fisy-fuzz

FIle SYstem - FUZZer 이것은 제가 4월에 열린 Hack in the Box 2020 Lockdown Edition 컨퍼런스에서 발표한 전체 파일 시스템 퍼징 프레임워크입니다. 컨퍼런스 발표 컨퍼런스 발표 단일 영상 컨퍼런스 자료 목표 이 프레임워크의 목표는 BSD 시스템에 중점을 두고 UNIX 시스템에서 커널 보안 버그를 발견하는 것입니다. FreeBSD, OpenBSD, NetBSD를 대상으로 개발 및 집중 테스트가 이루어졌으며, Linux 호스트에 대한 일부 기본 지원도 포함되어 있습니다. UFS 및 EXT...

cirro-azcli-ext

cirro-azcli-ext Azure 리소스 데이터를 Cirrohttps://github.com/bishopfox/cirro 스키마와 호환되는 SQLite 데이터베이스에 수동적으로 수집하는 Azure CLI 확장입니다. 또한 모든 CLI 호출을 JSON-lines 파일에 기록합니다. knack 이벤트에 후크합니다: EVENTINVOKERPOSTPARSEARGS — 명령 인자를 기록합니다 EVENTINVOKERFILTERRESULT — 리소스 데이터를 SQLite에 기록합니다 설정 1. 확장 프로그램 설치 az extensio...

CVE-2024-2961

CVE-2024-2961 CVE-2024–2961 보안 문제 완화 스크립트 설명 이 저장소에는 GNU libcglibc 2.39 및 이전 버전에서 확인된 버퍼 오버플로 취약점CVE-2024-2961을 확인하고 완화하는 Bash 스크립트가 포함되어 있습니다. 이 취약점은 iconv 함수를 사용하여 요청 인코딩과 특정 중국어 확장 인코딩ISO-2022-CN-EXT 간을 변환할 때 PHP에 영향을 미칩니다. 악용될 경우 잠재적으로 광범위한 영향을 초래할 수 있습니다. 사용법 사전 요구사항 시스템 구성 파일을 수정하는 데 필요한 권한...

CVE-2026-6951

CVE-2026-6951 simple-git リモートコード実行 ★ CVE-2026-6951 simple-git --config オプションフィルターバイパス RCE PoC ★ https://github.com/user-attachments/assets/4c992530-c5bb-4ff4-be5d-af0857eebb67 概要 CVE-2026-6951 は、CVE-2022-25912 に対する不完全な修正に起因する simple-git のリモートコード実行脆弱性です。-c オプションはブロックされていましたが、同等の --config...

PT-2026-106548

In the Linux kernel, the following vulnerability has been resolved: sched ext: Close the pre-enable ops error claim window scx alloc and add sched publishes ops-priv before scx root enable workfn switches the state to SCX ENABLING. An error claimed via scx bpf error bstr from an associated BPF...

PT-2026-106518

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RX buffer OOB-write in wilc wlan handle isr ext wilc wlan handle isr ext takes the RX transfer size from the device-reported interrupt status register a 15-bit field shifted left by 2, up to 131068 bytes and...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: a potential memory leak has been fixed in ext4fcrecordregions. Since krealloc may return NULL, in this case, state-fcregions may not be freed by krealloc. However, state-fcregions is already set to NULL. This could lead to ...

SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker

terrapincheck.py CVE-2023-48795 — SSH Terrapin 접두사 잘림prefix truncation 취약점을 위한 경량 Python 스캐너입니다. Terrapin 은 SSH의 프로토콜 수준 취약점으로, 능동적 중간자MitM 공격자가 협상된 확장 정보를 잘라내 연결 보안을 낮출 수 있게 합니다. 가장 치명적인 영향은 ext-info서버 서명 알고리즘에 사용와 pingOpenSSH의 no-auth 확장에 사용을 비활성화하는 것입니다. 📋 목차 취약점 정보 동작 원리 요구 사항 설치 사용법 출력 취약 조건...

e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

CVE-2026-17543 — PHP ext/pgsql における E'...' バックスラッシュ突破によるSQLインジェクション CVE-2026-17543 （CVSS 9.8 Critical、CWE-89）の概念実証コードです。これは、PHP の手続き型 PostgreSQL 拡張機能における SQL インジェクション脆弱性です。 脆弱性の概要 pginsert、pgselect、pgupdate、pgdelete、pgconvert はすべて、文字列値を phppgsqlconvert 経由で処理します。この関数は次の処理を行います： 1. エスケープ ：libpq の...

CVE-2016-5195

记录は学習目的のみとし、不正な用途への使用は禁止する 原理 この脆弱性の原理は、並行してダーティページを書き込むことで、元々読み取り専用権限のファイル内容を変更させることにある もし変更されたファイルがroot所有かつSUID権限を持つ場合、それを利用して権限昇格を行うことができる 影響範囲 2016年10月より前にコンパイルされ、かつバージョンが2.6.22から4.8.3の間のカーネル。2016年10月以降は高い確率でパッチが適用されているため...

BIT-PHP-MIN-2026-91767 Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN

phpopensslmatcheswildcardname in ext/openssl/xpssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP...

BIT-PHP-2026-91767 Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN

phpopensslmatcheswildcardname in ext/openssl/xpssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP...

BIT-LIBPHP-2026-91767 Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN

phpopensslmatcheswildcardname in ext/openssl/xpssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP...

Rocky Linux 10.2 [CIQ] Security Update: php8.4 / php8.4-bcmath / php8.4-bcmath-debuginfo / php8.4-cli / etc Multiple Vulnerabilities (crlsa-2026_56969)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202656969 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Arbitrary code execution via out-of-bounds write in bccomp...

Rocky Linux 9 [CIQ] Security Update: php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2026_61259)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202661259 advisory. php: ext/openssl: memory corruption in opensslencrypt with AES-WRAP-PAD CVE-2026-14355 php: ext-pgsql: PHP: SQL injection via improper backslash escaping...

PT-2026-105116

php openssl matches wildcard name in ext/openssl/xp ssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes th...

PT-2026-105136

php openssl matches wildcard name in ext/openssl/xp ssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes th...

PT-2026-105146

php openssl matches wildcard name in ext/openssl/xp ssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes th...

Rocky Linux 10.2 [CIQ] Security Update: php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2026_62614)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202662614 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar...

Rocky Linux 9 [CIQ] Security Update: apcu-panel / php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2026_61903)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202661903 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archives...