400 matches found
SpotifyC2
SpotifyC2 — 클라우드 기반 명령 채널 연구 Spotify 재생목록을 통해 명령을 실행하고 Telegram을 통해 명령 출력을 수신합니다. SpotifyC2란? SpotifyC2 는 공개적으로 접근 가능한 클라우드 서비스가 컨트롤러와 클라이언트 간의 통신 채널로 사용될 수 있는 방법을 보여주는 Windows 기반 사이버보안 연구 프로젝트입니다. 전통적인 서버와 통신하는 대신, 클라이언트는 Spotify 재생목록 을 주기적으로 폴링하여 재생목록 제목을 명령으로 해석합니다. 명령을 로컬에서 실행한 후, 결과 출력은 설정된...
[SECURITY] Fedora 45 Update: vhostmd-1.2-3.fc45
vhostmd provides a "metrics communication channel" between a host and its hosted virtual machines, allowing limited introspection of host resource usage from within virtual machines...
CVE-2026-102727: Improper Restriction of Communication Channel to Intended Endpoints
FTP Passive Data Connection Not Bound to the Authenticated Control Peer...
CVE-2026-90461: Improper Restriction of Communication Channel to Intended Endpoints
OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTPS Basic Authentication...
CVE-2026-59564
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal...
CVE-2026-72506
VoiceTra provided by National Institute of Information and Communications Technology NICT contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server or service controlled by an attacker, potentially resulting in the theft of input dat...
VoiceTra vulnerable to incorrectly specified destination in a communication channel
Overview VoiceTra provided by National Institute of Information and Communications Technology NICT contains the following vulnerability. Incorrectly specified destination in a communication channel CWE-941 - CVE-2026-72506 RyotaK of GMO Flatt Security Inc. reported this vulnerability to NICT and...
CVE-2026-72506
VoiceTra provided by National Institute of Information and Communications Technology NICT contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server or service controlled by an attacker, potentially resulting in the theft of input dat...
CVE-2026-72506
CVE-2026-72506 affects VoiceTra by the National Institute of Information and Communications Technology (NICT). The issue is an incorrectly specified destination in a communication channel, which may redirect users to a server or service controlled by an attacker. Consequences described include po...
CVE-2026-72506
VoiceTra provided by National Institute of Information and Communications Technology NICT contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server or service controlled by an attacker, potentially resulting in the theft of input dat...
CVE-2026-62836: Improper Restriction of Communication Channel to Intended Endpoints
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
Siemens Interniche IP-Stack Improper Verification of Source of a Communication Channel (CVE-2025-40820)
Multiple Industrial products are affected by a vulnerability in the Interniche IP-Stack. The affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere...
CVE-2023-49899
An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel...
EUVD-2023-60601
An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel...
EUVD-2026-43713
A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via...
CVE-2026-59841: Improper Restriction of Communication Channel to Intended Endpoints
A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via...
CVE-2026-57028
CVE-2026-57028 affects Juniper Networks Junos OS Evolved. An incorrectly initialized process meant to communicate only internally can be reached over the network via an open port, enabling an unauthenticated, network-based attacker to gain unauthorized access to license management. Affected scope...
CVE-2026-33803 Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...
CVE-2026-33803: Improper Restriction of Communication Channel to Intended Endpoints
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...