RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111

Windows 11 RRAS 취약점 시뮬레이션 실습 환경 CVE-2026-25172, CVE-2026-25173, CVE-2026-26111 ⚠️ 중요 – 교육 및 방어 목적으로만 사용 이 가이드는 Windows 라우팅 및 원격 액세스 서비스RRAS 관리 도구의 정수 오버플로우 취약점을 이해하기 위해 격리된 제어된 실습 환경 을 구축하기 위한 것입니다. 명시적 승인 없이 어떠한 시스템에서도 이러한 기술을 사용하지 마십시오. 실습 환경이 인터넷이나 프로덕션 네트워크에 접근할 수 없도록 하십시오. 📋 개요 이 실습은 RRAS 관리...

CVE-2019-18818_CVE-2019-19609

CVE-2019-18818 및 CVE-2019-19609에 대한 익스플로잇 이 저장소에는 CVE-2019-18818 및 CVE-2019-19609의 두 가지 취약점을 악용하는 Python 스크립트가 포함되어 있습니다. CVE-2019-18818 이 취약점은 공격자가 Strapi CMS에서 관리자 사용자의 비밀번호를 재설정할 수 있게 합니다. 사용법 1. 스크립트의 target 및 strapiport 변수를 대상 Strapi 인스턴스에 맞게 수정하세요. 2. 스크립트를 실행하여 관리자 비밀번호를 재설정하세요...

CVE-2026-24061

🚨 CVE-2026-24061 — “TelneTD” GNU Inetutils telnetd의 치명적인 원격 인증 우회 2015년의 유령이 돌아와 여전히 텔넷을 실행 중인 모든 것을 장악합니다. 인증 제로. 환경 변수 하나. 즉시 루트 쉘. ⚠️ 개요 CVE-2026-24061 은 GNU Inetutils telnetd ≤ 2.7 에서 발견된 심각한 원격 권한 상승 취약점입니다. 인증되지 않은 원격 공격자는 Telnet NEW-ENVIRON 옵션을 통해 USER 환경 변수를 "-f root"로 설정합니다. telnetd는 이를...

CVE-2026-20586

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614...

CVE-2026-105180

A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. Executing a manipulation of the argument user/tempUser can lead to dynamically-determined object attributes. The attack can be executed...

CVE-2026-105180

A vulnerability exists in Jeebase version 0.0.1 within the UserService component, specifically affecting the updateUser function located at /user/update/info . An attacker can remotely execute a manipulation of the user/tempUser argument to cause dynamically-determined object attributes (CWE-915,...

CVE-2026-7465-Lab

CVE-2026-7465 - Spectra Gutenberg Blocks 로컬 랩 WordPress 플러그인 Spectra Gutenberg Blocksultimate-addons-for-gutenberg의 CVE-2026-7465를 분석하고 재현하기 위한 로컬 Docker 랩입니다. 이 랩은 다음을 비교합니다: vuln: Spectra 2.19.25 patched: Spectra 2.19.26 이 증명PoC은 의도적으로 최소 피해least-harm 방식입니다. 셸 명령을 실행하거나, 파일을 업로드하거나, 사용자를 생성하거나,...

CVE-2026-36226

CVE-2026-36226: Advantech WebAccess/SCADA Create New Project User XSS PoC 이 저장소는 CVE-2026-36226에 대한 무해한 개념 증명을 포함하고 있습니다. 이는 Advantech WebAccess/SCADA 8.0-2015.08.16의 크로스 사이트 스크립팅 문제입니다. 이 저장소는 승인된 보안 연구 및 로컬 재현 전용입니다. 소유하지 않거나 명시적 테스트 허가를 받지 않은 시스템에 대해 사용하지 마십시오. 요약 Advantech WebAccess/SCADA...

EUVD-2026-92208

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614...

CVE-2026-20586

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614...

CVE-2026-20586

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614...

CVE-2026-20586

A missing bounds check in vdec leads to a possible out-of-bounds write vulnerability. This flaw could allow for remote escalation of privilege without requiring additional execution privileges, although user interaction is required for exploitation. Remediation is available via Patch ID: ALPS1138...

kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface VTI module. When a VTI tunnel device is moved to a different network environment, an unprivileged user in a separate user space can manipulate tunnel parameters. This manipulation could allow the user to intercept or redirect...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

CVE-2026-105172

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2026-105172 itsourcecode Online Admission System login1.php sql injection

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2026-105172

The itsourcecode Online Admission System 1.0 is vulnerable to a SQL injection vulnerability in the /login1.php file. An attacker can initiate this attack remotely by manipulating the User argument. The provided documents indicate that the exploit is public and may be used, though specific remedia...

CVE-2026-105172 itsourcecode Online Admission System login1.php sql injection

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

EUVD-2026-92152

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2026-105302: Exposure of Sensitive Information to an Unauthorized Actor

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...