log4shell-exploitation-detection

Log4Shell CVE-2021-44228 の悪用・検知・修復 Log4Shell 脆弱性のライフサイクル全体をシミュレートする実践的な攻撃・防御セキュリティプロジェクト。攻撃者管理 VM からの悪用、Splunk での検知エンジニアリング、検証済みの修復までをカバーします。 このプロジェクトの目的 この分野のポートフォリオプロジェクトのほとんどは SSH ブルートフォースを扱っています。私はより幅広いスキルセットを示すものを望んでいました。実際の影響度の高い CVE...

CLEANSTART-2026-AU10912 SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate

CVE-2026-39835 affects multiple packages. SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. See references for individual vulnerability details...

CVE-2026-33017

CVE-2026-33017の私のシンプルなbash実装です。 詳細な説明については、次のリンクを確認してください: https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx シェルコールバックを受信するには nc -lvnp PORT を使用してください...

PT-2026-106359

Insufficient verification of data authenticity CWE-345 in the external OIDC login callback in Cloud Foundry UAA v4.5.0 to v79.6.0 inclusive allows an authenticated UAA user to bypass the OAuth authorization-code exchange and establish an authenticated external-OIDC browser session, via submitting...

CVE-2026-49176_LPE_POC

CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026. Technical write-up: CVE-2026-49176 Exploit Development: WalletService to SYSTEM. A standard user creates a Wallet ESE database containing a persisted callbac...

CVE-2026-102295

A flaw was found in Quay. A cross-site scripting XSS vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary JavaScript code within a user's browser session. By tricking a logged-in user into visiting a specially crafted link, an attacker can exploit improper inp...

letsdefend-cve2024-3400-case-study

letsdefend-cve2024-3400-case-study CVE-2024-3400 악용 시도에 대한 탐지, 분석 및 대응 전략 Palo Alto PAN-OS GlobalProtect 포털 대상. IOC, 악용 패턴 및 완화 지침 포함. CVE-2024-3400 침해 사고 조사 🔍 개요 이 저장소는 Palo Alto Networks PAN-OS 소프트웨어의 GlobalProtect 포털을 표적으로 하는 중요한 인증되지 않은 명령 삽입 취약점인 CVE-2024-3400 에 대한 세부 조사 및 위협 분석을 포함합니다. 2024...

EUVD-2026-92518

A flaw was found in Quay. A cross-site scripting XSS vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary JavaScript code within a user's browser session. By tricking a logged-in user into visiting a specially crafted link, an attacker can exploit improper inp...

CVE-2026-102295 Quay: quay: dom-based cross-site scripting via oauth local callback format=json parameter

A flaw was found in Quay. A cross-site scripting XSS vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary JavaScript code within a user's browser session. By tricking a logged-in user into visiting a specially crafted link, an attacker can exploit improper inp...

CVE-2026-102295

A cross-site scripting (XSS) vulnerability exists in Quay within the OAuth callback handler (specifically via the oauth local callback format=json parameter). The root cause is improper input sanitization , which allows a remote attacker to execute arbitrary JavaScript in a user's browser by tric...

CVE-2026-102295 Quay: quay: dom-based cross-site scripting via oauth local callback format=json parameter

A flaw was found in Quay. A cross-site scripting XSS vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary JavaScript code within a user's browser session. By tricking a logged-in user into visiting a specially crafted link, an attacker can exploit improper inp...

CVE-2026-102295

A flaw was found in Quay. A cross-site scripting XSS vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary JavaScript code within a user's browser session. By tricking a logged-in user into visiting a specially crafted link, an attacker can exploit improper inp...

CVE-2023-38146

ThemeBleed CVE-2023-38146 익스플로잇 Windows 11 테마 PoC https://github.com/gabe-k/themebleed 에서 크게 영감을 받았습니다. 이 도구는 Windows에서만 실행되므로 제가 이 PoC를 작성한 이유입니다. impacket smbserver.py https://github.com/fortra/impacket/blob/master/impacket/smbserver.py 의 수정된 코드를 사용했습니다. 유용한 자료:...

CVE-2025-24813

CVE-2025-24813 CVE-2025-24813의 간단한 재현 분석을 수행하고, 간단한 익스플로잇 스크립트를 작성했습니다 usage: CVE-2025-24813.py -h -u URL -d DATA CVE-2025-24813 optional arguments: -h, --help show this help message and exit -u URL, --url URL URL -d DATA, --data DATA base64serialdata 예시 vulhub를 사용하여 취약한 서비스를 시작하고, urldns 체인을 사용하...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/crypto

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/crypto. CVE-2026-56854 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-56854 DESCRIPTION: The source-address critical option in the...

CallStranger

CallStranger 이 스크립트는 CallStranger CVE-2020-12695 취약점을 확인하기 위해 Yunus Çadırcı https://twitter.com/yunuscadirci가 제작했습니다. 공격자는 이 취약점을 다음과 같은 목적으로 사용할 수 있습니다. 데이터 유출을 위한 DLP 우회 증폭 반사 TCP DDoS / SYN Flood의 소스로 수백만 개의 인터넷 노출 UPnP 장치 사용 인터넷 노출 UPnP 장치를 통한 내부 포트 스캔 이 스크립트는 데이터 유출만 시뮬레이션합니다. 자세한 정보는...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt – restore callback for non-parallel fallback pcrypt installs pcryptaeaddone on the child AEAD request before attempting to submit it through padata. If padatadoparallel returns -EBUSY, pcrypt reverts to directly...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath9k: htchst: In the ath9khtcrxmsg function, if there is no callback function, the provided skb is not freed. It is stated that ath9khtcrxmsg either frees the provided skb or passes its management to another callback...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Media: si470x: Fixed a use-after-free in si470xintincallback Syzbot reported a use-after-free in si470xintincallback. This indicates that urb-context, which contains a struct si470xdevice object, is freed when si470xintincallback...

Astra Linux – Vulnerability in curl

There is an information disclosure vulnerability in curl v8.1.0 when performing HTTPS transfers. libcurl may incorrectly use the read callback CURLOPTREADFUNCTION to request data to be sent, even when the CURLOPTPOSTFIELDS option is set. This occurs if the same handle was previously used to issue...