CVE-2017-1000117

CVE-2017-1000117 사용법 $ git clone --recursive https://github.com/ieee0824/CVE-2017-1000117.git git에 문제가 있을 때, ifconfig가 실행됩니다...

CVE-2018-1000199

CVE-2018-1000199 Linuxのptraceコードはデバッグレジスタへのアクセスを仮想化しますが、その仮想化コードには誤ったエラーハンドリングがあります。つまり、例えばDR0に不正な値を書き込んだ場合、ptrace呼び出しは-EINVALを返すにもかかわらず、カーネルのブレークポイント追跡の内部状態が破損する可能性があります。...

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : Wordpress Really Simple Security의 Docker 인증 우회 결함 설명 WordPress용 Really Simple Security 플러그인Free, Pro 및 Pro Multisite 버전 9.0.09.1.1.1은 인증 우회 취약점의 영향을 받습니다. 이 문제는 2단계 인증 REST API 작업에 사용되는 checkloginandgetuser 함수의 부적절한 오류 처리로 인해 발생합니다. 결과적으로, "Two-Factor Authentication"2단계 인증 기능이 활성...

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : Wordpress Really Simple Security Docker 내 인증 우회 취약점 설명 WordPress용 Really Simple Security 플러그인Free, Pro, Pro Multisite 버전 9.0.0에서 9.1.1.1은 인증 우회 취약점의 영향을 받습니다. 이 문제는 2단계 인증 REST API 작업에 사용되는 checkloginandgetuser 함수의 부적절한 오류 처리로 인해 발생합니다. 결과적으로, 인증되지 않은 공격자는 "Two-Factor...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

Testability-CVE-2014-1266

TestableSecurity 이것은 Apple의 libsecurityssl에서 취약한 SSLVerifySignedServerKeyExchange를 추출하여 서명 코드가 독립적으로 단위 테스트 가능함을 보여주는 작은 개념 증명입니다. 이 버그가 쉽게 테스트되지 않았다는 이야기가 있었지만, 해당 코드는 간단한 전제 조건을 기반으로 서명을 검증하며, 긍정 및 부정 검증 사례 모두에 대해 쉽게 테스트할 수 있습니다. 따라서 다음 항목에 대해 완전히 테스트되지 않은 이유나 변명은 없습니다: 잘못된 clientRandom. 잘못된...

CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...

CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...

CVE-2025-62168

CVE-2025-62168 Squid Proxy エラーハンドリングにおける情報漏えい スキャナー（検出 & PoC） 「HTTP 認証資格情報のマスキングに失敗したため、 Squid は情報漏えい攻撃に対して脆弱です。 深刻度: この問題により、スクリプトがブラウザのセキュリティ 保護をバイパスし、信頼されたクライアントが認証に使用する 資格情報を学習できる可能性があります。 この問題により、リモートクライアントが、バックエンドの ロードバランシングに Squid を使用する Web アプリケーションが 内部で使用するセキュリティトークンや資格情報を特定できる 可能性があります。...

CVE-2025-62168

CVE-2025-62168 Squid Proxy エラーハンドリングにおける情報漏洩 スキャナー（検出 & PoC） 「HTTP 認証資格情報のマスキングに失敗したため、 Squid は情報漏洩攻撃に対して脆弱です。 深刻度: この問題により、スクリプトがブラウザのセキュリティ 保護をバイパスし、信頼されたクライアントが認証に使用する 資格情報を学習することが可能になります。 この問題により、リモートクライアントが、Squid をバックエンド ロードバランシングに使用する Web アプリケーションが内部で 使用するセキュリティトークンまたは資格情報を特定できる 可能性があります。...

CVE-2019-9053

Fixed it bcz of https://tryhackme.com/room/easyctf : enjoy 수정되었습니다. https://tryhackme.com/room/easyctf 덕분입니다 : 즐기세요. Critical Issues Fixed 주요 수정 사항 1. Python 2 to Python 3 Compatibility 2. Python 2에서 Python 3 호환성 Old: print "string" New: print"string" Changed all print statements to print functio...

CVE-2026-14316

The boks_sshd software contains a heap buffer overflow vulnerability within its revoked-key error handling path. The root cause is the use of sprintf() to construct a human-readable failure reason into a heap buffer that is insufficiently sized for the final formatted message. This results in dat...

CVE-2026-14316 Heap buffer overflow in boks_sshd revoked-key error handling

The revoked-key error path builds a human-readable failure reason using sprintf into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf writes the full message, it can write past the end of the heap allocation...

CVE-2026-66248

iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the disclosure of sensitive internal infrastructure details used to plan advanced targeted attacks...

CVE-2026-66248

The HCL iControl software is affected by an Improper Error Handling vulnerability. This flaw could allow an unauthenticated attacker to trigger verbose database and system errors. Such errors may disclose sensitive internal infrastructure details , which could be leveraged to plan advanced target...

EUVD-2026-90815

iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the disclosure of sensitive internal infrastructure details used to plan advanced targeted attacks...

CVE-2026-66248 HCL iControl is affected by an Improper Error Handling vulnerability

iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the disclosure of sensitive internal infrastructure details used to plan advanced targeted attacks...

Rocky Linux 8 [CIQ] Security Update: libecap / libecap-debuginfo / libecap-debugsource / libecap-devel / etc (crlsa-2025_19107)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202519107 advisory. squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling CVE-2025-62168 Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource (crlsa-2025_20935)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202520935 advisory. squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling CVE-2025-62168 Tenable has extracted the preceding...

Rocky Linux 10.1 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource (crlsa-2025_21002)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202521002 advisory. squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling CVE-2025-62168 Tenable has extracted the precedi...