PowerShellArmoury

!IMPORTANT 이 저장소는 이제 보관되었습니다. 재미있는 여정이었지만, PSArmoury는 더 이상 유용하지 않다고 생각합니다. PowerShellArmoury PowerShell Armoury는 침투 테스터, "색상-삽입-여기"-팀 구성원 및 업무 중 다양한 PowerShell 도구를 사용하는 모든 사람을 대상으로 합니다. 이 도구를 사용하면 즐겨 사용하는 모든 PowerShell 스크립트를 단일 난독화된 파일로 다운로드하여 저장할 수 있습니다. Rubeus, PowerView 등을 수동으로 업데이트할 필요가 없습니다...

CVE-2021-21311

CVE-2021-21311 Adminerは、単一のPHPファイルで動作するオープンソースのデータベース管理ツールです。Adminerのバージョン4.0.0以降、4.7.9より前のバージョンには、サーバーサイドリクエストフォージェリの脆弱性が存在します。すべてのドライバーをバンドルしているAdminerバージョン（例：adminer.php）のユーザーが影響を受けます。これはバージョン4.7.9で修正されています。...

CVE-2017-9841

CVE-2017-9841 CVE-2017-9841 탐지 스크립트 Massimiliano Brasile 제작 발생 상황 2020년 1월 6일, PrestaShop의 대부분 버전에 영향을 미치는 보안 문제에 대해 통보받았습니다 이 경고는 2020년 1월 3일에 PS 팀에 의해 내부적으로만 공유되었습니다. 조사 결과, PHPUnit 1이라는 테스트 프레임워크 라이브러리가 Prestashop 1.7에서 사용되는 일부 프로덕션 모듈에 우연히 포함되어 있어 문제가 발생한 것을 발견했습니다 Prestashop API를 통해 또는...

CVE-2026-89479

In the Linux kernel, the following vulnerability has been resolved: sctp: stop processing a packet once its association is deleted sctpendpointbhrcv looks the association up only when chunk-asoc is NULL, and caches the result in chunk-asoc and chunk-transport without taking a reference. A packet...

CVE-2026-89479 sctp: stop processing a packet once its association is deleted

In the Linux kernel, the following vulnerability has been resolved: sctp: stop processing a packet once its association is deleted sctpendpointbhrcv looks the association up only when chunk-asoc is NULL, and caches the result in chunk-asoc and chunk-transport without taking a reference. A packet...

EUVD-2026-49869

wakaru is a JavaScript decompiler and unminifier toolkit. From 1.0.0 until 1.4.0, @wakaru/cli sanitizes bundle-controlled module filenames only once before writing extracted modules, so a crafted filename containing overlapping traversal sequences such as ....// collapses to ../ after sanitizatio...

EUVD-2026-41125

aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling...

GHSA-VCRF-J523-4MRF aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling

Summary AWS CDK aws-cdk-lib is an open-source framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. OS command injection issue in the NodejsFunction Docker bundling pipeline in aws-cdk-lib before 2.260.0 that might allow an actor who controls dependen...

CVE-2026-63397

remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL schema that is passed to genql to inject arbitrary JavaScript or TypeScript. The malicious code is injected into the generated schema.ts file and executes when the genql client is bundled and imported...

CVE-2026-63397 remorses/genql code injection

remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL schema that is passed to genql to inject arbitrary JavaScript or TypeScript. The malicious code is injected into the generated schema.ts file and executes when the genql client is bundled and imported...

Command Injection

Overview aws-cdk-lib is a Version 2 of the AWS Cloud Development Kit library Affected versions of this package are vulnerable to Command Injection via the OsCommand helper in the Docker bundling process. An attacker can execute arbitrary commands on the host running the toolchain by injecting she...

CVE-2026-13760

OS command injection in the NodejsFunction Docker bundling pipeline OsCommand helper in AWS aws-cdk-lib on all platforms might allow a actor who controls dependency version strings in a project's package.json file to execute arbitrary commands on the host running the CDK toolchain via injected...

CVE-2026-13760 OS Command Injection in aws-cdk-lib Docker Bundling

OS command injection in the NodejsFunction Docker bundling pipeline OsCommand helper in AWS aws-cdk-lib on all platforms might allow a actor who controls dependency version strings in a project's package.json file to execute arbitrary commands on the host running the CDK toolchain via injected...

PT-2026-54636

Name of the Vulnerable Software and Affected Versions aws-cdk-lib versions prior to 2.260.0 Description OS command injection exists in the NodejsFunction Docker bundling pipeline within the OsCommand helper. An actor who can control dependency version strings in a project's package.json file may...

CVE-2026-13749

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generate...

CVE-2026-13749

Snowflake CLI prior to 3.19 is affected by Improper neutralization in the Snowpark annotation processor callback template, enabling arbitrary code execution during bundling or deployment. An attacker can supply crafted project content that is interpolated into generated Python code, causing code ...

CVE-2026-13749

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generate...

CVE-2026-13749 Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generate...

EUVD-2026-40135

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generate...

PT-2026-53312

Name of the Vulnerable Software and Affected Versions Snowflake CLI versions prior to 3.19 Description Improper neutralization in the Snowpark annotation processor callback template allows arbitrary code execution during application bundling or deployment. An attacker can exploit this by providin...