home_SOC_suite

홈 SOC 제품군 — Night's Watch 응용 프로그램 개발Anwendungsentwicklung 재교육 과정 중에 처음부터 구축한 개인용 보안 운영 센터SOC입니다. 이 제품군은 Windows 엔드포인트에서 네트워크 이상, 리소스 급증, 프로세스 실행, 레지스트리 변경, 보안 이벤트 로그 활동, 예약된 작업 변경, DNS 쿼리 및 전원 이벤트를 모니터링하며, 모든 것을 구조화된 파일에 기록하여 Python 엔진을 통해 주간 분석 및 상관 분석을 수행합니다. 단일 페이지 Flask 대시보드. 12개 수집기 + 상관 분석 ...

fracture

Fracture FragAttacks WiFi 침투 프레임워크 CVE-2020-24586 / CVE-2020-24587 / CVE-2020-24588 Fracture는 802.11 프레임 주입을 통해 세 가지 새로운 공격 체인을 자동화합니다. WPA2/WPA3의 A-MSDU 집계 취약점을 악용하여 비밀번호를 모르는 상태에서 암호화된 네트워크에 임의의 평문 프레임을 주입합니다. 승인된 침투 테스트 전용입니다. 소유한 네트워크 또는 명시적인 서면 허가를 받은 네트워크에서만 사용하십시오. 작동 원리 802.11 QoS Control...

CVE-2026-25747

LevelDB 逆シリアライゼーション脆弱性再現ツール このプロジェクトは、Apache Camel の LevelDB 集約リポジトリにおける Java 逆シリアライゼーション脆弱性 を実証するものです。これは CVE-2024-23114 （Cassandra 集約リポジトリに影響を与えた脆弱性）と類似しています。 脆弱性の概要 プロパティ| 値 ---|--- コンポーネント| camel-leveldb 影響を受けるクラス| DefaultLevelDBSerializer.java 脆弱なメソッド| deserializeKey、deserializeExchange CWE|...

CVE-2026-97570

A flaw was found in the Broadcom NetXtreme-E bnxten driver in the Linux kernel. Due to improper bounds checking when mapping firmware Transparent Packet Aggregation TPA identifiers, software aggregation IDs can exceed the allocated memory for receive structures. During packet reception, this issu...

Elasticsearch 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-170)

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.20 9.x: All version...

CVE-2026-96744 Unauthorized cache lock takeover via expression injection in lock owner values in MongoDB integration for Laravel

Improper neutralization of special elements in data query logic in the cache lock implementation of the MongoDB integration for Laravel can cause a caller-supplied lock owner value to be evaluated as an aggregation expression rather than as a literal value. An authenticated user who can influence...

CVE-2026-96744

The MongoDB integration for Laravel contains a vulnerability in its cache lock implementation due to improper neutralization of special elements in data query logic. This allows a caller-supplied lock owner value to be evaluated as an aggregation expression instead of a literal value. An authenti...

EUVD-2026-86258

Improper neutralization of special elements in data query logic in the cache lock implementation of the MongoDB integration for Laravel can cause a caller-supplied lock owner value to be evaluated as an aggregation expression rather than as a literal value. An authenticated user who can influence...

PT-2026-98037

Name of the Vulnerable Software and Affected Versions MongoDB integration for Laravel affected versions not specified Description Improper neutralization of special elements in the data query logic within the cache lock implementation allows a caller-supplied lock owner value to be evaluated as a...

BIT-MONGODB-2026-82074 Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Data

MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server's authorization subsystem to evaluate a different operation than what is actually...

BIT-MONGODB-2026-82073 Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...

BIT-MONGODB-2026-82059 Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...

BIT-MONGODB-2026-18707 Improper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service...

BIT-MONGODB-2026-18704 Improper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform Unauthorized Write Operations

An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an...

BIT-MONGODB-2026-18697 Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: lib: objagg: Fixed general protection fault The library supports the aggregation of objects into other objects only if the parent object does not have a parent itself. In other words, nesting is not supported. Aggregation occurs ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid OGM aggregation when skbtailroom is insufficient. When the OGM aggregation state is toggled at runtime, an existing forwarded packet may have been allocated only with packetlen bytes, while a later packet can...

Astra Linux – Vulnerability in Python-Django

A issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. The QuerySet.annotate, aggregate, and extra methods are vulnerable to SQL injection when column aliases are used, through a crafted dictionary with dictionary expansion as part of the kwargs parameters...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fixed the receive ring space parameters when XDP is active. The MTU setting at the time a XDP multi-buffer is attached determines whether the aggregation ring will be used and the rxskbfunc handler. This is done in...

CVE-2026-80943

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids rtl92dutxfilldesc uses ieee80211gettid to read the QoS TID from the 802.11 header and then uses it as an index into staentry-tids. ieee80211gettid returns the low 4-bit...