DELTA

DELTA: SDN SECURITY EVALUATION FRAMEWORK We now manage DELTA in new repository https://github.com/seungsoo-lee/DELTA. Please visit our new repository and hope you see there again. Thank you! Best Regards, -- DELTA Team...

CVE-2024-5452

CVE-2024-5452 01. RCE 와 pytorch-lightning 개요 1 RCE 와 pytorch-lightning 개요 RCERemote Code Execution, 원격 코드 실행는 공격자가 원격에서 시스템이나 애플리케이션 내에서 임의의 코드를 실행할 수 있도록 하는 취약점 이며 CWE-94: Improper Control of Generation of Code 'Code Injection' 입니다. PyTorch Lightning은 PyTorch 기반의 딥러닝 모델 훈련을 쉽게 관리할 수 있도록 도와주는...

DELTA

DELTA: SDN 보안 평가 프레임워크 DELTA란? DELTA는 알려진 공격 시나리오를 다양한 테스트 케이스에 재현하는 침투 테스트 프레임워크입니다. 이 프레임워크는 퍼징 기술을 활용하여 SDN에서 알려지지 않은 보안 문제를 발견하는 기능도 제공합니다. Agent-Manager는 관제탑입니다. 타겟 SDN 네트워크에 배포된 모든 에이전트를 완전히 제어합니다. Application-Agent는 공격 절차를 수행하는 합법적인 SDN 애플리케이션이며, 컨트롤러에 의존적입니다. 알려진 악성 기능은 애플리케이션 에이전트 함수로...

seccubus

Seccubus 소개 Seccubus는 다양한 도구를 사용하여 정기적인 취약점 스캔을 자동화하고, 보안 담당자가 첫 스캔과 반복 스캔 모두에서 그 출력을 신속하게 분석하도록 돕습니다. 반복 스캔에서 델타 보고는 발견 항목이 스캔 결과에 처음 나타나거나 해당 출력이 변경될 때만 판단하면 되도록 보장합니다. Seccubus 2.x는 유일하게 활발히 개발되고 유지 관리되는 브랜치이며, Seccubus V1에 대한 모든 지원은 공식적으로 중단되었습니다. Seccubus V2는 다음 스캐너와 함께 작동합니다: Nessus OpenVAS...

CVE-2023-30765

CVE-2023-30765 CVE-2023-30765 / ZDI-23-905 - Delta Electronics Infrasuite Device Master 권한 상승 버그 크레딧: Piotr Bazydlo @chudypb 링크: https://www.zerodayinitiative.com/advisories/ZDI-23-905/ https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01 사용 방법 python3 cve-2023-30765.py -h usage:...

CentOS Linux 7 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc (CENTOS7:CLSA-2026:1778061272)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1778061272 advisory. - Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the...

AlmaLinux 9.6 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ALMALINUX9.6:CLSA-2026:1788860468)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788860468 advisory. - Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the...

CentOS Linux 8.5 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1777396609)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1777396609 advisory. - Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen...

Rocky Linux 9.6 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ALMALINUX9.6:CLSA-2026:1788860468)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788860468 advisory. - Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the...

CentOS Linux 8 [TuxCare] Security Update: openssh / openssh-askpass / openssh-cavs / openssh-clients / etc (CENTOS-STREAM8:CLSA-2026:1774369958)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1774369958 advisory. - Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added ...

DEBIAN-CVE-2026-96280

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

CVE-2026-96280

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

CVE-2026-96280

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

CVE-2026-96280 Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

EUVD-2026-88015

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

CVE-2026-96280

The Flatpak OCI delta stream parser contains a vulnerability where it reads sizes as guint64 but passes them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems). This discrepancy results in undersized allocations while subsequent operations use the original 64-bit siz...

CVE-2026-96280

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

PT-2026-99703

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux affected versions not specified Description The OCI delta stream parser reads sizes as guint64 but passes them to GLib I/O and allocation functions that expect gsize. On 32-bit systems, gsize is 32 bits, which causes...

CVE-2026-96280: Numeric Truncation Error

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

SUSE CVE-2026-88366

NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvgpathArcTo when parsing SVG arc commands. A specially crafted SVG document containing extreme arc radius values can cause intermediate arc calculations to produce a NaN delta angle. The function subsequently...