cve-2020-15148

cve-2020-15148 cve-2020-15148...

CVE-2021-31166-Exploit

CVE-2021-31166-익스플로잇 MS Http Protocol Stack RCE 취약점 CVE-2021-31166 익스플로잇 특별히 조작된 Http 요청이 취약한 윈도우 버전을 대상으로 하면 DOS 공격이 발생합니다. 그리고 서버는 블루 스크린 오류와 함께 재부팅됩니다. Http.sys는 http 요청을 처리하고 이에 대한 응답을 생성하는 윈도우 커널 드라이버입니다. 이 취약한 http.sys 드라이버는 조작된 "Accept-Encoding" 헤더를 처리할 수 없어 충돌이 발생합니다. 결과적으로 서버가 재부팅됩니다. 블루...

clawguard

🦞 ClawGuard v3 エンタープライズAIエージェントセキュリティツールキット - SKILL.md駆動型アクティブディフェンス 核心理念 ClawGuard v3の防御の中核はコードではなく、SKILL.mdにあります！ 各モジュールのSKILL.md自体が完全な防御ガイドです： エージェントにいつトリガーするか を指示 エージェントにどのように検出するか をガイド 具体的な検出パターンとルール を提供 出力形式と判断基準 を定義 コードスクリプトは補助ツールに過ぎず、本当の知性はSKILL.mdにあります。 🎯 5つのセキュリティモジュール モジュール| 位置|...

CVE-2021-2394

CVE-2021-2394...

CVE-2019-0708

CVE-2019-0708 안녕 pry0cc :3 테스트: eu cyber 어쩌구저쩌구에서 thugcrowd에 투표해...

CVE-2026-90934

EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addresses. Attackers can recover hidden attendee emails by exploiting incorrect ACL scope validation that checks parent...

CVE-2020-5902

CVE-2020-5902 CVE-2020-5902...

pwnproxy

CI: suite · goldens · perf-check — baseline 281.9ms / 19 pages tests/perf/baseline.json —...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.73 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.73 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

EUVD-2026-77452

EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addresses. Attackers can recover hidden attendee emails by exploiting incorrect ACL scope validation that checks parent...

CVE-2026-90934 EspoCRM before 10.0.4 Field-level Security Bypass via Attendees

EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addresses. Attackers can recover hidden attendee emails by exploiting incorrect ACL scope validation that checks parent...

CVE-2026-90934

EspoCRM before 10.0.4 is affected by a field-level security bypass in the meeting and call attendees endpoints. The root cause is incorrect ACL scope validation that checks parent event permissions instead of attendee entity permissions, allowing authenticated users to recover restricted email ad...

CVE-2026-90934 EspoCRM before 10.0.4 Field-level Security Bypass via Attendees

EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addresses. Attackers can recover hidden attendee emails by exploiting incorrect ACL scope validation that checks parent...

ROOT-APP-PYPI-GHSA-PW6J-QG29-8W7F GHSA-pw6j-qg29-8w7f in tornado - Patched by Root

Root has patched GHSA-pw6j-qg29-8w7f in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-49855 CVE-2026-49855 in tornado - Patched by Root

Root has patched CVE-2026-49855 in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-QPPV-J76H-2RPX GHSA-qppv-j76h-2rpx in tornado - Patched by Root

Root has patched GHSA-qppv-j76h-2rpx in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-67422 CVE-2026-67422 in pymdown-extensions - Patched by Root

Root has patched CVE-2026-67422 in the pymdown-extensions package for Root:PyPI. Multiple fixed versions available...

CVE-2025-23266

CVE-2025-23266 CVE-2025-23266 – 完全に武器化されたNVIDIA Container Toolkit Exploit 参考文献 https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...

syswarden

SysWarden 監査可能でフェイルクローズドな強制を備えたホストローカルLinux防御。 SysWardenはオープンソースのLinuxセキュリティオーケストレーターであり、権威ある nftablesポリシー、ホストテレメトリ、脅威インテリジェンスリスト、 帯域外WAAPログ分析、認証付き高可用性、ネイティブの ターミナルダッシュボードを組み合わせたものです。アプリケーションデータパスに別の プロキシを置かずに、レビュー可能な単一のホスト防御レイヤーを求める運用者向けに設計されています。 SysWardenはインラインHTTPプロキシ、トラフィックサニタイザー、または規制認証...

RLSA-2026:67278 Moderate: perl:5.32 security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...