aura-botnet

Aura Botnet C2 서버 봇넷의 C2 서버는 Django 프레임워크를 백엔드로 사용합니다. 가장 효율적인 웹 서버와는 거리가 멀지만, 다음과 같은 점으로 상쇄됩니다: Django는 매우 이식성이 뛰어나므로 테스트/교육 목적에 적합합니다. 서버와 데이터베이스는 aura-server 폴더에 포함되어 있습니다. Django에는 봇과 명령을 관리하는 데 사용할 수 있는 매우 직관적이고 강력한 관리 사이트가 포함되어 있습니다. 서버는 단순한 POST 요청만 처리하고 텍스트를 반환합니다. 정적 파일은 nginx와 같이 정적 파일...

Juniper Junos OS Vulnerability (JSA83016)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA83016 advisory. - A Stack-Based Buffer Overflow vulnerability in Juniper Networks Junos OS and Juniper Networks Junos OS Evolved may allow a local, low-privileged attacker with access to th...

CVE-2025-38128

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject malformed HCICMDSYNC commands In 'mgmthcicmdsync', check whether the size of parameters passed in 'struct mgmtcphcicmdsync' matches the total size of the data i.e. 'sizeofstruct mgmtcphcicmdsync' plus...

DEBIAN-CVE-2022-50027

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE There is no corresponding free routine if lpfcsli4issuewqe fails to issue the CMF WQE in lpfcissuecmfsyncwqe. If retval is non-zero, then free the iocbq request...

CVE-2024-58055

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: Don't free command immediately Don't prematurely free the command. Wait for the status completion of the sense status. It can be freed then. Otherwise we will double-free the command...

CVE-2024-58055 usb: gadget: f_tcm: Don't free command immediately

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: Don't free command immediately Don't prematurely free the command. Wait for the status completion of the sense status. It can be freed then. Otherwise we will double-free the command...

SUSE-SU-2021:2137-1 Security update for cryptctl

This update for cryptctl fixes the following issues: Update to version 2.4: - CVE-2019-18906: Client side password hashing was equivalent to clear text password storage bsc1186226 - First step to use plain text password instead of hashed password. - Move repository into the SUSE github organizati...

SUSE-SU-2021:1108-1 Security update for ceph

This update for ceph fixes the following issues: - ceph was updated to to 15.2.9 - cephadm: fix 'inspect' and 'pull' bsc1182766 - CVE-2020-27839: mgr/dashboard: Use secure cookies to store JWT Token bsc1179997 - CVE-2020-25678: Do not add sensitive information in Ceph log files bsc1178905 -...