LetsDefend-CVE-2022-41082-Exploitation-Attempt

LetsDefend-CVE-2022-41082-Exploitation-Attempt 🛡️ 사고 보고: CVE-2022-41082 악용 시도 📅 날짜: 2022년 9월 30일 🕒 시간: 오전 07:19 🚨 심각도: 높음 🆔 사고 ID: 125 📊 세부 정보 핵심 속성| 값 ---|--- 이벤트 ID| 125 이벤트 시간| 2022년 9월 30일, 오전 07:19 규칙| SOC175 - 요청된 URL에서 PowerShell 발견 레벨| 보안 분석가 호스트 이름| Exchange Server 2 대상 IP 주소| 172.16.20.8...

Spring4Shell

Spring4Shell В рамках этого испытания я проанализировал уязвимость Spring4Shell CVE-2022-22965, исследовал способы обхода защиты и написал отчет о постмортеме инцидента, в котором подробно описал обнаружение, влияние и устранение атаки. Также я реализовал правило брандмауэра на Python для...

CVE-2026-19369

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component addattachmentfrompublicurl. The manipulation of the argument imageUrl results in server-side request forgery. The attack requires a local approach. The proje...

CVE-2017-3324

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:11+00:00| seen| https://t.me/KaitNews/2695 2026-07-27 00:01:50+00:00| seen| https://t.me/KaitNews/2695 2026-08-05 19:00:05+00:00| published-proof-of-concept| https://t.me/KaitNews/2695 2026-08-06 00:00:25+00:00|...

CVE-2026-12228

creationtimestamp| type| source ---|---|--- 2026-07-18 22:21:15+00:00| seen| https://infosec.exchange/users/tomcat/statuses/116943308400000440 2026-07-18 23:30:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqxgbznwv727 2026-07-19 00:00:34+00:00| seen|...

CVE-2026-48246

Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPTSSLVERIFYPEER to false and not setting CURLOPTSSLVERIFYHOST when issuing outbound HTTPS requests for Google Maps Directions API lookups during incident report generation. An attacker...

EUVD-2026-31327

Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPTSSLVERIFYPEER to false and not setting CURLOPTSSLVERIFYHOST when issuing outbound HTTPS requests for Google Maps Directions API lookups during incident report generation. An attacker...

CVE-2026-48246 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php

Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPTSSLVERIFYPEER to false and not setting CURLOPTSSLVERIFYHOST when issuing outbound HTTPS requests for Google Maps Directions API lookups during incident report generation. An attacker...

CVE-2026-48246

CVE-2026-48246 affects Open ISES Tickets prior to version 3.44.2. The issue is that TLS certificate verification is disabled for outbound HTTPS requests in ajax/reports.php by setting CURLOPT_SSL_VERIFYPEER to false and not configuring CURLOPT_SSL_VERIFYHOST during Google Maps Directions API look...

PT-2026-42524

Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPT SSL VERIFYPEER to false and not setting CURLOPT SSL VERIFYHOST when issuing outbound HTTPS requests for Google Maps Directions API lookups during incident report generation. An attacker...

PT-2026-29274

Content removed...

CVE-2022-49127

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

GHSA-F6H3-846H-2R8W

creationtimestamp| type| source ---|---|--- 2026-03-04 19:10:06+00:00| seen| https://gist.github.com/alon710/f295c676693170b5c20cb1fc935e8ee8...

CVE-2016-1182

creationtimestamp| type| source ---|---|--- 2026-02-11 12:49:28+00:00| seen| https://gist.github.com/kitherill/35c9211065676c6c258f3a3f1d76a26d...

CVE-2026-2077

A security vulnerability has been detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function addRole/updateRole/deleteRole of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\RoleController.java of the component Role...

CERT.pl Energy Sector Incident 29 December

This is the official report from CERT.pl on the coordinated attacks against Poland's energy sector. These events affected both information systems IT and physical industrial equipment OT, which is rarely observed in attacks reported publicly to date...

CVE-2022-31956

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidentreports/managereport.php?id=...

CVE-2026-22245

creationtimestamp| type| source ---|---|--- 2026-01-08 17:15:40+00:00| seen| Telegram/KVWOQnBiY3Eem9HhxjtYUT7TdVna0GpQEMRBO0Jx4tvF1fc 2026-01-08 18:44:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbwn7ilf3x2e 2026-01-14 04:11:58+00:00| seen|...

CVE-2025-52863

creationtimestamp| type| source ---|---|--- 2026-01-05 21:08:15+00:00| seen| Telegram/nm9du9wjltxMtcwJpPJKV121bbF8xLkPf7YZ6cUjHAdlMjM...

CVE-2025-67073

creationtimestamp| type| source ---|---|--- 2025-12-17 19:23:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115736536175433354 2025-12-17 23:16:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7s5vbpwt2m 2026-01-02 21:51:48+00:00| published-proof-of-concept|...