54 matches found
cve-2026-27483
CVE-2026-27483 MindsDB 경로 탐색을 통한 RCE PoC 이 PoC 스크립트는 다음 GitHub 권고를 기반으로 합니다. 기본적으로 MindsDB는 인증을 사용하지 않습니다 PoC는 인증되지 않은 모드와 인증된 모드를 모두 지원합니다 /api/handlers/를 쿼리하여 사용 가능한 핸들러를 찾고, 설치되지 않은 핸들러 이름을 사용합니다. PoC는 /venv/lib/python3.10/site-packages/pip/init.py를 덮어씁니다. 파이썬 리버스 셸이 위 경로에 작성된 후 트리거됩니다...
fibratus
Fibratus Security sensor for realtime threat detection and protection Get Started » Docs • Rules • Filaments • Download • Discussions Fibratus detects and eradicates advanced attacker tradecraft, malware, and emerging threats by scrutinizing and asserting a wide spectrum of system events against ...
SuricataLog
SuricataLog Suricata 사용법을 배우기 시작했을 때, eve.json 파일을 검사할 도구가 필요하다는 것을 금방 깨달았습니다. 대부분의 튜토리얼과 문서에서는 다음과 같은 작업을 수행하기 위해 스택을 설치할 것을 권장했습니다: 1. 로그를 중앙 위치에 저장 2. 이벤트, 특히 알림을 정규화하고 보강 3. 프런트엔드를 사용하여 데이터 탐색 매우 유용하지만, 이벤트를 빠르게 확인만 하면 되는 경우는 어떨까요? 조만간 여러분은 다음과 같은 작업에 지겨워 죽을 것입니다: root@kitploit: cat eve.json ...
metashield-clean-up-sdk-python
Metashield-clean-up-sdk-python インストール metashieldcleanup パッケージを pip でインストールします:: root@kitploit: pip install metashieldcleanup 使い方 ファイルをクリーニングする例。 .. code-block:: python root@kitploit: import time import base64 from metashieldcleanup.api import MetashieldCleanUp api =...
CVE-2000-0114
CVE-2000-0114 これはHackerOneプラットフォームのVDPで見つけたCVEです POCの手順 :- 1 - インストール " pip install CVE-2000-0114 " 2 - 実行 " CVE-2000-0114 -u https://example.com " 3 - またはスクリプトを実行することもできます。...
CVE-2026-81694
openssl-encrypt pip package, versions = 1.4.8 fails to sanitize filenames read from untrusted drive data outside the AES-GCM authenticated manifest before printing them in the verify-usb command's output. An attacker can plant filenames containing terminal cursor-movement and erase-line control...
CVE-2026-81690 verify-usb before 1.4.9 Symlink Directory Traversal Code Execution
openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...
EUVD-2026-67046
openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...
CVE-2026-73627
JupyterLab pip package 'jupyterlab' versions =4.1.0,=4.6.0,=4.6.1 contain a plugin manager lock-rule enforcement bypass. Two server-side enforcement gaps allow an authenticated user to circumvent administrator lock rules by making direct requests to the /lab/api/plugins endpoint, enabling or...
PYSEC-2026-1138 Apache HDFS Provider error message suggested
In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The...
MAL-2026-6752 Malicious code in confighub (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805d9b5848999d2ba85368446cb12d90bf350b8201a78dd475079c04f180dd81 confighub 7.0.1 declares installrequires='procwire' and imports procwire at package load in init.py under a version gate that silently swallows...
MAL-2026-2016 Malicious code in qyrm-pipinject4 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9a21af6fd1f0c3069036b62cd769efe0cd35077f9141b1454397e44561c73461 During installation, the package starts a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
openSUSE Security Advisory (SUSE-SU-2026:0805-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2026-1214)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2025-2630)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2025-2340)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-b108c70b29)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2025-2211)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...