security-interview-questions

情報源 QUIZ: https://quizlet.com/231268221/general-information-security-questions-flash-cards/ SANSチートシート: https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets/ Offensive Security（OSCP）: https://411hall.github.io/OSCP-Preparation/...

CVE-2017-3881-Cisco

CVE-2017-3881 Cisco Catalyst RCE 概念実証 2017年4月10日 あなたのCatalystスイッチでtelnetをまだ有効にしていますか？よく考えてください。ここに、最新推奨ファームウェアを搭載したCatalyst 2960スイッチ向けのリモートコード実行の概念実証エクスプロイトがあります。エクスプロイトコードはこちらからご確認ください。以下は、2017年3月7日にCIAのアーカイブから流出し、2017年3月17日にCisco...

hive

WikiLeaksより: 本日、2017年11月9日、WikiLeaksは、CIAのマルウェア制御インフラストラクチャの主要コンポーネントであるHiveのソースコードと開発ログを公開します。...

Data-Shield_IPv4_Blocklist

Data‑Shield IPv4 Blocklist Community The Data-Shield IPv4 Blocklist Community は、悪意があると特定された IPv4 アドレスの公式かつキュレーションされたレジストリを提供します。継続的に更新されるこのリソースは、Firewall および WAF インスタンスを強化するための重要な脅威インテリジェンスを提供し、インフラストラクチャに堅牢な追加のセキュリティ層をもたらします。 主な機能と利点 プロアクティブな防御と攻撃対象領域の削減 Data-Shield IPv4 Blocklist Community...

CVE-2026-93952 Security Advisory 0183

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

ROS-20260922-73-0052

The vulnerability of the iscsithandletextcmd function in the drivers/target/iscsi/iscsitarget.c module of the Linux operating system’s TCM driver is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20260922-73-0070

The vulnerability of the rdsibsetupqp function in the net/rds/ibcm.c module of the Linux kernel’s networking functions is related to unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of...

ROS-20260922-73-0039

The vulnerability of the batadvtpsendercleanup function in the net/batman-adv/tpmeter.c module, which is part of the Linux kernel’s networking functions, is related to situations where there is a race condition in the signal handler. Exploiting this vulnerability could allow an attacker to...

ROS-20260922-73-0046

The vulnerability of the adis16260writeraw function in the drivers/iio/gyro/adis16260.c module of various types of embedded sensors in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, a...

ROS-20260922-73-0068

The vulnerability of the amdgpuvcecsreloc function in the drivers/gpu/drm/amd/amdgpu/amdgpuvce.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability...

ROS-20260922-73-0069

The vulnerability of the amdgpugarttableramfree function in the drivers/gpu/drm/amd/amdgpu/amdgpugart.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a...

ROS-20260922-73-0126

The vulnerability in golang-x-crypto is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20260922-73-0099

The vulnerability of the tegra124emcpreparetimingchange function in the drivers/memory/tegra/tegra124-emc.c module of the NVIDIA Tegra system controller driver is related to the use of an erroneous operator. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20260922-73-0097

The vulnerability of the dpsdpmessagedebugfswrite function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the copying of buffers without checking the size of the...

ROS-20260922-73-0033

The vulnerability of the sctpsfdo526stale function in the net/sctp/smstatefuns.c module of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

ROS-20260922-73-0044

The vulnerability of the iucvsockgetsockopt function in the net/iucv/afiucv.c module, which implements networking functions in the Linux kernel, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260922-73-0066

The vulnerability of the dw8250probe function in the drivers/tty/serial/8250/8250dw.c file of the console TTY driver in the Linux kernel’s parallel port is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260922-73-0095

The vulnerability of the espintcpsendmsg function in the net/xfrm/espintcp.c module, which implements networking functions in the Linux kernel, relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-80441

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting...

EUVD-2026-83301

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting...