CVE-2023-27532

CVE-2023-27532 Veeam Backup and Replication에 영향을 미치는 CVE-2023-27532의 POC 기술적 분석 취약점에 대한 기술적 근본 원인 분석은 저희 블로그에서 확인할 수 있습니다: https://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive 요약 이 POC는 안전하지 않은 API 엔드포인트를 악용하여 자격 증명을 추출합니다. 사용법...

CVE-2022-22947

Spring Cloud Gateway Example: python3 exploit.py http://localhost:8080 'id' + Stage deployed to /actuator/gateway/routes/rtxhovup + Executing command... + getting result... + Stage removed! uid...

Advisories

보안 권고 이 저장소에는 침투 테스트 중 발견되어 보고된 여러 취약점이 포함되어 있습니다. 이 저장소의 모든 콘텐츠는 교육 목적으로만 제공됩니다. 링크 https://www.securityweek.com/organizations-notified-of-remotely-exploitable-vulnerabilities-in-aveva-hmi-scada-products/ https://www.cisa.gov/news-events/ics-advisories/icsa-22-342-02...

S3Scanner

S3Scanner 보안이 설정되지 않은 S3 버킷을 찾아 내용을 덤프하는 빠르고 간단한 스크립트입니다 💧 사용 방법 이 도구는 두 부분으로 구성되어 있습니다: 1 - s3finder.py 이 스크립트는 도메인 이름 목록을 받아 해당 도메인이 Amazon S3에서 호스팅되는지 확인합니다. 발견된 S3 도메인은 'domain:region' 형식으로 해당 리전과 함께 파일에 출력됩니다. 설치: 1. 선택 사항 virtualenv venv && source ./venv/bin/activate 2. pip install -r...

spark-exploit

보안이 설정되지 않은 Apache Spark 클러스터에서의 임의 코드 실행 익스플로잇 방법 아래 단계를 따르세요: $ git clone https://github.com/akhld/spark-exploit.git $ cd spark-exploit 원격 코드 실행 exploit.scala를 열고, 실행하려는 코드로 다음 코드를 교체하세요! val exploit = sc.parallelize1 to 1.mapx= //Replace these with whatever you want to get executed val x = "wg...

PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...

PCP: PCP: Privilege escalation to root via linux_sockets PMDA vulnerability

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...

CVE-2022-22947

CVE-2022-22947 스프링 클라우드 게이트웨이에 대한 코드 인젝션 공격 CVE 요약 스프링 클라우드 게이트웨이 버전 3.1.1+ 및 3.0.7+ 이전 버전에서는 Gateway Actuator 엔드포인트가 활성화되고 노출되며 보안되지 않은 경우 애플리케이션이 코드 인젝션 공격에 취약합니다. 원격 공격자는 악의적으로 조작된 요청을 만들어 원격 호스트에서 임의의 원격 실행을 가능하게 할 수 있습니다. 영향을 받는 버전 Oracle Commerce Guided Search 11.3.2 Oracle Communications...

CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE

CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE CVE-2022-22947 소개 위험 등급: 고위험 POC/EXP 상태: 공개됨 CNVD 번호: CNNVD-2022-16402 영향 범위: Spring Cloud GateWay 3.1.0 Spring Cloud GateWay =3.0.0，=3.0.6 Spring Cloud GateWay 3.0.0 취약점 설명 Spring Cloud Gateway에는 원격 코드 실행 취약점이 존재합니다. 이 취약점은 Spring Cloud Gateway 애플리케이션의...

CVE-2026-101057

utcp-mcp the MCP plugin of python-utcp through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a call template's mcpServers configuration without the ensuresecureurl validation that the HTTP-family plugins apply, so the HTTPS/WSS-or-loopback rule is not enforced. A call template...

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BIP...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pcp (UTSA-2026-104835)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104835 advisory. A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and...

Amazon Linux 2 : pcp, --advisory ALAS2-2026-3857 (ALAS-2026-3857)

The version of pcp installed on the remote host is prior to 4.3.2-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3857 advisory. A flaw in the PCP linuxsockets module exposes an unsecured internal connection.An attacker with initial code execution can...

CVE-2026-14842

The CVE-2026-14842 entry concerns the Events Made Easy WordPress plugin prior to version 3.1.2. The root cause is that the payment authorization token is not bound to the specific payment record being charged, enabling an unauthenticated attacker to pay a lower amount for a cheap booking while a ...

AZL-94380 CVE-2026-16526 affecting package pcp 6.3.2-1

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...

CVE-2026-16526

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...

UBUNTU-CVE-2026-16526

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...

CVE-2026-16526 Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...

EUVD-2026-50971

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...

CVE-2026-16526

A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...