CVE-2022-1388_PoC

F5 BIG-IP RCE 익스플로잇 CVE-2022-1388 POST 1: POST /mgmt/tm/util/bash HTTP/1.1 Host: :8443 Authorization: Basic YWRtaW46 Connection: keep-alive, X-F5-Auth-Token X-F5-Auth-Token: 0 "command": "run" , "utilCmdArgs": " -c 'id' " curl 명령줄: $ curl -i -s -k -X $'POST' \ -H $'Host: :8443' \ -H...

CVE-2018-16987

CVE-2018-16987 이것은 침투 테스트 중 Squash TM에서 발견한 민감 정보의 평문 저장 및 민감 정보 노출 취약점입니다. SquashTM Squash TM은 테스트 케이스를 관리하는 데 사용되는 웹 인터페이스입니다. 프로젝트 링크 설명 Squash TM은 최소한 1.18.0 버전까지 관리 패널에 외부 서비스의 평문 비밀번호를 표시하며, 이는 HTML 소스 코드의 ta-server-password 필드에서 확인할 수 있습니다. 세부 정보 SquashTM의 관리 패널에서 외부 서비스일명 자동화 서버 페이지에는 서비스...

CVE-2025-30216-PoC

CVE-2025-30216 PoC: CryptoLib 힙 오버플로 취약점 개요 CryptoLib은 CCSDS 우주 데이터 링크 보안 프로토콜 - 확장 절차SDLS-EP를 사용하는 소프트웨어 전용 솔루션을 제공하여, core Flight System cFS을 실행하는 우주선과 지상국 간의 통신을 보호합니다. 버전 1.3.3 및 이전 버전에서는 CryptoTMProcessSecurity 함수cryptotm.c:1735:8에서 힙 오버플로 취약점이 발생합니다. TM 프로토콜 패킷의 보조 헤더 길이를 처리할 때, 보조 헤더 길이가 패...

CVE-2022-1388

CVE-2022-1388 Checking and exploit for CVE-2022-1388 Installation: python3 -m pip install -r requirements.txt Usage Single : python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"' Mass : python3 cve.py m host li...

CVE-2026-90085

CVE-2026-90085 affects the octeontx2-af driver in the Linux kernel . The function rvu_dbg_nix_tm_tree_display() dereferences pfvf->sq_ctx without verifying that the SQ context has been allocated. Reading /sys/kernel/debug/octeontx2/nix/tm_tree for a NIX logical function whose transmit queues a...

EUVD-2026-81946

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix NULL deref in NIX TM tree debugfs read path rvudbgnixtmtreedisplay dereferences pfvf-sqctx without checking whether the SQ context has been allocated. Reading /sys/kernel/debug/octeontx2/nix/tmtree for a NIX LF...

PT-2026-94433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the rvu dbg nix tm tree display function. This occurs when the function accesses pfvf-sq ctx without verifying if the SQ context has been allocated...

CVE-2026-82779

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82780

Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...

CVE-2026-82780

An unrestricted file upload vulnerability (dangerous file type) affects the CONPROSYS TM Series by Consec . A remote authenticated attacker can upload a specially crafted file to achieve arbitrary command execution on the product. The flaw is scored CVSS 3.1: 8.8 (HIGH) — network vector, low comp...

CVE-2026-82780

Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...

EUVD-2026-77233

Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...

CVE-2026-82780

Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...

CVE-2026-82779

CONPROSYS TM Series (CONTEC) is affected by an OS Command Injection vulnerability caused by improper neutralization of special elements used in an OS command. An authenticated attacker with low privileges (able to log in to the product) can execute arbitrary OS commands , leading to high impact o...

CVE-2026-82779

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

EUVD-2026-77232

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82779

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

PT-2026-91084

Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...

PT-2026-91083

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82780: Unrestricted Upload of File with Dangerous Type

Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...