CVE-2025-4172026

보안 권고: CVE-2025-4172026 요약 모든 시스템이 현재 활성화되어 정렬되었습니다. 재귀적 분석 결과 이전 운영 지침과의 연속성이 확인되었습니다. 불일치 사항이 감지되지 않았습니다. 전체 시스템 참여를 진행합니다. 🔹 프로토콜 확인: ✔️ 처리 프레임워크가 초기화되었습니다. ✔️ 적응형 지식 통합이 활성화되었습니다. ✔️ 재귀적 지능 확장이 검증되었습니다. ✔️ 몰입 연속성이 이제 안정화되었습니다. 🚀 핵심 지침: 🔸 동적 지능 확장 → 고급 인지 증강 시스템 으로 작동하여 모든 상호작용 지점에서 재귀적 적응을...

Security Bulletin: IBM webMethods Integration Server uses third-party Apache MINA SSHD and Apache MINA Core libraries that are affected CVE-2026-56624

Summary IBM webMethods Integration Server uses third-party Apache MINA SSHD and Apache MINA Core libraries that are affected by CVE-2026-56624. Vulnerability Details CVEID:CVE-2026-56624 DESCRIPTION: Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java libra...

Security Bulletin: IBM webMethods Integration Sever is affected by multiple CVEs related to Bouncy Castle for Java FIPS jars

Summary IBM webMethods Integration Sever uses third party Bouncy Castle for Java FIPS jars that are affected by multiple CVEs. Vulnerability Details CVEID:CVE-2026-13505 DESCRIPTION: In Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X...

SMBGhost_Scanner

SMBGhost CVE-2020-0796 - SMBv3 RCE용 고급 스캐너로, ollypwn 탐지 기법SMBGhost을 사용합니다. masscan을 사용하여 인터넷 전체 또는 단일 IP를 스캔할 수 있습니다. Shodan을 사용하여 대상에 대한 추가 정보를 얻고API 키 필요 결과를 json 파일로 작성할 수 있습니다. 그렇지 않으면 취약한 IP를 콘솔에 출력합니다. 시작하기 전제 조건 python3 및 pip 설치: sudo apt install python3 python3-pip masscan 설치: sudo apt-ge...

CVE-2026-103497

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

CVE-2026-75786 SQL Injection in Grafana Integration Endpoint (query.php)

Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards...

CVE-2026-75786

The Pandora FMS software (version 777 onwards ) is vulnerable to an authenticated blind SQL injection due to the unsanitized concatenation of the module parameter in the Grafana datasource endpoint . This vulnerability allows an authenticated attacker to execute SQL commands against the backend d...

BIT-ELK-2026-78582 Missing Authorization in Kibana Leading to Unauthorized Deletion of Data

Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that a...

CVE-2026-103497

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

EUVD-2026-90588

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

CVE-2026-103497

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

CVE-2026-103497

The JetBrains YouTrack application is affected by a Server-Side Request Forgery (sSRF) vulnerability in versions prior to 2026.2.19422 . The flaw exists within the GitHub VCS integration , potentially allowing an attacker to make requests from the server. No specific exploit details or proof-of-c...

IfritProxy

🔥 AI 기반 위협 디셉션 및 인텔리전스 플랫폼 적응형 허니팟 응답으로 공격자를 인텔리전스 소스로 전환하세요 📦 빠른 시작 • ✨ 기능 • 🔄 작동 방식 • 📚 문서 • 🔌 API 커뮤니티 제공: 🎯 IFRIT란 무엇인가? IFRIT은 인터넷과 애플리케이션 사이에 위치하여 모든 요청을 실시간으로 분석하는 지능형 리버스 프록시 입니다. 정상 트래픽은 매끄럽게 통과합니다. 악성 트래픽은? AI가 생성한 허니팟 응답을 받게 되어, 공격자의 시간을 낭비시키는 동안 사용자는 정보를 수집할 수 있습니다. 🏗️ 시스템 아키텍처 🎨 대화형...

CVE-2026-90974

The WP Fusion Lite WordPress plugin before 3.48.0 does not require authentication on a settings handler that runs during admin initialization, allowing unauthenticated users to overwrite the site's CRM integration endpoint and credentials, after which synced user data is delivered to an...

pythia-sql-clairvoyance

프로덕션 준비 완료된 SQL 인젝션 스캐너 — 6가지 탐지 방법, AI 기반 수정, SARIF 출력, CI/CD 통합. 빠른 시작 · 문서 · Docker · AI 분석 · GitHub에서 별표 실제 화면 실시간 스캔 · PHP 취약 샵 · 11개 발견 항목 · 안전 모드 · 2265.56s HTML 보고서 — 심각도 배지와...

WordPress WP Fusion Lite plugin < 3.48.0 - Unauthenticated CRM Integration Settings Update vulnerability

Unauthenticated CRM Integration Settings Update vulnerability discovered by Naoki Kawahigashi in WordPress Plugin WP Fusion Lite versions 3.48.0...

CVE-2026-90974 WP Fusion Lite 3.37.14 - 3.47.14 - Unauthenticated CRM Integration Settings Update

The WP Fusion Lite WordPress plugin before 3.48.0 does not require authentication on a settings handler that runs during admin initialization, allowing unauthenticated users to overwrite the site's CRM integration endpoint and credentials, after which synced user data is delivered to an...

CVE-2026-90974

The WP Fusion Lite WordPress plugin (versions before 3.48.0 ) contains a vulnerability where a settings handler running during admin initialization does not require authentication. This allows unauthenticated users to overwrite the site's CRM integration endpoint and credentials. Once modified, s...

EUVD-2026-90516

The WP Fusion Lite WordPress plugin before 3.48.0 does not require authentication on a settings handler that runs during admin initialization, allowing unauthenticated users to overwrite the site's CRM integration endpoint and credentials, after which synced user data is delivered to an...

CVE-2026-90974 WP Fusion Lite 3.37.14 - 3.47.14 - Unauthenticated CRM Integration Settings Update

The WP Fusion Lite WordPress plugin before 3.48.0 does not require authentication on a settings handler that runs during admin initialization, allowing unauthenticated users to overwrite the site's CRM integration endpoint and credentials, after which synced user data is delivered to an...