NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule PoC 유도 과정과 고찰 적용 범위: 로컬 실습 환경, 승인된 재현 환경, 취약점 검증 및 보호 규칙 분석에만 사용합니다. 승인되지 않은 대상에는 사용하지 마십시오. 본 문서의 PoC 아이디어는 원격에서 관찰 가능한 NGINX worker crash 동작만 검증하며, RCE, ASLR 우회 또는 안정적인 익스플로잇 체인을 포함하지 않습니다. 1. 취약점 배경 CVE-2026-9256은 NGINX ngxhttprewritemodule의 힙 버퍼 오버플로우...

CVE-2026-104417

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...

sysmon-modular

sysmon-modular | A Sysmon configuration repository for everybody to customise Sysmon Modular is a configuration repository for Microsoft Sysinternals Sysmon. Small XML modules make it easier to select, review and maintain the telemetry that is useful to your organisation. The sysmon-modular Go to...

sysmon-modular

sysmon-modular | A Sysmon configuration repository for everybody to customise Sysmon Modular is a configuration repository for Microsoft Sysinternals Sysmon. Small XML modules make it easier to select, review and maintain the telemetry that is useful to your organisation. The sysmon-modular Go to...

HardeningKitty

HardeningKitty これは、Michael Schneider による Windows Hardening Project の HardeningKitty の安定版です。 HardeningKitty の安定版は、 scip AG のコード署名証明書で署名されています。安定版であるため、このリポジトリではプルリクエストを受け付けていません。開発リポジトリ に送信してください。 HardeningKitty は Windows システムの堅牢化をサポートします。システムの構成は、検出リスト（finding...

CVE-2026-104467 YesWiki before 4.6.7 Authorization Bypass via Public API Mode

YesWiki before 4.6.7 contains an authorization bypass vulnerability in ApiService::isAuthorized that allows unauthenticated attackers to call admin-only API routes when public API mode is enabled. Attackers can send requests to endpoints like api/ci/updateconfig and api/archives to overwrite...

CVE-2026-104417

The Ghost platform (versions 1.20.0 before 6.64.0 ) is vulnerable to a path traversal flaw in the theme translation file loading mechanism. This issue allows authenticated administrators to manipulate the locale setting to load JSON files from locations outside the active theme directory. Success...

EUVD-2026-91428

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...

CVE-2026-97876

A flaw was found in GRUB2. The bootloader insufficiently validates memory addresses passed to the serial configuration command, allowing arbitrary system memory to be targeted instead of a legitimate serial communication device. A local attacker with control over GRUB's boot configuration can...

conductai

Conduct AIエージェントのためのガバナンス。60秒で導入。 エンジニアリングチームのために構築。10分でインストール。初日からCISO向けのエビデンスを提供。 60秒トライアル（インストール不要） curl -fsSL conductai.ai/install | sh...

EnableWindowsLogSettings

大和セキュリティによる、DFIRと脅威ハンティングのためのWindowsイベントログ設定のガイド English | 日本語 Windowsのイベントログの設定と監視に関するガイドで、Sigmaルールが何かを検出するために、また正しいDFIR調査のために適切なログを有効にすることに重点を置いています。 TLDR Windowsのデフォルトの監査設定ではsigmaルールの1020%程度しか利用できません。 Windowsのログが有効になっていても、デフォルトではログの最大サイズがたった1〜20MBなので、すぐに証拠が上書きされてしまう可能性が高いです。...

MAL-011

MAL-011: Red Hat AMQ における Log4J の設定ミスにより悪意のある JavaScript の実行が可能 Redhat A-MQ アプリケーションの Log4J コンポーネントは、Log4J 設定内の任意の “Script” 属性の実行を許可するように誤って設定されています。攻撃者が A-MQ で使用される Log4J 設定（例:“setConfigText” を介して）を変更する方法を見つけた場合、悪意のある JavaScript スクリプトを挿入することで、リモートコード実行（RCE）が発生します。 注: Red Hat AMQ のバージョン 7.10.2...

CVE-2026-21008-Kubernetes-Service-Account-Token-Mounted-in-HostPath

CVE-2026-21008 – hostPath にマウントされた Kubernetes Service Account トークン プログラムコード（YAML + Python エクスプロイト） vulnerable-pod.yaml - Pod that mounts /var/run/secrets/kubernetes.io/serviceaccount into a hostPath apiVersion: v1 kind: Pod metadata: name: sa-token-leak spec: containers: - name: app image: nginx...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

findom-xss

FinDOM-XSS FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner. Installation $ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules Dependencies: LinkFinder Usage To run the tool on a target, just use the...

ssh_scan

sshscan SSH 설정 및 정책 스캐너 ⚠️ 지원 중단 공지 ⚠️ Mozilla는 더 이상 SSH Scan 프로젝트를 유지보수하지 않습니다. 계속 개발하려면 포크하세요. 주요 장점 최소 의존성 - 네이티브 Ruby와 BinData를 사용하여 작업을 수행하며, 무거운 의존성이 없습니다. 단순한 스크립트가 아님 - 구현이 이식 가능하여 다른 프로젝트나 작업 자동화에 사용할 수 있습니다. 간단함 - SSH 서비스를 sshscan에 지정하기만 하면 지원되는 항목과 정책 상태에 대한 JSON 보고서를 얻을 수 있습니다. 구성 가능...

ssh_scan

sshscan A SSH configuration and policy scanner ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the SSH Scan project. Please fork it to continue development. Key Benefits Minimal Dependencies - Uses native Ruby and BinData to do its work, no heavy dependencies. Not Just a Script -...

shadowd

Logo Shadow Daemon is a web application firewall that intercepts requests at the application level. This repository contains the main component of Shadow Daemon that handles the analysis and storage of requests. Documentation For the full documentation please refer to shadowd.zecure.org...

Scout2

AWS Scout2 .. image:: https://travis-ci.org/nccgroup/Scout2.svg?branch=master :target: https://travis-ci.org/nccgroup/Scout2 .. image:: https://coveralls.io/repos/github/nccgroup/Scout2/badge.svg?branch=master :target: https://coveralls.io/github/nccgroup/Scout2 .. image::...

volatility

This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...