400 matches found
SpotifyC2
SpotifyC2 — クラウドベースのコマンドチャネル研究 Spotifyプレイリストを通じてコマンドを実行し、Telegram経由でコマンド出力を受信します。 SpotifyC2とは？ SpotifyC2 は、Windowsベースのサイバーセキュリティ研究プロジェクトであり、一般にアクセス可能なクラウドサービスをコントローラーとクライアント間の通信チャネルとしてどのように利用できるかを示しています。 従来のサーバーと通信する代わりに、クライアントは定期的にSpotifyプレイリスト...
[SECURITY] Fedora 45 Update: vhostmd-1.2-3.fc45
vhostmd provides a "metrics communication channel" between a host and its hosted virtual machines, allowing limited introspection of host resource usage from within virtual machines...
CVE-2026-102727: Improper Restriction of Communication Channel to Intended Endpoints
FTP Passive Data Connection Not Bound to the Authenticated Control Peer...
CVE-2026-90461: Improper Restriction of Communication Channel to Intended Endpoints
OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTPS Basic Authentication...
CVE-2026-59564
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal...
CVE-2026-72506
VoiceTra provided by National Institute of Information and Communications Technology NICT contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server or service controlled by an attacker, potentially resulting in the theft of input dat...
VoiceTra vulnerable to incorrectly specified destination in a communication channel
Overview VoiceTra provided by National Institute of Information and Communications Technology NICT contains the following vulnerability. Incorrectly specified destination in a communication channel CWE-941 - CVE-2026-72506 RyotaK of GMO Flatt Security Inc. reported this vulnerability to NICT and...
CVE-2026-72506
VoiceTra provided by National Institute of Information and Communications Technology NICT contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server or service controlled by an attacker, potentially resulting in the theft of input dat...
CVE-2026-72506
VoiceTra provided by National Institute of Information and Communications Technology NICT contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server or service controlled by an attacker, potentially resulting in the theft of input dat...
CVE-2026-72506
CVE-2026-72506 affects VoiceTra by the National Institute of Information and Communications Technology (NICT). The issue is an incorrectly specified destination in a communication channel, which may redirect users to a server or service controlled by an attacker. Consequences described include po...
CVE-2026-62836: Improper Restriction of Communication Channel to Intended Endpoints
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
Siemens Interniche IP-Stack Improper Verification of Source of a Communication Channel (CVE-2025-40820)
Multiple Industrial products are affected by a vulnerability in the Interniche IP-Stack. The affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere...
CVE-2023-49899
An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel...
EUVD-2023-60601
An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel...
EUVD-2026-43713
A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via...
CVE-2026-59841: Improper Restriction of Communication Channel to Intended Endpoints
A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via...
CVE-2026-57028
CVE-2026-57028 affects Juniper Networks Junos OS Evolved. An incorrectly initialized process meant to communicate only internally can be reached over the network via an open port, enabling an unauthenticated, network-based attacker to gain unauthorized access to license management. Affected scope...
CVE-2026-33803 Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...
CVE-2026-33803: Improper Restriction of Communication Channel to Intended Endpoints
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...