My-Presentation-Slides

내 프레젠테이션 슬라이드 Orange Tsai의 공개 발표 슬라이드입니다. 다음 곳에서 저를 찾을 수 있습니다: 블로그: https://blog.orange.tw/ 메일: [email protected] 트위터: @orange8361 2024 WorstFit: Windows ANSI에 숨겨진 변환기 공개! Black Hat Europe DEVCORE CONF 2025 Confusion Attacks: Apache HTTP Server에 숨겨진 의미론적 모호성 악용! Black Hat USA 추가 자료: 블로그 -...

wolfssl

wolfSSL 임베디드 SSL/TLS 라이브러리 wolfSSL 임베디드 SSL 라이브러리이전 명칭 CyaSSL는 ANSI C로 작성된 경량 SSL/TLS 라이브러리로, 주로 임베디드, RTOS 및 리소스가 제한된 환경을 대상으로 합니다. 이는 작은 크기, 속도 및 기능 세트 때문입니다. 또한 로열티 없는 가격 정책과 뛰어난 크로스 플랫폼 지원 덕분에 표준 운영 환경에서도 흔히 사용됩니다. wolfSSL은 현재 TLS 1.3 및 DTLS 1.3에 이르는 업계 표준을 지원하며, OpenSSL보다 최대 20배 작고, ChaCha20...

CVE-2021-45067

CVE-2021-45067 이 버그는 ANSI 문자열을 Unicode로 처리하여 발생하는 Out of Bounds Read로, 샌드박스 처리된 Adobe Reader 프로세스에서 민감한 정보를 유출하는 데 악용될 수 있습니다. 블로그 Adobe Reader - XFA - ANSI - Unicode Confusion Information Leak 권고 CVE-2021-45067 데모...

CVE-2019-12735

CVE-2019-12735 このCVEはneovim 0.3.6およびvim 8.1.1365以降で修正されました。 POC vim demo1.txt リモートシェル 1. マルウェアテキストファイルを作成する: gcc makedemo3.c -o makedemo3 ./makedemo3 2. 別のセッションでクライアントを構築する: nc -vlp 9999 3. マルウェアファイルを開く: vim demo3.txt その後、そのセッション内であらゆるLinuxコマンドを実行できます。 参考 GitHub上のPOCデモ Exploit DB netcat ANSI...

PoC-CVE-2020-9715

CVE-2020-9715 EDR 검증 PoC Adobe Acrobat Reader DC의 EScript.api ESObject 캐시에서 발생하는 Use-after-free 취약점입니다. 공인된 레드팀 EDR 테스트 전용입니다. 취약점 Adobe Acrobat Reader DC = 2020.009.20063. EScript 엔진은 데이터 ESObject를 원래 인코딩ANSI 또는 유니코드을 유지하는 키로 캐시합니다. 삭제 시 항상 유니코드 키가 생성되므로 ANSI 이름의 항목은 캐시에서 제거되지 않습니다. GC가 기본 객체를 해...

cve-2024-52005-poc

CVE-2024-52005: GitにおけるANSIエスケープシーケンスインジェクション 概要 このリポジトリには、CVE-2024-52005（Gitの脆弱性で、Git操作中にサイドバンドチャネルを介してANSIエスケープシーケンスの注入を可能にするもの）を実証するProof-of-Concept（PoC）が含まれています。 CVE-2024-52005 は高重大性 （CVSS 7.5）の脆弱性で、Gitバージョン2.48.1未満、2.47.3未満、2.46.5未満、2.45.4未満、2.44.3未満に影響します。 問題...

Wireshark 1.4.x < 1.4.12 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.12 advisory. - The ANSI A dissector could dereference a NULL pointer and crash. It may be possible to make Wireshark...

CVE-2026-48813-POC

Flawfinder-ANSI-Exploit-POC В версии 2.0.19 Flawfinder не выполняется санитизация имён файлов при парсинге потенциально вредоносных имён файлов. Известно, что затронуты терминалы на основе libvte, пример ниже показывает mate-terminal. Эта эксплойт с тех пор был исправлен в версии 2.0.20 по...

Linux Distros Unpatched Vulnerability : CVE-2026-103431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it,...

PYSEC-2026-4105 Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint

Summary The /csp endpoint accepts unauthenticated JSON reports and logs user-controlled values directly to stdout using print without escaping control characters. A remote attacker can include ANSI/VT100 escape sequences in fields such as blocked-uri or document-uri. When the logs are viewed in a...

Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint

SummaryThe /csp endpoint accepts unauthenticated JSON reports and logs user-controlled values directly to stdout using print without escaping control characters.A remote attacker can include ANSI/VT100 escape sequences in fields such as blocked-uri or document-uri. When the logs are viewed in an...

CVE-2026-103431

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of an operator running colmux, via a crafted proce...

CVE-2026-103431 Collectl: collectl: colmux does not sanitize ansi/vt100 terminal escape sequences in data received from remote collectl instances

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of an operator running colmux, via a crafted proce...

EUVD-2026-90576

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of an operator running colmux, via a crafted proce...

CVE-2026-103431

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of an operator running colmux, via a crafted proce...

PT-2026-103733

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of an operator running colmux, via a crafted proce...

PT-2026-105854

Summary The / csp endpoint accepts unauthenticated JSON reports and logs user-controlled values directly to stdout using print without escaping control characters. A remote attacker can include ANSI/VT100 escape sequences in fields such as blocked-uri or document-uri. When the logs are viewed in ...

CentOS Linux 8.5 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc (CENTOS8.5:CLSA-2025:1750352922)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1750352922 advisory. - Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported...

CentOS Linux 7 [TuxCare] Security Update: emacs-git / emacs-git-el / git / git-all / git-bzr / git-cvs / etc (CENTOS7:CLSA-2026:1768310750)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1768310750 advisory. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and fu...

AlmaLinux 9.2 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc (ALMALINUX9.2:CLSA-2025:1761744708)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1761744708 advisory. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations an...