EUVD-2026-92780

Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...

CVE-2026-105767

The integrate-platform-docs composite GitHub Action in Chainguard Academy (edu) is vulnerable to OS Command Injection (CWE-78). The issue arises because the project_id or storage_bucket inputs are interpolated directly into Bash gcloud storage cp commands using ${{ inputs.* }} expressions between...

flare-learning-hub

FLARE 학습 허브 FLARE 학습 허브는 FLARE 팀의 고품질 리버스 엔지니어링 및 악성코드 분석 교육 콘텐츠를 무료로 배포합니다. FLARE 학습 허브 모듈은 웹에 게시된 Google Docs로 호스팅되며, 각 설명에 링크가 제공됩니다. 이 저장소에는 각 모듈에 대한 실습 및 데모 바이너리, 디스어셈블러 데이터베이스, 스크립트를 포함한 모든 관련 아티팩트가 포함되어 있습니다. 기존 모듈의 개선 및 새 모듈이 지속적으로 게시될 예정입니다. 사용 가능한 모듈 악성코드 분석 집중 과정 Go 리버스 엔지니어링 참고서 Time...

sylvia

iOS AArch64 시스템 콜 분석기 AArch64 바이너리에서 SVC 명령어를 스캔하고, X16 레지스터에서 BSD 시스템 콜 번호를 해석하며, 시스템 콜별 발생 위치 탐색과 실시간 man-page 문서 가져오기 기능을 갖춘 풍부한 도킹 가능 UI로 모든 결과를 표시하는 IDA Pro 스크립트입니다. IDA Pro 9.x에서 iOS / macOS 리버스 엔지니어링을 위해 제작되었습니다. 이 스크립트를 만든 유일한 이유는 iOS 플랫폼을 리버스 엔지니어링할 때 시스템 콜 수준까지 내려가는 안티-탬퍼Anti-Tamper 대책을...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

CVE-2018-17552

CVE-2018-17552 여기에서 문서 보기 https://docs.google.com/document/d/1Enu58910099gFJ24AGkOtnJoQgtAibm2/edit?usp=sharing&ouid=116617095858459545855&rtpof=true&sd=true...

kismet-docs

사용 중단됨 이 저장소는 이제 kismet-web-docs 저장소로 통합되었으며, 향후 모든 변경 사항은 해당 저장소로 이동해야 합니다. 새 사이트 엔진은 Hugo를 사용하며, 문서의 여러 부분이 템플릿이 포함된 YAML 데이터로 변환되었습니다...

CVE-2018-6643

CVE-2018-6643 CVE-2018-6643 Infoblox NetMRI 7.1.1 hxxp::/xxx.abc/api/docs/index.php?query=555"...

CVE-2026-33331

CVE-2026-33331 — oRPC OpenAPI 참조 플러그인의 저장형 XSS orpc의 OpenAPI 문서 생성에서 발생하는 저장형 XSS에 대한 개념 증명 실습 환경 목적 oRPC는 OpenAPI 스펙을 기반으로 API 문서 페이지를 생성합니다. v1.13.9 이전 버전에서는 HTML 인코딩 없이 JSON.stringify를 사용하여 스펙을 태그에 직접 넣었습니다. 공격자가 제어할 수 있는 info.description과 같은 필드는 해당 태그를 조기에 닫고 스크립트를 실행할 수 있었습니다. 이 저장소는 버그를 재현할...

Rocky Linux 8.8 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ciqsa-2026_0333)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260333 advisory. This advisory aggregates security fixes for the tomcat SRPM in CIQ LTS 8.8. It addresses 3 CVEs: CVE-2025-24813, CVE-2024-24549, CVE-2024-23672. Tenable...

Rocky Linux 9.4 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ciqsa-2026_0583)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260583 advisory. This advisory aggregates security fixes for the tomcat SRPM in CIQ LTS 9.4. It addresses 2 CVEs: CVE-2025-24813, CVE-2024-50379. Tenable has extracted th...

AlmaLinux 9.2 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc (ALMALINUX9.2:CLSA-2025:1759784438)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1759784438 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

AlmaLinux 9.2 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1758293394)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1758293394 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Rocky Linux 8.6 [CIQ] Security Update: varnish / varnish-devel / varnish-docs (ciqsa-2026_0273)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260273 advisory. This advisory aggregates security fixes for the varnish SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-44487. Tenable has extracted the preceding description...

Rocky Linux 9.6 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1773330257)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1773330257 advisory. - Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2025:1765379145)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765379145 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.6 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ciqsa-2026_1564)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261564 advisory. This advisory aggregates security fixes for the postgresql SRPM in CIQ LTS 9.6. It addresses 39 CVEs: CVE-2026-14673, CVE-2026-6477, CVE-2026-14664,...

Rocky Linux 9.6 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc (ALMALINUX9.6:CLSA-2026:1774017701)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774017701 advisory. - Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2026:1789647110)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789647110 advisory. - Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. CVE-2026-42504 Note that Nessus...

Rocky Linux 9.6 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ciqsa-2026_1555)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261555 advisory. This advisory aggregates security fixes for the postgresql SRPM in CIQ LTS 9.6. It addresses 26 CVEs: CVE-2026-6477, CVE-2026-14664, CVE-2025-12817,...