OWN-Defender

OWN-Defender — Windows Security Center COM 연구 OWN-Defender 는 Windows Security CenterWSC가 COM 인터페이스를 통해 바이러스 백신 보안 제품을 어떻게 표현하고 관리하는지 이해하는 데 초점을 맞춘 Windows 보안 연구 프로젝트입니다. 이 프로젝트는 DefendNot에서 시연된 동작에 대한 조사로 시작되었지만, 기존 구현을 블랙박스로 취급하는 대신 독립적인 리버스 엔지니어링 및 검증을 위한 출발점으로 사용했습니다. 이 프로젝트의 목표는 완전한 실행 경로를 이해...

CVE-2026-77899

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...

EUVD-2026-73291

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...

CVE-2026-77899

CVE-2026-77899 is a use-after-free vulnerability in Windows Security Center that allows an authorized attacker to escalate privileges locally . The CVSS v3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the need for low privileges and high attack complexity...

Tenable Security Center SCAP Audit File Command Injection

This is a Metasploit module that demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated user to achieve command execution as the web service account tns via the SCAP audit file upload flow. This module requires Metasploit: https://metasploit.com/download Current...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bnxt: Avoid overflow in bnxtgetnvramdirectory. The value of an arithmetic expression may be subject to overflow due to a failure to cast the operands to a larger data type before performing arithmetic operations. A macro was used...

Tenable Security Center < 6.9.0 Multiple Vulnerabilities (TNS-2026-22)

According to its self-reported version, the Tenable Security Center running on the remote host is prior to 6.9.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-22 advisory. - libcurl might in some circumstances reuse the wrong connection for SMBS transfers...

CVE-2026-19680

A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database...

CVE-2026-19682

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account...

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

CVE-2026-19681

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system...

CVE-2026-19631

A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials...

CVE-2026-19629

A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized...

CVE-2026-19635

A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific configuration file could achieve arbitrary code execution with elevated privileges, without requiring further user or victim interaction...

CVE-2026-19682 Command Injection

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account...

CVE-2026-19682

CVE-2026-19682 is an OS command injection in Security Center. The CVE description states a remote, unauthenticated attacker can execute arbitrary commands on the underlying OS with the service account privileges. The Tenable advisory for Security Center 6.9.0 notes this vulnerability among others...

CVE-2026-19682 Command Injection

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account...

CVE-2026-19682

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account...

EUVD-2026-58748

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account...

CVE-2026-19681

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system...