GHSA-2WM5-Q62R-HMRV vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-85062 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-84368 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-84367 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-6W3J-5FW6-R9VR vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-GG4H-3HG2-GRPC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-82FW-GWWQ-J7X9 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-84373 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-90492

A security vulnerability has been detected in webgjc webrobot 2.4.0/2.5.0/2.8.0. The affected element is the function controllerlisten/controllerrecover of the file py/web.py. The manipulation of the argument casename leads to os command injection. It is possible to initiate the attack remotely...

CVE-2026-90492

CVE-2026-90492 is an OS command injection vulnerability in webgjc web_robot versions 2.4.0, 2.5.0, and 2.8.0 . The flaw resides in the controller_listen/controller_recover functions of py/web.py , where unsanitized input in the case_name argument allows remote command execution. The attack can be...

CVE-2026-90492 webgjc web_robot web.py controller_recover os command injection

A security vulnerability has been detected in webgjc webrobot 2.4.0/2.5.0/2.8.0. The affected element is the function controllerlisten/controllerrecover of the file py/web.py. The manipulation of the argument casename leads to os command injection. It is possible to initiate the attack remotely...

EUVD-2026-76934

A security vulnerability has been detected in webgjc webrobot 2.4.0/2.5.0/2.8.0. The affected element is the function controllerlisten/controllerrecover of the file py/web.py. The manipulation of the argument casename leads to os command injection. It is possible to initiate the attack remotely...

eJPT-Prep-Guide

eJPT-Prep-Guide eJPT Junior Penetration Tester preparation a...

PT-2026-90779

A security vulnerability has been detected in webgjc web robot 2.4.0/2.5.0/2.8.0. The affected element is the function controller listen/controller recover of the file py/web.py. The manipulation of the argument case name leads to os command injection. It is possible to initiate the attack...

The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

CyberStar

--- Table of Contents - Overview - Architectu...

caos-os

CAOS — Customer Assurance Operating System 고객이 보내는 보안 설문지에 한 번만 답변하세요. 고객 데이터를 다루는 모든 기업은 똑같은 요청을 반복해서 받습니다. 보안 설문지, 개인정보 평가, 벤더 위험 검토, 조달 실사, 증거 요청이 그것입니다. 대부분의 조직은 이를 수작업으로 처리합니다. 고객이 보낸 스프레드시트, 정책 문서가 담긴 폴더, 이메일 스레드, 그리고 지난번에 무엇을 답변했는지에 대한 누군가의 기억까지 동원해서 말이죠. CAOS는 이를 기록 시스템system of record으로...

CVE-2026-86218-N-central-IOC-Toolkit

CVE-2026-86218 — N-able N-central 사전 인증 RCE | IOC 및 탐지 툴킷 CVSS 10.0 치명적 · 사전 인증 원격 코드 실행 · 정적 코드 주입 CWE-96 · 실제 악용 중 · CISA KEV -yellow 유지관리자: @jithinkrishnanrs · 저장소: github.com/jithinkrishnanrs/CVE-2026-86218-N-central-IOC-Toolkit CVE-2026-86218 — 관리형 서비스 제공업체MSP가 널리 사용하는 온프레미스 및 호스팅 원격 모니터링 및...

SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-

SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400- 소개 CVE‑2024‑3400은 Palo Alto Networks PAN‑OS의 GlobalProtect 기능에서 발견된 치명적인CVSS 10.0 명령어 삽입 취약점으로, 2024년 4월 12일에 최초 공개되었습니다. github.com+10 조사 및 대응 경보를 조사하고 대응하기 위해 다음 단계를 수행했습니다. SOC 티켓 대기열 확인 및 경보 인수 사례 생...