soc-analyst-hub

🛡️ SOC 분석가 허브 — Tier 1 툴킷 Tier 1 SOC 분석가를 위한 무료 완전 오프라인 대화형 툴킷 — 침해 대응, 알림 분류, 위협 헌팅 및 분석가 온보딩을 다룹니다. 종속성 없음. 단일 HTML 파일. 아무 브라우저에서 열기. 🚀 라이브 데모 → 📦 내부 구성 ⚡ 침해 대응 체크리스트 가장 일반적인 침해 유형에 대한 단계별 대화형 체크리스트. 작업하면서 단계를 체크 — 진행 상황이 자동으로 저장됩니다. 피싱 이메일 조사 12단계 악성코드 / 엔드포인트 침해 12단계 무차별 대입 / 자격 증명 공격 12단계 데이터...

CVE-2026-11387-WooCommerce-SMS-OTP

CVE-2026-11387 SMS Alert ≤ 3.9.5 — 인증되지 않은 임의 비밀번호 재설정을 통한 권한 상승 WordPress 플러그인 SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery의 심각한 인증 결함입니다. 비밀번호 재설정에 OTP 검증이 활성화된 경우, 인증되지 않은 호출자가 전화번호가 등록된 사용자관리자 포함의 새 비밀번호를 설정할 수 있으며, 해당 전화번호의 소유를 증명할 필요가 없습니다. | ---|---...

Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value

Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value SummaryCalendar events carry a free-form meta object that is stored exactly as submitted, with no validation of the values inside it. The scheduler reads the per-event alert offset out of that object i...

CVE-2026-34190

Cross-Site Request Forgery CSRF vulnerability allows unauthorized deletion of alert commands via sequential, unvalidated GET requests when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards...

EUVD-2026-90592

Cross-Site Request Forgery CSRF vulnerability allows unauthorized deletion of alert commands via sequential, unvalidated GET requests when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-34190

A Cross-Site Request Forgery (CSRF) vulnerability exists in Pandora FMS (version 777 and onwards ). The flaw allows for the unauthorized deletion of alert commands because the system fails to validate sequential GET requests . This attack can occur when an authenticated administrator visits a mal...

CVE-2026-34190 CSRF in Alert Command Deletion

Cross-Site Request Forgery CSRF vulnerability allows unauthorized deletion of alert commands via sequential, unvalidated GET requests when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards...

github.com/grafana/grafana: Grafana: Information disclosure via alert rules list API

A flaw was found in Grafana. An authenticated user can query the alert rules list Application Programming Interface API to access alert rules stored in restricted folders they lack permission to read. When access restrictions are evaluated and a user has no readable folders, folder filtering is...

CVE-2026-13719

A flaw was found in Grafana. An authenticated user can query the alert rules list Application Programming Interface API to access alert rules stored in restricted folders they lack permission to read. When access restrictions are evaluated and a user has no readable folders, folder filtering is...

CVE-2026-13719

An authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of folders the user may read was empty, the folder restriction was dropped and every alert rule in the organization was returned. From Grafana 13.1.0,...

CVE-2026-13719 Alert rules in restricted folders disclosed via the alert rules list API

An authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of folders the user may read was empty, the folder restriction was dropped and every alert rule in the organization was returned. From Grafana 13.1.0,...

CVE-2026-13719 Alert rules in restricted folders disclosed via the alert rules list API

An authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of folders the user may read was empty, the folder restriction was dropped and every alert rule in the organization was returned. From Grafana 13.1.0,...

EUVD-2026-89774

An authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of folders the user may read was empty, the folder restriction was dropped and every alert rule in the organization was returned. From Grafana 13.1.0,...

CVE-2026-13719

In Grafana , an authenticated user can exploit a vulnerability in the alert rules API list endpoint to access alert rules in folders they are unauthorized to read. This occurs because folder restrictions are dropped when a user's permitted folder set is empty, potentially returning every alert ru...

Linux Distros Unpatched Vulnerability : CVE-2026-13719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of folders the...

CVE-2026-84440

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...

CVE-2026-84440 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...

EUVD-2026-89192

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...

CVE-2026-84440

IBM Guardium Data Protection 12.2 is vulnerable to command injection within its SNMP alert notification functionality. An authenticated attacker capable of influencing policy alert text can cause the SNMP alerter service to execute attacker-controlled data as operating system commands. Because th...

CVE-2026-84440 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...