์ „์†กํ•˜๊ณ  ์ž„์˜์˜ u-boot๋ฅผ ์‹œ์ž‘ํ•ฉ๋‹ˆ๋‹ค. ์›๋ž˜ PC + spddump๊ฐ€ ํ•„์š”ํ–ˆ๋˜ ์ต์Šคํ”Œ๋กœ์ž‡ ์ฒด์ธ์„ RP2350 ๋งˆ์ดํฌ๋กœ์ปจํŠธ๋กค๋Ÿฌ๋กœ ์˜ฎ๊น๋‹ˆ๋‹ค. ์žฅ์น˜๋ฅผ ์—ฐ๊ฒฐํ•˜๋ฉด ์ž๋™์œผ๋กœ ํ”Œ๋ž˜์‹ฑ๋˜...

7.8CVSS6.6AI score0.00586EPSS
SaveExploits2References10
Kitploit
Kitploit
โ€ขadded 2026/09/18 6:41 p.m.โ€ข13 views

waf-community-bypasses

WAFใ‚ณใƒŸใƒฅใƒ‹ใƒ†ใ‚ฃใƒใ‚คใƒ‘ใ‚น Web Application Firewall๏ผˆๅˆฅๅWAF๏ผ‰ใฏใ‚ดใƒŸใงใ™ใ€‚ ๆœ€ใ‚‚ๅฎ‰ไพกใชCloudflareใ‹ใ‚‰ใ€Impervaใ€Akamaiใ€F5ใ€Checkpointใ€Fortinetใจใ„ใฃใŸใ€Œใ‚จใƒณใ‚ฟใƒผใƒ—ใƒฉใ‚คใ‚บใ€ใจ่จ€ใ‚ใ‚Œใ‚‹ใƒ™ใƒณใƒ€ใƒผใพใงใ€ใ™ในใฆใฎใƒ™ใƒณใƒ€ใƒผใฏๅฎŸ่ณช็š„ใชไฟ่ญทใ‚’ไธ€ๅˆ‡ๆไพ›ใ›ใšใ€้กงๅฎขใ‚’้จ™ใ—ใฆใ„ใ‚‹ใ ใ‘ใงใ™ใ€‚ WAFใ‚ทใ‚ฐใƒใƒใƒฃใฎ99.9%ใฏใ€10ใ€œ15ๅนดๅ‰ใซๆ›ธใ‹ใ‚ŒใŸๅ˜ใชใ‚‹ๆญฃ่ฆ่กจ็พ๏ผˆRegExps๏ผ‰ใซใ™ใŽใพใ›ใ‚“ใ€‚ ใ“ใ‚Œใ‚’่จผๆ˜Žใ™ใ‚‹ใŸใ‚ใซใ€ใ‚ณใƒŸใƒฅใƒ‹ใƒ†ใ‚ฃใƒใ‚คใƒ‘ใ‚นใ‚’ๅซใ‚€Twitterใƒšใ‚คใƒญใƒผใƒ‰ใ‚’ใ€็ขบ่ชใงใใ‚‹CSVใƒชใ‚นใƒˆใซใพใจใ‚ใพใ—ใŸใ€‚...

5.8AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/18 6:02 p.m.โ€ข5 views

the-key-ships-with-the-lock-cve-2026-82876-phison-s11-ssd-firmware-signature-bypass

CVE-2026-82876 โ€” Phison S11 SSD ํŽŒ์›จ์–ด ์„œ๋ช… ๊ฒ€์ฆ ์šฐํšŒ PoC CVE-2026-82876CVSS 3.1: 8.2 High / CVSS 4.0: 9.3 Critical, CWE-347์— ๋Œ€ํ•œ ๊ฐœ๋… ์ฆ๋ช…PoC์ž…๋‹ˆ๋‹ค: Phison PS3111-S11 SATA SSD ์ปจํŠธ๋กค๋Ÿฌ๋Š” ํŽŒ์›จ์–ด ์—…๋ฐ์ดํŠธ RSA ์„œ๋ช…์„ ๋ถˆ๋ณ€ ์ปจํŠธ๋กค๋Ÿฌ ์ €์žฅ์†Œ์— ๊ณ ์ •๋œ ๋ชจ๋“ˆ๋Ÿฌ์Šค ๋Œ€์‹  ํŽŒ์›จ์–ด ์ด๋ฏธ์ง€ ์ž์ฒด์— ๋‚ด์žฅ๋œ ๊ณต๊ฐœ ๋ชจ๋“ˆ๋Ÿฌ์Šค ์— ๋Œ€ํ•ด ๊ฒ€์ฆํ•ฉ๋‹ˆ๋‹ค. ๋ˆ„๊ตฌ๋‚˜ ์ž์‹ ์˜ RSA ํ‚ค ์Œ์„ ์ƒ์„ฑํ•˜๊ณ , ์ˆ˜์ •๋œ ํŽŒ์›จ์–ด์— ๋‹ค์‹œ ์„œ๋ช…ํ•˜๊ณ , ์ผ์น˜ํ•˜๋Š” ๋ชจ๋“ˆ๋Ÿฌ์Šค๋ฅผ ๋‚ด...

9.3CVSS6.1AI score0.00149EPSS
SaveExploits1References3
Kitploit
Kitploit
โ€ขadded 2026/09/18 4:53 p.m.โ€ข10 views

CVE-2025-65945-poc

CVE-2025-65945: node-jws ์„œ๋ช… ์šฐํšŒ ์ด ๋ฌธ์„œ๋Š” node-jws ๋ผ์ด๋ธŒ๋Ÿฌ๋ฆฌ์˜ ์„œ๋ช… ๊ฒ€์ฆ ์šฐํšŒ์— ๋Œ€ํ•œ ๊ฐœ๋… ์ฆ๋ช…PoC์ž…๋‹ˆ๋‹ค. ์ด ๋ฒ„๊ทธ๋กœ ์ธํ•ด ์„œ๋ฒ„๊ฐ€ ์‚ฌ์šฉ์ž ์ œ์–ด ๋ฐ์ดํ„ฐ์—์„œ HMAC ์‹œํฌ๋ฆฟ์„ ํŒŒ์ƒํ•  ๋•Œ ๊ณต๊ฒฉ์ž๊ฐ€ ์œ ํšจํ•œ JWT๋ฅผ ์œ„์กฐํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์ด ๋ฒ„๊ทธ๋Š” ๋ฌด์—‡์ธ๊ฐ€์š”? jws.createVerify ํ•จ์ˆ˜๋Š” HMAC ์•Œ๊ณ ๋ฆฌ์ฆ˜์„ ์‚ฌ์šฉํ•  ๋•Œ ์‹œํฌ๋ฆฟ์ด ์‹ค์ œ๋กœ ์ œ๊ณต๋˜์—ˆ๋Š”์ง€ ๊ฒ€์ฆํ•˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค. ์•ฑ์ด JWT์˜ ํŠน์ • ๊ฐ’์˜ˆ: kid ํ—ค๋”์„ ๊ธฐ๋ฐ˜์œผ๋กœ ์‹œํฌ๋ฆฟ์„ ์กฐํšŒํ•˜๊ณ  ํ•ด๋‹น ์กฐํšŒ๊ฐ€ ์‹คํŒจํ•˜๋ฉด, ๋นˆ ์‹œํฌ๋ฆฟ์œผ๋กœ ๊ฒ€์ฆํ•˜๊ฒŒ ๋  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค...

7.5CVSS5.9AI score0.00215EPSS
SaveExploits1
Kitploit
Kitploit
โ€ขadded 2026/09/18 4:18 p.m.โ€ข10 views

CVE-2021-21239

CVE-2021-21239์— ๊ด€ํ•œ ๊ธฐ์ˆ  ๋ณด๊ณ ์„œ: Redash SAML ์ธ์ฆ ์ทจ์•ฝ์  SAML ์†Œ๊ฐœ SAMLSecurity Assertion Markup Language์€ ์—ฐํ•ฉ ID ์‹œ์Šคํ…œ์—์„œ ๋‹น์‚ฌ์ž ๊ฐ„ ์ธ์ฆ ๋ฐ ๊ถŒํ•œ ๋ถ€์—ฌ ๋ฐ์ดํ„ฐ๋ฅผ ๊ตํ™˜ํ•˜๊ธฐ ์œ„ํ•œ ๊ฐœ๋ฐฉํ˜• ํ‘œ์ค€์ž…๋‹ˆ๋‹ค. ์ด๋ฅผ ํ†ตํ•ด ๋„๋ฉ”์ธ ๊ฐ„ SSOSingle Sign-On๊ฐ€ ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๋‹ค. ์ฃผ์š” ๊ตฌ์„ฑ ์š”์†Œ๋Š” ๋‹ค์Œ๊ณผ ๊ฐ™์Šต๋‹ˆ๋‹ค. IdPIdentity Provider : ์‚ฌ์šฉ์ž๋ฅผ ์ธ์ฆํ•˜๊ณ  SAML ์–ด์„ค์…˜์„ ๋ฐœ๊ธ‰ํ•˜๋Š” ์„œ๋น„์Šค์ž…๋‹ˆ๋‹ค์˜ˆ: Google์˜ SAML IdP. ๊ฐœ์ธ ํ‚ค๋กœ ์–ด์„ค์…˜์— ์„œ๋ช…ํ•˜์—ฌ...

6.5CVSS7.3AI score0.01271EPSS
SaveExploits3
NVD
NVD
โ€ขadded 2026/09/18 12:17 p.m.โ€ข5 views

CVE-2026-28198

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted roo...

9.4CVSS0.00199EPSS
SaveExploits0References2
Kitploit
Kitploit
โ€ขadded 2026/09/18 12:09 p.m.โ€ข6 views

Weblogic_Wsat_RCE

WeblogicWsatRCE POC ะดะปั CVE-2017-10271. ะŸะพัะบะพะปัŒะบัƒ java.lang.ProcessBuilder ะฑั‹ะป ะธะทะฝะฐั‡ะฐะปัŒะฝั‹ะผ ะฒะตะบั‚ะพั€ะพะผ ะดะปั RCE, ััƒั‰ะตัั‚ะฒัƒะตั‚ ะฝะตัะบะพะปัŒะบะพ ะฟั€ะฐะฒะธะป ะฝะฐ ะพัะฝะพะฒะต ัะธะณะฝะฐั‚ัƒั€, ะบะพั‚ะพั€ั‹ะต ะฑะปะพะบะธั€ัƒัŽั‚ ัั‚ัƒ ะบะพะฝะบั€ะตั‚ะฝัƒัŽ ะฝะฐะณั€ัƒะทะบัƒ. ะ”ะพะฑะฐะฒะปะตะฝ java.lang.Runtime, ะธ ะฒ ะฑัƒะดัƒั‰ะตะผ ะฑัƒะดัƒั‚ ะดะพะฑะฐะฒะปะตะฝั‹ ะดั€ัƒะณะธะต. ะญั‚ะพ ั‚ะพะปัŒะบะพ ะดะปั ะพะฑั€ะฐะทะพะฒะฐั‚ะตะปัŒะฝั‹ั…...

7.5CVSS8.3AI score0.9999EPSS
SaveExploits45
Kitploit
Kitploit
โ€ขadded 2026/09/18 11:33 a.m.โ€ข7 views

CVE-2024-41107

๐Ÿ‡ฎ๐Ÿ‡ฑ BringThemHome NeverAgainIsNow ๐Ÿ‡ฎ๐Ÿ‡ฑ ์šฐ๋ฆฌ๋Š” ํ…Œ๋Ÿฌ ์กฐ์ง ํ•˜๋งˆ์Šค์— ์˜ํ•ด ์ธ์งˆ๋กœ ์žกํžŒ ๋ชจ๋“  ์‹œ๋ฏผ์˜ ์•ˆ์ „ํ•œ ๊ท€ํ™˜์„ ์š”๊ตฌํ•ฉ๋‹ˆ๋‹ค. ๋ชจ๋“  ์ธ์งˆ์ด ์„๋ฐฉ๋˜์–ด ์•ˆ์ „ํ•˜๊ฒŒ ์ง‘์œผ๋กœ ๋Œ์•„์˜ฌ ๋•Œ๊นŒ์ง€ ์šฐ๋ฆฌ๋Š” ์‰ฌ์ง€ ์•Š์„ ๊ฒƒ์ž…๋‹ˆ๋‹ค. ์—ฌ๋Ÿฌ๋ถ„๋„ ๊ทธ๋“ค์ด ์ง‘์œผ๋กœ ๋Œ์•„์˜ค๋„๋ก ๋„์šธ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.https://stories.bringthemhomenow.net/ ๐Ÿš€ CVE-2024-41107 ์ต์Šคํ”Œ๋กœ์ž‡ ๐Ÿš€ ์ด ์ €์žฅ์†Œ๋Š” Apache CloudStack์˜ CVE-2024-41107 ๋กœ ์‹๋ณ„๋œ ์น˜๋ช…์ ์ธ ์ทจ์•ฝ์ ์— ๋Œ€ํ•œ ์ต์Šคํ”Œ๋กœ์ž‡์„ ํฌํ•จํ•ฉ๋‹ˆ๋‹ค. ์ด...

8.1CVSS8.2AI score0.1776EPSS
SaveExploits1
EUVD
EUVD
โ€ขadded 2026/09/18 11:12 a.m.โ€ข6 views

EUVD-2026-82875

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted roo...

9.4CVSS0.00199EPSS
SaveExploits0References2
CVE
CVE
โ€ขadded 2026/09/18 11:12 a.m.โ€ข9 views

CVE-2026-28198

CVE-2026-28198 affects NetBackup Flex OS (Cohesity), specifically its management shell. An authenticated, low-privileged user can bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation yields ...

9.4CVSS0.00199EPSS
SaveExploits0References2
Cvelist
Cvelist
โ€ขadded 2026/09/18 11:12 a.m.โ€ข28 views

CVE-2026-28198 Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted roo...

9.4CVSS0.00199EPSS
SaveExploits0References2
Rows per page
Query Builder