pagecache-lpe-containment-kit

ページキャッシュLPE封じ込めキット 2つのLinuxページキャッシュ破損ローカル特権昇格 — DirtyClone CVE-2026-43503 および pedit COW CVE-2026-46331 — に対する防御の検出、封じ込め、検証をホストおよびコンテナ上で行います。 これは教育的で防御的な...

SOC335-CVE-2024-49138-Investigation

SOC335 – CVE-2024-49138 悪用調査 概要 このプロジェクトは、LetsDefendプラットフォームを使用したCVE-2024-49138悪用アラートのSOC調査を文書化したものです。この調査では、ネットワークログの分析、侵害指標の調査、不審な通信が発生したかどうかの判断、影響を受けたエンドポイントの封じ込めが行われました。 アラートの詳細 アラート: SOC335 – CVE-2024-49138 悪用を検出 重大度: 中 イベントID: 313 カテゴリ: 権限昇格 影響を受けたホスト: Victor 内部IP: 172.16.17.207 不審な外部IP:...

zero-touch-containment

zero-touch-containment Antigena Darktrace → Aruba ClearPass CoA 브리지 — 모델 기반 실시간 사용자/장치 격리. 탐지와 차단 사이에 SOC 클릭이 필요 없습니다. 금융 기관 규모수천 개 엔드포인트, 24/7 SOC에서 운영된 프로덕션 NDR↔NAC 통합 패턴의 정제된 참조 구현입니다. 고객별 정보는 합성 픽스처로 대체되었으며, 아키텍처, 의사 결정 흐름 및 운영 패턴은 실제 그대로입니다. 왜 필요한가 NDRDarktrace, ExtraHop, Vectra의 약속은 몇 초 안에...

Playbooks

目录 TOC IR 手册（Playbooks） 本仓库包含公司安全运营中心（SOC）的所有事件响应手册（Incident Response Playbooks）与工作流。 每个文件夹包含一份手册，按照 NIST - 800.61 r2 拆分为 6 个部分。 1- 准备（Preparation） 此部分应包含以下信息： 所有 资产的清单 服务器 端点（+关键端点） 网络 应用程序 员工 安全产品 基线 沟通计划 哪些安全事件 阈值 如何访问安全工具 如何授予访问权限 创建手册 规划演练 桌面推演（Table Top） 实操演练（Hands On） 2- 检测与分析（Detection an...

CVE-2026-85606

firecrawl-mcp-server version 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool. The root cause is the acceptance of unconstrained filePath arguments without directory containment validation, allowing an attacker to supply absolute paths or directory traversal ...

EUVD-2026-68811

Kirby: Access to image files outside of the site root via path traversal in the media handling...

EUVD-2026-67077

NLTK: Downloader.download follows hardlinks and overwrites outside-root files...

NLTK: Downloader.download follows hardlinks and overwrites outside-root files

Summary NLTK's downloader now blocks symlink escapes during ZIP extraction, but it still treats pre-existing hardlinks inside the install tree as ordinary in-root files. A normal package install can therefore overwrite an outside-root inode through that hardlink. Details - Vulnerability type:...

GHSA-F794-5JV7-7672 NLTK: Downloader.download follows hardlinks and overwrites outside-root files

Summary NLTK's downloader now blocks symlink escapes during ZIP extraction, but it still treats pre-existing hardlinks inside the install tree as ordinary in-root files. A normal package install can therefore overwrite an outside-root inode through that hardlink. Details - Vulnerability type:...

CVE-2026-81727

A flaw was found in NLTK. This vulnerability, a filesystem containment bypass, allows a local attacker with write access to a shared downloader directory to create special links hardlinks that point to files outside the intended installation area. When a package is extracted, these hardlinks can...

CVE-2026-75592

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler used incomplete filesystem containment checks in src/Filesystem/Dir.php and src/Filesystem/F.php through Kirby\Filesystem\Dir::realpath and Kirby\Filesystem\F::realpat...

CVE-2026-75592 Kirby: Access to image files outside of the site root via path traversal in the media handling

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler used incomplete filesystem containment checks in src/Filesystem/Dir.php and src/Filesystem/F.php through Kirby\Filesystem\Dir::realpath and Kirby\Filesystem\F::realpat...

CVE-2026-75592

Kirby (open-source CMS) contained an incomplete filesystem containment flaw in its media handler prior to 4.9.5 and 5.5.2 . The Dir::realpath() and F::realpath() functions accepted a sibling directory sharing the intended root's string prefix (e.g., /var/www/site2 next to /var/www/site) without e...

CVE-2026-75592 Kirby: Access to image files outside of the site root via path traversal in the media handling

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler used incomplete filesystem containment checks in src/Filesystem/Dir.php and src/Filesystem/F.php through Kirby\Filesystem\Dir::realpath and Kirby\Filesystem\F::realpat...

PT-2026-83996

Name of the Vulnerable Software and Affected Versions Kirby versions prior to 4.9.5 Kirby versions prior to 5.5.2 Description The media handler in this content management system uses incomplete filesystem containment checks within src/Filesystem/Dir.php and src/Filesystem/F.php via the functions...

Linux Distros Unpatched Vulnerability : CVE-2026-82455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination...

AZL-98403 CVE-2026-82455 affecting package ruby 3.3.5-9

RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...

CVE-2026-82455

Rejected reason: The RubyGems maintainers determined that the reported symlink-following behavior during gem extraction is not a security vulnerability, so no vulnerability exists for this record to describe...

CVE-2026-82455

RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...

UBUNTU-CVE-2026-82455

RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...