CVE-2017-17562

CVE-2017-17562 RCE GoAhead webサーバ 2.5 3.6.5 CVE-2017-17562 用のスタンドアロンPython 3リバースシェルエクスプロイト。GoAhead Webサーバ バージョン2.5 3.6.5で動作します。 ブログ記事はこちら。 Python 3.7で記述・テスト済み。ベースはこちらのPOCと脆弱性環境。一部のコードはMetasploitモジュールから借用。...

so-crates

SO-CRATES Security Onion のコンテナ化による、脅威・悪意・不審なものの迅速分析 pcap ファイル、ログファイル、バイナリファイルを解析するためのスタンドアローン Web アプリケーションです。Suricata ネットワーク解析、YARA バイナリスキャン、ログに対する Sigma ルール検出、アラート・メタデータ・トランスクリプト・16進ダンプを閲覧するためのシングルページ UI を備えています。 📖 完全なドキュメント: https://so-crates.org/ ドキュメント インタラクティブデモ インストール OhMyDebn, Docker, Podm...

CVE-2026-43499-T807D

T807D 最终产物—源码一一对应恢复包 生成日期：2026-08-08 结论 本目录已经整理出当前项目中能够找回的完整 popsicle 源码树、必要头文件、嵌入式 su 载荷、生产二进制和运行脚本。 必须区分： 1. r562 SO 和 r557 helper 的生产二进制已完整保留，哈希可复核。 2. 项目没有保存这两个生产二进制编译前的旧源码快照、目标文件或带 DWARF 的完整构建产物。因此，当前源码不能被诚实地标记为“逐字节就是当时编译生产二进制的源码”。 3. 当前保存的源码是 Kit 中唯一完整的 popsicle 源码树，也是 2026-08-05 审查后的维护基线。...

CVE-2026-43499-so-build

Este repositorio no tiene un README...

CVE-2026-72124 can: isotp: serialize TX state transitions under so->rx_lock

In the Linux kernel, the following vulnerability has been resolved: can: isotp: serialize TX state transitions under so-rxlock The TX state machine so-tx.state is driven from three contexts: sendmsg claiming and progressing a transfer, the RX path consuming Flow Control/echo frames, and two...

CVE-2026-19844

A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component ipv6.so. Performing a manipulation of the argument radvdinterfacename results in stack-based buffer overflow. It is possible to...

CVE-2026-19844

A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component ipv6.so. Performing a manipulation of the argument radvdinterfacename results in stack-based buffer overflow. It is possible to...

CVE-2026-19844

TOTOLINK A800RR 4.1.2cu.5137_B20200730 is affected by a stack-based buffer overflow in the IPv6 component ipv6.so, specifically in function setRadvdCfg of /cgi-bin/cstecgi.cgi. Manipulating the argument radvdinterfacename triggers the overflow. The vulnerability can be exploited remotely, and pub...

EUVD-2026-58726

A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component ipv6.so. Performing a manipulation of the argument radvdinterfacename results in stack-based buffer overflow. It is possible to...

CVE-2026-19844 TOTOLINK A800R ipv6.so cstecgi.cgi setRadvdCfg stack-based overflow

A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component ipv6.so. Performing a manipulation of the argument radvdinterfacename results in stack-based buffer overflow. It is possible to...

CVE-2026-66446

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

CVE-2026-66446

CVE-2026-66446 : Concrete details across connected sources show a SQL Injection vulnerability in WordPress plugin If-So Dynamic Content Personalization affecting versions

CVE-2026-66446

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

CVE-2026-66446 WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

EUVD-2026-57870

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

PT-2026-71557

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dutafi in WordPress Plugin If-So Dynamic Content Personalization versions = 1.10...

CVE-2026-50642

A flaw was found in diff-so-fancy. The application does not properly sanitize non-SGR Select Graphic Rendition terminal control sequences, allowing other control characters and escape sequences to pass through. An attacker can embed malicious control sequences in filenames, diff metadata, or file...

CVE-2026-50642

diff‑so‑fancy does not properly sanitize non‑SGR terminal control sequences before outputting diff data. The application only strips ANSI SGR sequences while allowing other control characters, including carriage return \r and escape sequences e.g., OSC, CSI, to pass through unsanitized. An attack...

CVE-2026-50642

diff‑so‑fancy does not properly sanitize non‑SGR terminal control sequences before outputting diff data. The application only strips ANSI SGR sequences while allowing other control characters, including carriage return \r and escape sequences e.g., OSC, CSI, to pass through unsanitized. An attack...