cve-2026-31431

CVE-2026-31431 "Copy Fail" - 페이지 캐시 손상 취약점 authencesn AEAD 조작을 통한 Linux 커널 페이지 캐시 손상. ⚠️ 중요: 악용 상태 업데이트 2026년 5월 1일 RHEL 9.6 커널을 사용하는 여러 OpenShift 4.20.16 클러스터에서 광범위한 테스트를 수행한 결과: ✅ 페이지 캐시 손상: 확인됨 - 160바이트 셸코드 주입 성공 ✅ 커널 취약점: 권한 없는 컨테이너에서 악용 가능 제로 capabilities ❌ 권한 상승: 달성되지 않음 - 캐시가 손상되었음에도 UID는...

CVE-2026-26717

CVE-2026-26717: OpenFUN Richie LMS의 HMAC 타이밍 공격 작성자: Elvin Latifli CVE ID: CVE-2026-26717 심각도: 중간 CVSS 3.1: 4.8 — AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N 영향을 받는 제품: OpenFUN Richie 커밋 a1b5bbd 이전의 모든 버전 영향을 받는 구성 요소: src/richie/apps/courses/api.py — synccourserunsfromrequest 수정 커밋: a1b5bbda 프로젝트 소개...

CVE-2026-73975 djehuty: Authenticated SPARQL injection in session editing allows writing arbitrary RDF triples

djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated depositor can inject arbitrary SPARQL into a state-modifying DELETE/INSERT query by supplying a crafted session name, letting them write and delete arbitrary triples anywhere in t...

CVE-2026-73975

The research data repository system djehuty , developed by 4TU.ResearchData, is vulnerable to an authenticated SPARQL injection in versions prior to 26.3.2 . An authenticated depositor can supply a crafted session name to inject arbitrary SPARQL into state-modifying (DELETE/INSERT ) queries. This...

CVE-2026-73975 djehuty: Authenticated SPARQL injection in session editing allows writing arbitrary RDF triples

djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated depositor can inject arbitrary SPARQL into a state-modifying DELETE/INSERT query by supplying a crafted session name, letting them write and delete arbitrary triples anywhere in t...

Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint

SummaryThe /csp endpoint accepts unauthenticated JSON reports and logs user-controlled values directly to stdout using print without escaping control characters.A remote attacker can include ANSI/VT100 escape sequences in fields such as blocked-uri or document-uri. When the logs are viewed in an...

sanic chunked trailer request smuggling allows hidden second request execution

DescriptionSanic's HTTP/1.1 chunked-body handling does not fully consume the trailer-part after the terminating 0\r\n chunk. Because of that, attacker-controlled bytes left in the connection buffer after the first chunked request can be interpreted as the start of a new HTTP request on the same...

Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint

SummaryAny member of a channel who can post to it could also replace the text of a message written by a different member. The channel branch of the chat completions endpoint checked that the caller may write to the channel, and that the targeted message belongs to that channel, but never checked...

Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions

SummaryThe chat-completions endpoint reads a folder id out of the request body and saves the newly created chat into that folder without checking that the caller is allowed to write there. Any authenticated user who knows a folder's id can put a chat of their own into another user's folder,...

cve_2023_38831_scanner

CVE-2023-38831 스캐너 개요 CVE-2023-38831 스캐너는 WinRAR 설치에서 CVE-2023-38831 취약점의 존재를 탐지하고 분석하도록 설계된 고급 사이버 보안 도구입니다. 이 프로젝트는 파일 무결성 검사, 프로세스 메모리 스캔, 네트워크 트래픽 분석 및 샌드박스 실행을 통합한 다계층 취약점 탐지 방식을 구현합니다. 기능 취약점 탐지 : WinRAR 설치에서 CVE-2023-38831 취약점을 스캔합니다. 파일 무결성 검사 : WinRAR 실행 파일의 무결성을 검증합니다. 프로세스 메모리 스캔 : 실행 ...

CVE-2019-7711

🛡️ CVE-2019-7711: Green Hills INTEGRITY RTOS 정보 유출 📌 Green Hills INTEGRITY RTOS v5.0.4의 텔넷 서버 내 포맷 문자열 취약점에 관한 기술 문서 및 리소스 저장소. 📖 일반 설명 이 취약점은 Green Hills INTEGRITY RTOS 5.0.4 에서 Interpeak의 IPCOMShell 텔넷 서버에 영향을 미치며, 문서화되지 않은 명령 해석기가 명령 프롬프트 값을 설정할 수 있도록 합니다. 이 값은 검증 없이 printf 함수의 입력으로 직접 사용되어 악의적...

CVE-2026-103858

MISP contains an incomplete authorization check in the discussion posting functionality. When a user submits a post to a thread or replies to an existing post, the application only verified whether the target thread was restricted to a single organization org-only distribution. It did not enforce...

EUVD-2026-90770

MISP contains an incomplete authorization check in the discussion posting functionality. When a user submits a post to a thread or replies to an existing post, the application only verified whether the target thread was restricted to a single organization org-only distribution. It did not enforce...

CVE-2026-103858

The MISP application (versions earlier than 2.5.48 ) is vulnerable to an incomplete authorization check within its discussion posting functionality. The system fails to properly enforce the full thread access control list, specifically neglecting to verify sharing-group membership and event-level...

CVE-2026-103858 MISP Incomplete Thread Authorization Allows Unauthorized Read and Post Access to Discussions

MISP contains an incomplete authorization check in the discussion posting functionality. When a user submits a post to a thread or replies to an existing post, the application only verified whether the target thread was restricted to a single organization org-only distribution. It did not enforce...

CVE-2022-22715

블로그 글: https://whereisk0shl.top/post/break-me-out-of-sandbox-in-old-pipe-cve-2022-22715-windows-dirty-pipe 익스플로잇은 LOW INTEGRITY에서 실행되어야 합니다 정리는 완료되지 않았습니다. 익스플로잇은 덮어쓰여진 TOKEN 객체만 수정할 뿐 VS 풀 구조는 수정하지 않습니다. 이 부분은 원본 블로그 글에서 설명되어 있습니다...

CVE-2026-76144

The Genian SSL PNS software is susceptible to an unrestricted file upload vulnerability. This issue stems from insufficient file extension and integrity verification , which enables an attacker to upload dangerous files to the system. No specific exploit information or remediation details are pro...

RockyLinux 8 : kernel (RLSA-2026:74133)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:74133 advisory. kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math CVE-2026-64102 kernel: vmxnet3: fix BUGON in vmxnet3gethdrlen for Geneve...

Rocky Linux 9.6 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc (ALMALINUX9.6:CLSA-2026:1770216227)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1770216227 advisory. - When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operatio...

ROS-20261001-73-0055

The vulnerability of the management server’s software for collaborative work, SOGo, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and affect the integrity of the data...