CVE-2022-3368

CVE-2022-3368 Avira Security의 Software Update 구성 요소에서 임의 파일 이동 취약점에 대한 PoC입니다. 사용자는 이 기능을 사용하여 PC에서 오래된 소프트웨어를 업데이트할 수 있습니다. 이 기능이 사용되면 Avira Security 서비스는 다운로드된 파일을 c:\ProgramData\Avira\Security\Temp에 저장합니다. 하위 디렉터리에 생성되는 첫 번째 파일은 형식이며, 이후 이 파일은 으로 이동됩니다앞의 숫자와 밑줄이 제거됨. 이 디렉터리에는 권한이 없는 사용자가 새로 생성...

python-tuf

소프트웨어 업데이트 시스템 보안을 위한 프레임워크 The Update Framework TUF는 안전한 콘텐츠 전달 및 업데이트를 위한 프레임워크입니다. 이는 다양한 유형의 공급망 공격으로부터 보호하고 손상에 대한 복원력을 제공합니다. 이 저장소는 Python으로 작성된 참조 구현 입니다. TUF 사양 버전 1.0을 준수합니다. Python-TUF는 다음 API를 제공합니다: tuf.api.metadata — TUF 메타데이터에 쉽고 안전하게 접근하고 파일로/부터 역직렬화를 처리하도록 설계된 "저수준" API...

Webnus Inc. Modern Events Calendar - Broken Access Control

Webnus Inc. Modern Events Calendar = 7.29.0 contains a broken access control vulnerability caused by incorrectly configured access control security levels, letting attackers bypass authorization, exploit requires no special privileges. id: CVE-2026-32583 info: name: Webnus Inc. Modern Events...

CrackAVFee

CVE 2022 3368（ソフトウェアアップデートの脆弱性） 発見者: @Wh04m1001 - @pxcs https://github.com/Wh04m1001/CVE-2022-3368 教育目的のみ！...

firepwner

CVE-2015-6357: Cisco FireSIGHT Management Center SSL検証の脆弱性に対するFirePWNERエクスプロイト はじめに 単独では、Cisco FireSIGHT Management Centerの証明書検証の脆弱性は中程度 の深刻度で、CVSS スコアは5.1 です。しかし、この脆弱性はSSL証明書の検証がなぜそれほど重要なのかを示す一例です。このエクスプロイトでは、この脆弱性を利用してCisco FireSIGHTシステム上で特権を伴うリモートコマンド実行を獲得する方法を実演します。このエクスプロイトは、SSL検証の脆弱性をCisco...

CVE-2024-22026

CVE-2024-22026 CVE-2024-22026에 대한 익스플로잇 POC - Ivanti EPMM "MobileIron Core" 영향 CVE-2024-22026은 Ivanti EPMM이전 명칭 MobileIron 서버 버전 12.1.0.0, 12.0.0.0 및 11.12.0.1 이전에서 발생하는 로컬 권한 상승 취약점입니다. 이 취약점으로 인해 로컬 공격자가 원격 URL의 악성 RPM 패키지를 통해 소프트웨어 업데이트 프로세스를 악용하여 시스템에 대한 루트 액세스 권한을 얻을 수 있습니다. 자세한 기술 정보는 전체 블로...

RHBA-2024:2413 Red Hat Bug Fix Advisory: glibc bug fix and enhancement update

Bulletin has no description...

Security Advisory 0182

Security Advisory 0182 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-86109 CVSSv3.1 Base Score: 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVSSv4.0 Base Score: 7.5...

Cisco IOS XR Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. Thes...

EUVD-2026-64950

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities...

Astra Linux – Vulnerability in Firefox and Thunderbird

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

ROOT-APP-NPM-CVE-2026-6402 CVE-2026-6402 in webpack-dev-server - Patched by Root

Root has patched CVE-2026-6402 in the webpack-dev-server package for Root:npm. Multiple fixed versions available...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (rocm)

Red Hat AI Inference 3.4.4 rocm is now available. Red Hat AI Inference...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (spyre)

Red Hat AI Inference 3.4.4 spyre is now available. Red Hat AI Inference...

Moderate: Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.4 (cuda)

Red Hat AI Inference Model Optimization Tools 3.4.4 cuda is now available. Red Hat AI Inference Model Optimization Tools...

Important: Red Hat Security Advisory: Migration Toolkit for Applications

A new version of Migration Toolkit for Applications MTA is now available. Migration Toolkit for Applications MTA accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. This solution provides insight throughout the adoption process, at both...

CLEANSTART-2026-GY63167 Security fixes in thingsboard 4.3.1.3-r1

Package thingsboard version 4.3.1.3-r1 fixes 82 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...

CLEANSTART-2026-UG13000 Security fixes in temporal-ui-server-fips 2.51.1-r1

Package temporal-ui-server-fips version 2.51.1-r1 fixes 36 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-SE70344 Security fixes in thingsboard 4.2.2.3-r1

Package thingsboard version 4.2.2.3-r1 fixes 84 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...

Intel NPU Driver August 2026 Security Update

Intel has informed HP of potential vulnerabilities identified for some Intel® NPU Drivers, which might allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilities. HP has identified...