Cisco ASA Authentication Bypass by Spoofing (CVE-2023-20245)

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flo...

PT-2026-106774

The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields by omitting the secu anti-forgery parameter in crayons store.php, causing the authorization dispatcher to resolve an...

PT-2026-106823

Name of the Vulnerable Software and Affected Versions @quasar/ssl-certificate versions prior to 2.1.0 @quasar/cli versions prior to 5.0.4 @quasar/app-vite versions prior to 3.3.0 Description The @quasar/ssl-certificate utility caches a combined private key and certificate PEM without applying...

A read-after-free memory flaw was found in the Linux kernel's garbage collection

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close and fget simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on...

CVE-2024-4898-Poc

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-클릭 WP 스테이징 & 마이그레이션 = 0.1.0.38 - 인증되지 않은 API 설정/임의 옵션 업데이트/관리자 사용자 생성을 위한 권한 누락...

CVE-2021-41091

CVE-2021-41091 MobyDocker Engine의 버그로 인해 권한이 없는 사용자가 디렉토리를 탐색하고 Docker 내부의 프로그램을 호스트 머신에서 직접 실행할 수 있습니다. Docker 내부에 suid 프로그램이 있으면 사용자는 호스트 머신에서 이를 suid로 실행할 수 있습니다. PoC 컨테이너 터미널에서 docker.sh 파일을 다운로드한 후 root 사용자로 실행합니다: wget https://raw.githubusercontent.com/jrbH4CK/CVE-2021-41091/main/docker.sh...

CVE-2026-24061-setup

CVE-2026-24061 セットアップ このリポジトリには、CVE-2026-24061 用の Docker セットアップが含まれています。 Docker をインストールしたら、次の操作を行うだけです。 1. このリポジトリをクローンします。 2. 次のコマンドを実行します: sudo docker build . --tag telnetd-auth-bypass 3. Docker イメージがビルドされたら、次のコマンドでコンテナを起動できます: sudo docker run -dt --rm --name test telnetd-auth-bypass 4. これで、pwn...

CVE-2025-64446-Exploit

CVE-2025-64446-Exploit CVE-2025-64446 취약점을 이용한 fortiweb WAF 익스플로잇입니다. 이 익스플로잇을 사용하여 사용자와 비밀번호를 생성할 수 있습니다. 실행 방법? python3 exploitforti.py targets.txt python3 exploitforti.py 192.168.1.1 python3 exploitforti.py 192.168.1.1:8443 python3 exploitforti.py https://192.168.1.1:8443 결과 예시: 텔레그램:...

CVE-2026-11961

CVE-2026-11961 WordPress プラグイン User Registration & Membership に影響する CVE-2026-11961 の大量活用ツール。 特徴 プラグインのバージョン検出 単一ターゲットのサポート バッチターゲット処理 マルチスレッドサポート ランダムまたはカスタム認証情報 HTTP/HTTPS プロキシサポート リクエストタイムアウト設定 JSONL 出力 ログファイルサポート Telegram 通知 フォースモード --force 使用方法 ヘルプを表示 python3 mass.py -h 単一ターゲット python3 mass.p...

DNS-Mayhem-CVE-2026-41096-Deep-Dive

DNS-Mayhem-CVE-2026-41096-Deep-Dive CVE-2026-41096에 대한 심층 기술 분석: Windows DNSAPI.dll의 치명적인 힙 오버플로로, 조작된 DNS 응답을 통해 원격 코드 실행이 가능합니다. 공격 벡터, 패치 인사이트 및 보안 팀을 위한 방어 지침을 포함합니다. 개요 CVE-2026-41096은 DNSAPI.dll의 힙 기반 버퍼 오버플로입니다. DNSAPI.dll은 시스템이 수신하는 모든 DNS 응답을 구문 분석하는 Windows 구성 요소입니다. DNS 조회는 백그라운드에서 지속적...

CVE-2026-24061-POC

CVE-2026-24061 - telnetd 認証バイパス PoC telnetd の重大な認証バイパスにより、root としての RCE（リモートコード実行）につながる 2015年以降の、この脆弱性を含む telnetd バージョンを搭載したシステムに影響します 概要 この PoC は、11年間検出されずに telnetd に存在してきた重大な認証バイパス脆弱性 CVE-2026-24061 を実証します。この脆弱性は、telnetd のログインプロセスにおける USER 環境変数の不適切な処理に起因します。この脆弱性を導入した悪名高いコミットは こちら で確認できます。 要件...

CVE-2021-40223

CVE-2021-40223 애플리케이션 : Rittal CMC PU III 웹 관리 장치 : CMC PU III 7030.000 소프트웨어 개정판 : V3.11.002 하드웨어 개정판 : V3.00 공격 유형 : 저장형 XSS 해결 방법 : 소프트웨어 개정판 V3.17.10 이상으로 업데이트 요약 : 웹 애플리케이션이 보안 사용자 구성 대화상자 및 작업 탭에서 사용자 입력을 삭제sanitize하지 못합니다. 이로 인해 공격자는 웹 애플리케이션에 HTML 또는 브라우저 해석 콘텐츠를 주입할 수 있습니다. 이 경우 사용자 구성의...

CVE-2026-77226

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...

EUVD-2026-92791

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...

CVE-2026-105698

Langflow (versions 1.0.0 through 1.10.0) is vulnerable to cross-user flow access and unauthorized vertex execution due to a missing ownership check in deprecated handlers. Specifically, the POST /api/v1/build/{flow_id}/vertices and POST /api/v1/build/{flow_id}/vertices/{vertex_id} endpoints faile...

CVE-2026-105698 Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/build/flowid/vertices and POST /api/v1/build/flowid/vertices/vertexid handlers. Through version 1.7.1, an unauthenticated...

CVE-2026-105698 Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/build/flowid/vertices and POST /api/v1/build/flowid/vertices/vertexid handlers. Through version 1.7.1, an unauthenticated...

CVE-2026-105698 Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/build/flowid/vertices and POST /api/v1/build/flowid/vertices/vertexid handlers. Through version 1.7.1, an unauthenticated...

CVE-2026-105652

Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the relative ordering of other staff users' hashed passwords. This does not directly disclose password hashes, and does not provide a practical path to recovering a password. This iss...

CVE-2026-105651

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...