241 matches found
evtx
EVTX Windows XML 이벤트 로그 형식을 위한 크로스 플랫폼 파서 기능 🔒 100% 안전한 Rust로 구현 — Rust가 지원하는 모든 플랫폼stdlib 포함에서 작동합니다. ⚡ 빠름 — 아래 벤치마크를 참조하세요. 다른 구현체보다 몇 배 더 빠릅니다! 🚀 멀티스레드 지원. ✨ XML 및 JSON 출력 지원. 둘 다 공유 중간 표현IR에서 직접 구성됩니다xml2json 변환 없음!. ⛏️ 누락된 레코드/청크의 기본적인 복구를 지원합니다! 🐍 Python 바인딩도 제공:...
MalwLess
MalwLess 시뮬레이션 도구 MST MalwLess는 프로세스나 PoC를 실행하지 않고 시스템 침해 또는 공격 행위를 시뮬레이션할 수 있는 오픈소스 도구입니다. 이 도구는 Blue Team 탐지 및 SIEM 상관 규칙을 테스트하기 위해 설계되었습니다. 누구나 작성할 수 있는 규칙 기반 프레임워크를 제공하므로, 새로운 기술이나 공격이 등장하면 자신만의 규칙을 작성하여 커뮤니티와 공유할 수 있습니다. 이 규칙들은 Sysmon 또는 PowerShell 이벤트를 시뮬레이션할 수 있습니다. MalwLess는 규칙을 파싱하여...
CVE-2026-92905
ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...
CVE-2026-92905 Denial of Service Vulnerability
ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...
EUVD-2026-85824
ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...
CVE-2026-92905 Denial of Service Vulnerability
ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...
CVE-2026-92905
ZohoCorp ManageEngine EventLog Analyzer and Log360 versions prior to build 13071 are susceptible to a Denial of Service (DoS) vulnerability. The root cause is the software's inability to properly handle malformed syslog packets , which allows an attacker to crash the log collector . The provided ...
CVE-2026-92905: Uncaught Exception
ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...
PT-2026-97778
Name of the Vulnerable Software and Affected Versions ManageEngine EventLog Analyzer versions prior to build 13071 Log360 versions prior to build 13071 Description A Denial of Service DoS issue exists where an attacker can crash the log collector by sending malformed syslog packets. A DoS is an...
EUVD-2025-210479
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357: Improper Neutralization of Special Elements in Data Query Logic
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2025-60357
AhnLab EPP Management (Centralised Endpoint Security Management) versions 1.0.14.32-6249 and earlier are vulnerable to a NoSQL injection (MongoDB) in the /api/console/ems/eventlog/agentEvent/list endpoint. The flaw allows attackers to craft malicious queries in the request body to extract sensiti...
Velocidex Velociraptor 安全漏洞
Velocidex Velociraptor is a tool developed by the Australian company Velocidex, which uses the Velociraptor Query Language VQL to retrieve host-based status information. Versions of Velocidex Velociraptor prior to 0.76.5 contained a security vulnerability. This vulnerability stemmed from errors i...
Azure Linux 3.0 Security Update: kernel (CVE-2024-58005)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-58005 advisory. - In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc in eventlog/acpi....
ROS-20260119-7333
A vulnerability in the kvalloc function of the eventlog/acpi.c The component of the Linux kernel is related to improper control of resource identifiers. Exploitation of the vulnerability could allow an attacker to cause a denial of service...