3110 matches found
foreman: command injection in foreman-rake database tasks
A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:importdump tasks. The application fails to properly sanitize user-supplied input in the destination parameter during backups and the file parameter during imports before passing them to a Ru...
root-zte-open
root-zte-open exploit for CVE-2012-4220 working on zte-open Original Advisory: https://www.codeaurora.org/projects/security-advisories/multiple-issues-diagkgsl-system-call-handling-cve-2012-4220-cve-2012 Original Exploit: https://github.com/hiikezoe/breaksetresuid Build $ ndk-build NDKPROJECTPATH...
PT-2026-103918
Name of the Vulnerable Software and Affected Versions Foreman affected versions not specified Description OS command injection flaws exist in the foreman-rake db:dump and db:import dump tasks. The application does not properly sanitize user-supplied input in the destination parameter during backu...
CVE-2026-31431-Metasploit-exploit
CVE-2026-31431 - Linux Kernel AFALG "Copy Fail" Local Privilege Escalation An automated Metasploit Post-Exploitation module that leverages CVE-2026-31431 popularly known as "Copy Fail" to perform Local Privilege Escalation LPE on vulnerable Linux kernels versions 4.14 through 6.19.12. Description...
ish
iSH 사용자 모드 x86 에뮬레이션과 시스템 call 번역을 사용하여 iOS 에서 리눅스 쉘을 실행할 수 있게 해줍니다. 프로젝트의 현황을 알고 싶으시면 커밋 로그와 이슈 탭을 참고해주세요. 애플 앱스토어 TestFlight beta Discord server 도움 문서 Wiki README중문 Hacking 해당 프로젝트는 깃의 서브 모듈이 있습니다. 해당 저장소를 받은 후 --recurse-submodules 또는 git submodule update --init 을 입력하여 깃 서브 모듈을 클론하세요. 아래 사항은 이...
CVE-2026-54161
CVE-2026-54161 PoC 概要 upsmon は、サーバー提供、攻撃者が制御可能なups.alarm 値 をサニタイズせずに、system を介して実行するシェルコマンドに補間します。監視対象デバイスが ALARM 状態を報告し、オペレーターが ALARM イベントに対して NOTIFYCMD を EXEC で設定している場合、シェルコマンド置換（POSIX では $... / バックティック、Windows cmd.exe では "&…&" 引用符の突破）を含む ups.alarm の値により、upsmon ユーザー（通常は root）として任意の OS コマンドが実行され...
CVE-2026-102006
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...
EUVD-2026-88548
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...
CVE-2026-102006 VxWorks 7 Memory allocation
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...
CVE-2026-102006
Wind River VxWorks 7 prior to version 26.09 is vulnerable to a memory management flaw where specific system call arguments cause the process management subsystem to fail to release allocated kernel memory before an application terminates. This can lead to a high availability impact as kernel memo...
CVE-2026-102004
Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...
EUVD-2026-88467
Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...
CVE-2026-102004 VxWorks 7
Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...
CVE-2026-102004 VxWorks 7
Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...
CVE-2026-102004
Wind River VxWorks 7 versions prior to 26.09 are vulnerable to a memory corruption flaw within the memory management subsystem . The vulnerability is triggered by providing specific arguments to certain system calls . This issue can lead to high impacts on confidentiality, integrity, and availabi...
CVE-2026-97686 VxWorks 7 Memory Resource leak
Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...
EUVD-2026-88440
Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...
frida-stalker-NtStrace
NtStrace Windowsx64上でfrida-stalkerベースのシステムコールトレーサー。 483NtWaitForWorkViaWorkerFactory test.exe!0x7ff91fbaf262 35NtQueryVirtualMemory test.exe!0x7ff91fbaf262 35NtQueryVirtualMemory test.exe!0x7ff91fbaf262 35NtQueryVirtualMemory test.exe!0x7ff91fbb06d2 199NtCreateThreadEx + Following thread 17876...
CVE-2026-75616
CVE-2026-75616 TP-Link Archer C20 v6 Web管理インターフェースにおける認証済みOSコマンドインジェクション。 BPA WAN設定値は適切な無害化なしにsystemに渡されるため、隣接ネットワーク上の認証済み管理者がrootとしてコマンドを実行できる。 Daniil Gordeev totekuh によって発見および報告されました。 影響を受けるバージョン Archer C20 v6 EUファームウェア 0.9.1 Build 260811 より前 Archer C20 v6 USファームウェア 0.9.1 Build 260812 より前 Arche...
CVE-2026-102006: Missing Release of Memory after Effective Lifetime
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...