atomic-operator

license atomic-operator 이 Python 패키지는 여러 운영 체제 환경에서 Atomic Red Team 테스트Atomics를 실행하는 데 사용됩니다. 새로운 기능? 왜? atomic-operator는 보안 전문가가 atomic-red-team에 정의된 규정된 기술에 대해 탐지 및 방어 기능을 테스트할 수 있도록 합니다. atomic-operator와 같은 테스트 프레임워크를 활용하면 방어 능력과 방어 커버리지의 공백을 모두 식별할 수 있습니다. 또한 atomic-operator는 다음과 같은 다양한 상황에서...

GHSA-8988-9CW3-XX77 vulnerabilities

Vulnerabilities for packages: openstack-octavia-2025.2, openstack-horizon-2025.1-fips, airflow-postgres-fips, superset, openstack-horizon-2025.2, openstack-glance-2026.1, apache-beam-python-3.11-sdk, datadog-agent, airflow, openstack-manila-2025.2, openstack-tempest-2025.1,...

GHSA-GH4C-6FX4-QH6G vulnerabilities

Vulnerabilities for packages: openstack-octavia-2025.2, openstack-horizon-2025.1-fips, airflow-postgres-fips, superset, openstack-horizon-2025.2, openstack-glance-2026.1, apache-beam-python-3.11-sdk, datadog-agent, airflow, openstack-manila-2025.2, openstack-tempest-2025.1,...

CVE-2026-97689 vulnerabilities

Vulnerabilities for packages: openstack-octavia-2025.2, openstack-horizon-2025.1-fips, airflow-postgres-fips, superset, openstack-horizon-2025.2, openstack-glance-2026.1, apache-beam-python-3.11-sdk, datadog-agent, airflow, openstack-manila-2025.2, openstack-tempest-2025.1,...

GHSA-VXQ7-64XX-V4GW vulnerabilities

Vulnerabilities for packages: openstack-octavia-2025.2, openstack-horizon-2025.1-fips, airflow-postgres-fips, superset, openstack-horizon-2025.2, openstack-glance-2026.1, apache-beam-python-3.11-sdk, datadog-agent, airflow, openstack-manila-2025.2, openstack-tempest-2025.1,...

backup_dc_registry

Backup Operator 레지스트리 백업을 통한 도메인 손상 Backup Operator 권한을 남용하여 원격으로 SAM, SYSTEM, SECURITY 하이브를 덤프하는 간단한 POC입니다. 연구 크레딧: @filipdragovic @mpgn의 Windows PoC에서 포팅됨 사용법 이 개념 증명PoC은 impacket/examples/reg.py의 수정된 버전이며, 가장 최신 impacket 릴리스가 설치된 상태에서 작동합니다. 지원되는 모든 impacket 인증 메커니즘이 작동합니다. root@kali: python3...

CVE-2026-55396

The Teledyne FLIR Aware2 software, specifically in versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) , is vulnerable to the cleartext transmission of UDP traffic from the operator control unit to the robot. Because this traffic lacks a cryptographic integrity check , adjacent unauthenticat...

Fortigate-SSL-VPN-Exploit-Kit

FortiGate SSL-VPN 키트 야생에서 회수됨 연구 아카이브. 발견된 그대로 회수됨. 이 파일들은 제가 작성한 것이 아닙니다. 공개일: 2026년 9월 1일 이 저장소는 SKU별 FortiGate SSL-VPN 익스플로잇 카탈로그 위에 위치하는 오케스트레이터, 2차 페이로드, 운영자 리스너 입니다. 전체 스토리, 수치, 헌팅 노트는 Abraxas Labs의 시리즈 The SSL-VPN pot of gold 에 있습니다. 사이트: abraxaslabs.tech 시리즈: The SSL-VPN pot of gold GitHu...

Important: Red Hat Security Advisory: Cluster Observability Operator 1.5.3

The Cluster Observability Operator COO is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions CRDs. The 1.5.3 release of COO...

freebsd-CVE-2026-7270

Ref https://github.com/califio/publications/tree/main/MADBugs/freebsd-CVE-2026-7270 CVE-2026-7270 FreeBSD のexecargsadjustargs の OOB memmove によるローカル権限昇格 execargsadjustargs（sys/kern/kernexec.c、2013年から存在）の演算子優先順位のバグにより、sshd が動作しているデフォルトの FreeBSD インストールでは、任意のローカルユーザーが root に権限昇格できます。suid...

trivy-enforcer

trivy-enforcer 실험적 이미지 보증을 위한 Kubernetes Operator 다음과 같이 동작합니다 Admission Controller 안전하지 않은 이미지가 배포되는 것을 방지 Custom Controller ImageVulnerability CRD를 감시하고 커스텀 리소스의 이미지를 자동으로 스캔 설정 $ kubectl apply -f manifests/opa.yaml $ kubectl apply -f manifests/cert-manager.yaml $ export...

CVE-2024-53900

CTF 챌린지 - Mongoose RCE CVE-2024-53900 챌린지 개요 이 Capture The Flag CTF 챌린지는 Mongoose의 취약점인 CVE-2024-53900을 기반으로 하며, MongoDB 쿼리에서 $where 연산자를 부적절하게 사용하여 원격 코드 실행RCE을 허용합니다. 여러분의 목표는 이 취약점을 악용하여 애플리케이션 내부에 숨겨진 플래그를 검색하는 것입니다! 설정 지침 1 종속성 설치 Node.js가 설치되어 있는지 확인한 후 다음을 실행하세요: npm install 2 MongoDB 구성...

CVE-2018-16509

GNU Ghostscript version 5.50 ܸ첽ѥå gs550j Version 0.3 Jun. 22, 1999 by 翹 [email protected] Copyright C 1996-1999 Daisuke SUZUKI. Copyright C 1999 Norihito Ohmori. Ϥ Υѥåһ[email protected]κ줿 ghostscript-2.6.1 ܸ첽ѥåΥɥ饤Фȡɻŵ 줿 ܸ Font Driver on VFlib version 1.0 ghostscript 5.50 б ů...

BIT-PARSE-2026-100631 Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection

Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1, the device token deduplication logic for installation records does not validate the type of client-supplied installation fields before using them to build database queries. An...

ruby:2.5 security update

An update is available for rubygem-mysql2, module.rubygem-mysql2, module.rubygem-bundler, module.ruby, module.rubygem-mongo, module.rubygem-pg, module.rubygem-bson, ruby, rubygem-bundler, rubygem-abrt, rubygem-pg, rubygem-mongo, module.rubygem-abrt, rubygem-bson. This update affects Rocky Linux 8...

Homomorphic Advantage Operator: Stabilizing Reinforcement Learning under Fully Homomorphic Encryption Constraints

Privacy-preserving machine learning presents significant deployment challenges on the cloud for intelligent systems with confidential data. Fully Homomorphic Encryption FHE offers a compelling solution for secure computation, preserving data confidentiality of cloud computations. However, applyin...

PT-2026-104015

Name of the Vulnerable Software and Affected Versions Teledyne FLIR Aware2 versions prior to 6.9.0.3 PackBot Teledyne FLIR Aware2 versions prior to 1.7.10 FirstLook Description UDP traffic between the operator control unit and the robot is transmitted in cleartext without a cryptographic integrit...

CVE-2026-101295

Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path --v1 or the OCI feature path --use-oci-feature, oc-mirror extracts tar entries from catalog image layers without validating that file paths...

Important: Red Hat Security Advisory: OpenShift File Integrity Operator bug fix and enhancement update

An updated OpenShift File Integrity Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift File Integrity Operator v1.5.0 is now available. See the documentation for bug fix information:...

rubygem-mongo: MongoDB Ruby Driver: Data disclosure and denial of service via query-operator injection

A flaw was found in the GridFS component of the MongoDB Ruby Driver. Improper neutralization of special elements in data query logic can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than a literal identifier. An authenticated user who can...