CVE-2020-11851

CVE-2020-11851 ArcSight Logger ArcSight Management Center를 통해에서의 원격 코드 실행 취약점 https://nvd.nist.gov/vuln/detail/CVE-2020-11851 요약 취약점 배경 ArcSight Logger는 조직 전반의 머신 데이터 로그를 통합 및 저장하고, 해당 데이터에 대한 빠른 검색 및 보고를 용이하게 하여 규정 준수 부담을 완화하고 보안 전문가의 신속한 포렌식 조사를 지원하는 포괄적인 로그 관리 솔루션입니다. ArcSight Management...

UBUNTU-CVE-2026-73147

GHSA-pc2g-2p95-4cr5: TCL command injection in reflector client...

PT-2026-80183

GHSA-pc2g-2p95-4cr5: TCL command injection in reflector client...

GO-2026-5634 Fleet Affected by Local Privilege Escalation via Tcl Command Injection in Orbit in github.com/fleetdm/fleet

Fleet Affected by Local Privilege Escalation via Tcl Command Injection in Orbit in github.com/fleetdm/fleet...

GHSA-RPHV-H674-5HP2 Fleet Affected by Local Privilege Escalation via Tcl Command Injection in Orbit

Summary The Orbit agent's FileVault disk encryption key rotation flow on collects a local user's password via a GUI dialog and interpolates it directly into a Tcl/expect script executed via exec.Command"expect", "-c", script. Because the password is inserted into Tcl brace-quoted send %s, a...

SiteScape Forum dispatch.cgi脚本TCL命令注入漏洞

BUGTRAQ ID: 26963 SiteScape Forum是一款协作解决方案，专用于满足企业、政府和军队中大型和/或分布式团队的通信和程序管理需要。 SiteScape Forum没有正确地处理发送给dispatcher.cgi脚本的某些请求，允许远程攻击者通过提交恶意HTTP请求注入并执行TCL命令。 SiteScape Forum ZX SiteScape Forum ST SiteScape --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...