CVE-2026-84875 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-84875

The IBM Guardium Data Protection software, specifically versions 12.0, 12.1, and 12.2 , is vulnerable to a buffer overflow (CWE-119) within the Sniffer component . This flaw could allow a remote attacker to execute arbitrary code on the system. To mitigate this risk, IBM strongly recommends apply...

CVE-2026-107406 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: For the following versions: Applicable only...

CVE-2026-107406

A memory overflow vulnerability exists in NetScaler ADC and NetScaler Gateway when configured as a SAML SP or SAML IdP . This flaw can lead to Remote Code Execution (RCE) or a Denial of Service (DoS) . The vulnerability impacts various versions, including NetScaler ADC and Gateway versions before...

CVE-2026-78406

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-78401

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-16916

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary code due to a protection mechanism failure...

CVE-2026-12109

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer...

CVE-2026-107782

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

CVE-2026-101024

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitati...

MAL-2026-17702 Malicious code in kafka-helmsman (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75536e8621da28a0e941bd4a607da879a64ab71214e908992bf14840ed9a20b2 The sdist for kafka-helmsman 99.0.5 is a dependency-confusion placeholder targeting the internal Tesla project name...

chuckle

Chuckle - 자동화된 SMB 릴레이 스크립트 Chuckle이 작동하려면 몇 가지 도구가 필요합니다: SMBRelayX.py Veil git 최신 버전 Responder Chuckle이 사용 중인 버전을 감지합니다. Nmap Nbtscan unixwiz MSFconsole 사용법은 아주 간단합니다. root로 실행하거나 sudo를 사용하세요: sudo ./chuckle.sh 잠시 기다리거나 권한 있는 사용자가 인증하도록 유도하면 대상 머신에서 셸을 얻을 수 있습니다. 실행 시 주의하시고, 허가받지 않은 네트워크에서는 절대...

cq

cq Code Query, 범용 코드 보안 스캐닝 도구입니다. CQ는 코드에서 보안 취약점과 보안에 중점을 둔 코드 리뷰어에게 관심 있는 기타 항목을 스캔합니다. 발견된 문제에 대한 참조가 포함된 텍스트 파일을 출력 디렉터리로 출력합니다. 이러한 출력 파일은 검토하거나, grep과 같은 유닉스 명령줄 도구로 필터링하거나, 지정된 file:line 참조에서 코드베이스로 '점프'하는 수단으로 사용할 수 있습니다. 널리 사용되는 방식 중 하나는 출력 파일을 'todo' 목록으로 간주하여, 검토하면서 오탐으로 판단되는 참조를 삭제하거...

CVE-2026-25769

🚨 CVE-2026-25769 - Wazuh 안전하지 않은 역직렬화 RCE Wazuh 클러스터 모드에서 Worker ➜ Master 치명적인 원격 코드 실행 Wazuh 클러스터 통신의 안전하지 않은 역직렬화로 인해 손상된 worker 노드 가 master 노드에서 root RCE 를 달성할 수 있습니다. 📌 개요 CVE ID: CVE-2026-25769 제품: Wazuh 영향받는 버전: 4.0.0 → 4.14.2 수정 버전: 4.14.3 심각도: Critical CVSS v3.1: 9.1 CWE: CWE-502 —...

DroppedConnection

DroppedConnection Cisco ASA Anyconnect VPN 서비스를 에뮬레이션하여, 자격 증명이 무엇이든 수락및 로깅한 후 사용자 컨텍스트에서 실행되는 VBS를 클라이언트에 제공합니다. 블로그 포스트: https://research.nccgroup.com/2023/03/01/making-new-connections-leveraging-cisco-anyconnect-client-to-drop-and-run-payloads/ 사용 지침 1. 파일을 서버에 복사하세요. 2. python2저도 압니다만,...

CVE-2026-101024 Satel Netco Design Relative path traversal

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitati...

CVE-2026-101024

Satel Netco Design versions prior to v2.1.7 are vulnerable to a relative path traversal vulnerability within the data export functionality . An authenticated user with Viewer privileges can exploit this flaw to write attacker-influenced content to file system locations accessible to the applicati...

EUVD-2026-95286

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitati...

SharePoint-ToolShell-CVE-2025-53770-Incident-Analysis

SharePoint ToolShell CVE-2025-53770 사고 분석 개요 이 프로젝트는 ToolShell 취약점CVE-2025-53770을 이용하여 SharePoint 서버를 표적으로 삼은 실제 공격 시도에 대한 조사 내용을 기록합니다. 이 공격은 원격 코드 실행, 웹쉘 배포, 자격 증명 데이터 추출을 포함한 전체 악용 체인을 보여줍니다. 초기 접근 공격은 SharePoint 서버를 표적으로 하는 CVE-2025-53770 악용을 나타내는 의심스러운 경보로 시작되었습니다. 악용 요청 인증되지 않은 HTTP POST 요청...

CVE-2026-16916 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary code due to a protection mechanism failure...