400 matches found
SpotifyC2
SpotifyC2 — 基于云的指令通道研究 通过 Spotify 播放列表执行命令，并通过 Telegram 接收命令输出。 什么是 SpotifyC2？ SpotifyC2 是一个基于 Windows 的网络安全研究项目，演示了如何利用公开可用的云服务作为控制器与客户端之间的通信通道。 客户端不与传统服务器通信，而是定期轮询 Spotify 播放列表 ，并将播放列表标题解释为命令。命令在本地执行后，生成的输出将发送到配置好的 Telegram Bot 。 该项目探索了使用合法 Web 服务构建云辅助指令通道的概念，用于教育性和防御性安全研究。...
[SECURITY] Fedora 45 Update: vhostmd-1.2-3.fc45
vhostmd provides a "metrics communication channel" between a host and its hosted virtual machines, allowing limited introspection of host resource usage from within virtual machines...
CVE-2026-102727: Improper Restriction of Communication Channel to Intended Endpoints
FTP Passive Data Connection Not Bound to the Authenticated Control Peer...
CVE-2026-90461: Improper Restriction of Communication Channel to Intended Endpoints
OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTPS Basic Authentication...
CVE-2026-59564
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal...
CVE-2026-72506
VoiceTra provided by National Institute of Information and Communications Technology NICT contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server or service controlled by an attacker, potentially resulting in the theft of input dat...
VoiceTra vulnerable to incorrectly specified destination in a communication channel
Overview VoiceTra provided by National Institute of Information and Communications Technology NICT contains the following vulnerability. Incorrectly specified destination in a communication channel CWE-941 - CVE-2026-72506 RyotaK of GMO Flatt Security Inc. reported this vulnerability to NICT and...
CVE-2026-72506
VoiceTra provided by National Institute of Information and Communications Technology NICT contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server or service controlled by an attacker, potentially resulting in the theft of input dat...
CVE-2026-72506
VoiceTra provided by National Institute of Information and Communications Technology NICT contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server or service controlled by an attacker, potentially resulting in the theft of input dat...
CVE-2026-72506
CVE-2026-72506 affects VoiceTra by the National Institute of Information and Communications Technology (NICT). The issue is an incorrectly specified destination in a communication channel, which may redirect users to a server or service controlled by an attacker. Consequences described include po...
CVE-2026-62836: Improper Restriction of Communication Channel to Intended Endpoints
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
Siemens Interniche IP-Stack Improper Verification of Source of a Communication Channel (CVE-2025-40820)
Multiple Industrial products are affected by a vulnerability in the Interniche IP-Stack. The affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere...
CVE-2023-49899
An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel...
EUVD-2023-60601
An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel...
EUVD-2026-43713
A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via...
CVE-2026-59841: Improper Restriction of Communication Channel to Intended Endpoints
A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via...
CVE-2026-57028
CVE-2026-57028 affects Juniper Networks Junos OS Evolved. An incorrectly initialized process meant to communicate only internally can be reached over the network via an open port, enabling an unauthenticated, network-based attacker to gain unauthorized access to license management. Affected scope...
CVE-2026-33803 Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...
CVE-2026-33803: Improper Restriction of Communication Channel to Intended Endpoints
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...