azbelt

azbelt Azure 관련 자격 증명을 열거하기 위한 독립형 DLL 및 sliver 확장주로 AAD 가입 머신에서 모듈 aadjoin - NetGetAadJoinInformation을 통해 머신의 AAD 상태 정보를 가져옵니다. credman - 자격 증명 관리자에서 자격 증명을 가져옵니다. env - 비밀을 포함할 수 있는 Azure/AAD 관련 환경 변수를 찾습니다. managed - 관리 ID가 있는 머신 정보를 얻기 위해 IMDS 엔드포인트를 호출합니다. msal - 다양한 MSAL 캐시에서 토큰을 찾습니다...

cve-2026-31431

CVE-2026-31431 — Linux 커널 algifaead "Copy Fail": 분석 CVE-2026-31431CVSS 3.1 7.8 HIGH , AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H에 대한 보안 연구: AFALG AEAD 인터페이스 체인의 세 가지 조합 가능한 설계 결함이 결정적이고 경쟁 조건이 없는 4바이트 페이지 캐시 쓰기읽기 가능한 모든 파일의 임의 오프셋로 이어집니다 — 디스크 복사본은 깨끗하게 유지되므로 온디스크 체크섬은 아무것도 감지하지 못합니다. 공개 익스플로잇"Copy Fail...

retbleed-speculative-execution-poc

Retbleed: RSB 언더플로우를 통한 임의 추측 실행 코드 실행 Retbleed CVE-2022-29900 / CVE-2022-29901 의 실습 재현 — 오랫동안 안전하다고 여겨졌던 ret 명령어가 CPU의 Return Stack Buffer RSB 언더플로우 시 하이재킹될 수 있음을 증명하여 "Retpoline" 방어를 무력화한 2022년 마이크로아키텍처 공격. 이 프로젝트는 gem5 의 x86 Out-of-Order CPU 모델에서 전체 공격 생명주기를 시뮬레이션한다: RSB 언더플로우를 트리거하고,...

WP2Shell

WP2Shell - WordPress 사전 인증 RCE 익스플로잇 CVE-2026-63030 + CVE-2026-60137 버전: 4.0.0 작성자: G0D150NE 📌 개요 WP2Shell은 WordPress 사전 인증 원격 코드 실행을 위한 전체 체인 익스플로잇 도구입니다. 두 가지 치명적인 취약점을 결합합니다: CVE-2026-63030 - REST API 일괄batch 엔드포인트의 SQL 인젝션 CVE-2026-60137 - oEmbed 캐시 중독을 통한 인증 우회 이 도구는 취약한 WordPress 설치를 어떠한 인증...

CVE-2026-94544

A flaw was found in Next.js. Pending cache operations do not properly separate Draft Mode requests from standard requests when fulfilling matching cache keys. Under concurrent request conditions, an unauthenticated user can receive unpublished draft content generated during an editor's session. I...

CVE-2026-94543

A flaw was found in Next.js. In self-hosted applications using the Pages Router with static generation or Incremental Static Regeneration ISR, response cache entries are not sufficiently bound to their source route. A remote attacker can exploit this issue by sending crafted requests to replace a...

CVE-2026-94484

A flaw was found in Next.js. Applications configured with root-level catch-all pages and static routes share a response cache key that does not properly distinguish between different routes. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request t...

CVE_2026_31694

CVE-2026-31694 Passive Scanner Linux 호스트를 수동 평가하는 도구로, Linux 커널의 FUSE readdir-cache out-of-bounds write 취약점인 CVE-2026-31694 를 대상으로 합니다. 이 스캐너는 실행 중인 커널, FUSE 노출 범위, 로컬 패키지 메타데이터, 커널 소스 증거, 실행 환경, 운영체제 계열을 평가합니다. 호스트가 영향을 받을 수 있는 경우, 감지된 배포판에 맞춰 완화 가이드를 생성합니다. 저자: Aung Myat Thu w01f 목차 개요 취약점 요약 보...

CVE-2026-94544

Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills for the same key are shared without separating Draft Mode requests from regular requests. An overlapping regular request can receive unauthenticated unpublished content from an...

CVE-2026-94543

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry without sufficiently binding it to the...

CVE-2026-94484

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response cache key that is insufficiently scoped to the...

CVE-2026-94484 Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response cache key that is insufficiently scoped to the...

CVE-2026-94484 Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response cache key that is insufficiently scoped to the...

CVE-2026-94484

The Next.js React framework is vulnerable to cache poisoning in versions 15.0.0 through 15.5.27 and 16.3.8 . The root cause is an insufficiently scoped shared response cache key used by applications with a root-level catch-all page and statically generated or Incremental Static Regeneration (ISR)...

CVE-2026-94484 Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response cache key that is insufficiently scoped to the...

CVE-2026-94543 Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry without sufficiently binding it to the...

CVE-2026-94543

The Next.js framework (versions 15.0.0 through 15.5.27 and 16.3.8 ) is vulnerable to cache poisoning in self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration (ISR) pages. The root cause is that response cache entries are not sufficiently boun...

CVE-2026-94543 Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry without sufficiently binding it to the...

CVE-2026-94543 Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry without sufficiently binding it to the...

CVE-2026-94544 Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages

Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills for the same key are shared without separating Draft Mode requests from regular requests. An overlapping regular request can receive unauthenticated unpublished content from an...