security-interview-questions

출처 QUIZ: https://quizlet.com/231268221/general-information-security-questions-flash-cards/ SANS 치트 시트: https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets/ Offensive Security OSCP: https://411hall.github.io/OSCP-Preparation/...

CVE-2017-3881-Cisco

CVE-2017-3881 Cisco Catalyst RCE 개념 증명 2017년 4월 10일 아직도 Catalyst 스위치에서 텔넷을 활성화해 두고 계신가요? 다시 생각해 보세요. 여기 최신 권장 펌웨어를 사용하는 Catalyst 2960 스위치를 위한 원격 코드 실행 개념 증명 익스플로잇이 있습니다. 익스플로잇 코드를 확인해 보세요. 다음은 2017년 3월 7일 CIA 아카이브에서 유출되어 2017년 3월 17일 Cisco Systems에 의해 공개적으로 공개된 취약점에 대한 익스플로잇 개발 과정의 상세한 분석입니다. 이 글...

hive

WikiLeaks에서: 오늘, 2017년 11월 9일, WikiLeaks는 CIA가 악성코드를 제어하는 인프라의 주요 구성 요소인 Hive의 소스 코드와 개발 로그를 공개한다. Hive는 CIA의 악성코드 운영자에게 중요한 문제를 해결해 준다. 대상 컴퓨터에 설치된 가장 정교한 악성코드 임플란트라도 주의를 끌지 않는 안전한 방식으로 운영자와 통신할 방법이 없다면 무용지물이다. Hive를 사용하면 대상 컴퓨터에서 임플란트가 발견되더라도 악성코드가 인터넷상의 다른 서버와 주고받는 통신만으로는 이를 CIA와 연결 짓기가 어렵다...

Data-Shield_IPv4_Blocklist

Data‑Shield IPv4 Blocklist Community The Data-Shield IPv4 Blocklist Community 는 악성으로 식별된 IPv4 주소의 공식적이고 선별된 레지스트리를 제공합니다. 지속적으로 업데이트되는 이 리소스는 방화벽 및 WAF 인스턴스를 강화하기 위한 핵심 위협 인텔리전스를 제공하여, 인프라에 강력한 추가 보안 계층을 제공합니다. 주요 기능 및 이점 사전 방어 및 공격 표면 축소 Data-Shield IPv4 Blocklist Community는 노출된 자산웹 앱, WordPress...

CVE-2026-93952 Security Advisory 0183

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

ROS-20260922-73-0052

The vulnerability of the iscsithandletextcmd function in the drivers/target/iscsi/iscsitarget.c module of the Linux operating system’s TCM driver is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20260922-73-0070

The vulnerability of the rdsibsetupqp function in the net/rds/ibcm.c module of the Linux kernel’s networking functions is related to unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of...

ROS-20260922-73-0046

The vulnerability of the adis16260writeraw function in the drivers/iio/gyro/adis16260.c module of various types of embedded sensors in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, a...

ROS-20260922-73-0039

The vulnerability of the batadvtpsendercleanup function in the net/batman-adv/tpmeter.c module, which is part of the Linux kernel’s networking functions, is related to situations where there is a race condition in the signal handler. Exploiting this vulnerability could allow an attacker to...

ROS-20260922-73-0068

The vulnerability of the amdgpuvcecsreloc function in the drivers/gpu/drm/amd/amdgpu/amdgpuvce.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability...

ROS-20260922-73-0069

The vulnerability of the amdgpugarttableramfree function in the drivers/gpu/drm/amd/amdgpu/amdgpugart.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a...

ROS-20260922-73-0126

The vulnerability in golang-x-crypto is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20260922-73-0099

The vulnerability of the tegra124emcpreparetimingchange function in the drivers/memory/tegra/tegra124-emc.c module of the NVIDIA Tegra system controller driver is related to the use of an erroneous operator. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20260922-73-0095

The vulnerability of the espintcpsendmsg function in the net/xfrm/espintcp.c module, which implements networking functions in the Linux kernel, relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260922-73-0066

The vulnerability of the dw8250probe function in the drivers/tty/serial/8250/8250dw.c file of the console TTY driver in the Linux kernel’s parallel port is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260922-73-0097

The vulnerability of the dpsdpmessagedebugfswrite function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the copying of buffers without checking the size of the...

ROS-20260922-73-0044

The vulnerability of the iucvsockgetsockopt function in the net/iucv/afiucv.c module, which implements networking functions in the Linux kernel, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260922-73-0033

The vulnerability of the sctpsfdo526stale function in the net/sctp/smstatefuns.c module of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

CVE-2026-80441

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting...

EUVD-2026-83301

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting...