SOC335-CVE-2024-49138-Exploitation-Detected

CVE-2024-49138 취약점 악용 탐지 이 프로젝트에서는 LetsDefend 플랫폼에서 시뮬레이션된 보안 사고를 조사했습니다. Windows 시스템이 Windows 공통 로그 파일 시스템CLFS 드라이버의 권한 상승 취약점인 CVE-2024-49138 악용을 통해 손상되었습니다. 공격자는 이 취약점을 이용해 권한을 상승시키고 RDP를 통해 원격 접속을 설정했습니다. 주요 시사점 식별됨: 비정상적인 프로세스 동작을 통한 CVE-2024-49138 악용 탐지. 분석됨: 탐지 회피를 위해 위장된 프로세스svohost.exe 사...

CHIRP-CodeExecution_via_Malicious_ImageFile

CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver Product: CHIRP - An open-source project for programming Ham Radios. Affected Versions: URL: https://github.com/kk7ds/chirp, https://chirpmyradio.com Affected Versions: = chirp-next-20260814 CWE: CWE-95 Eval Injection Overview CHIRP's...

physmem2profit

Physmem2profit Physmem2profit は、物理メモリをリモートで解析することにより、ターゲットホストの LSASS プロセスのミニダンプを作成するために使用できます。この研究の意図は、認証情報の窃取に対する代替アプローチを提案し、物理メモリにアクセスできる他のドライバをサポートするように拡張できるモジュラーフレームワークを作成することです。Physmem2profit は、Mimikatz でさらに解析できる LSASS のミニダンプ .dmp を生成します。このツールは Cobalt Strike を必要としませんが、SOCKS...

Interceptor

Interceptor 作者: @Cerbersec Interceptorは、カーネルコールバックのパッチ適用とIRPのフックによって、カーネル空間でEDR/AVソリューションを改ざんすることに焦点を当てたカーネルドライバです。 Interceptorは、NVISO SecurityのRed Teamでのインターンシップの一環として作成されました。関連するブログ記事はこちら（kernel karnage）から参照できます。 2022年、Kernel KarnageはSANS Pen Test...

[SECURITY] Fedora 45 Update: soundmodem-0.20-40.fc45

This package contains the driver and the diagnostic utility for userspace SoundModem. It allows you to use soundcards as Amateur Packet Radio modems...

[SECURITY] Fedora 45 Update: libwebcam-0.2.5-26.fc45

Libwebcam provides a user-space library for interaction with the uvcvideo kernel driver. One could use this library to manipulate settings for one or many UVC-type webcams found attached on a single computer...

[SECURITY] Fedora 45 Update: foomatic-4.0.13-38.fc45

Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. This package contains utilities to generate driver description files and printer queues for CUPS, LPD, LPRng, and PDQ using the database packaged separately. There is also the...

[SECURITY] Fedora 45 Update: envytools-0.0-0.36.git20200810.fc45

Envytools contains a number of tools used for debugging / development of the nouveau driver: envydis: Disassembler and assembler for various ISAs found on nvidia GPUs nvbios: Tools to decode the card description structures found in nvidia VBIOS nva: Tools to directly access the GPU registers...

CVE-2026-93393

A flaw was found in mongo-c-driver. A heap-based buffer overflow exists in the Transport Layer Security TLS transport layer when compiled with the Windows platform TLS backend. A remote server can exploit this flaw by sending crafted encrypted traffic after the TLS handshake completes, causing th...

CLSA-2026-1790944051 TuxCare security update for websocket-driver (1 CVE)

TuxCare rebuilt websocket-driver to address 1 CVE. Fixed in 0.7.5-tuxcare.1...

CVE-2026-103505

A flaw was found in the AWS Elastic File System EFS Container Storage Interface CSI Driver. A remote authenticated user with permissions to create persistent storage volumes can supply crafted comma-separated values within volume configuration attributes. This improper input handling allows the...

CLEANSTART-2026-CA40991 mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS

CVE-2026-2303 affects multiple packages. The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS. See references for individual vulnerability details...

CVE-2026-47523

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and...

CVE-2026-47532

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and...

CVE-2026-47547

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause improper input validation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

CVE-2026-47503

NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a guest VM user may cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. A successful exploit of this vulnerability might lead t...

CVE-2026-47526

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47566

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a memory leak in error paths leading to kernel memory exhaustion. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47591

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to incorrect authorization, enabling write access to memory marked read-only. A successful exploit of this vulnerability might lead to code...

CVE-2026-47592

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...