6217 matches found
Check-CVE-2021-23383
Check-CVE-2021-23383 CVE-2021-23383 악용 조건을 handlebars 라이브러리 버전 평가를 통해 확인합니다...
RatRace
RatRace 웹 애플리케이션, API 및 현대 서비스에서 경쟁 상태race condition를 체계적으로 탐지하고 악용하기 위한 경량 CLI 도구입니다. 해결하는 문제 경쟁 상태는 현대 애플리케이션에서 가장 영향력이 큰 보안 취약점 중 하나이지만, 자동화 스캐너로는 거의 탐지되지 않습니다. Nuclei, ffuf, sqlmap과 같은 도구는 정적 취약점을 찾는 데 탁월하지만, 동시성 기반 문제에는 근본적으로 무감각합니다. 오늘날 침투 테스터는 각 작업마다 임시 스크립트를 직접 작성하거나 경쟁 상태 테스트를 완전히 건너뛰어야 ...
toxy
toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...
MAccConc
개요 이것은 Linux 커널 경쟁 조건race condition을 탐구하고 일반적인 커널 디버깅을 위한 도구입니다. 발표 블로그 글 https://projectzero.google/2026/09/maccconc-race-condition.html도 참고하세요. 현재 세 가지 도구가 있습니다: 1. Linux 커널 실행 및 메모리 접근의 KCOV 트레이스를 보기 위한 GUI로, 동시 실행에 초점을 맞추고 있으며, 경쟁 조건의 특정 실행 순서를 강제하기 위한 것입니다. 2. 동일한 기능을 하지만 더 적은 기능을 제공하는 터미널 U...
BasicHook
BasicHook 32비트 상대 점프를 사용하여 함수를 후킹하며, 쓰기는 경쟁 조건을 피하기 위해 원자적으로 수행됩니다. 명령어 길이 디스어셈블리를 위해 hde32를 사용합니다...
brawl-public-game-001
BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...
EUVD-2026-94463
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...
CVE-2026-76458
The Cisco NX-OS Software is affected by vulnerabilities involving the improper handling of exceptional conditions (CWE-703), as identified during a proactive internal security review. The high-severity issue (CVSS 3.1: 8.6) primarily impacts availability and can be triggered over a network with l...
CVE-2026-76458 Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Handling of Exceptional Conditions Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...
PT-2026-107600
Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description An issue exists due to the improper handling of exceptional conditions, which refers to a failure to account for unexpected states or errors during software execution. Recommendations At...
CVE-2026-105242
Improper Handling of Exceptional Conditions vulnerability in the aspne...
DEBIAN-CVE-2026-105242
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
CVE-2026-105242 Apache log4net: Request validation failure drops the event in the aspnet-request converter
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
EUVD-2026-93867
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
CVE-2026-105242 Apache log4net: Request validation failure drops the event in the aspnet-request converter
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
CVE-2026-105242 Apache log4net: Request validation failure drops the event in the aspnet-request converter
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
CVE-2026-105242
The Apache log4net logging framework (versions 1.2.11 through 3.5.0 ) is vulnerable to an Improper Handling of Exceptional Conditions (CWE-755) in the aspnet-request pattern converter. When reading request parameters, certain content—such as markup—triggers ASP.NET request validation , causing th...
Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_21557)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202621557 advisory. kernel: can: j1939: j1939sessionnew: fix skb reference counting CVE-2024-56645 kernel: ima: don't clear IMADIGSIG flag when setting or removing non-IMA...
PT-2026-107234
Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.11 through 3.4.x Description Improper handling of exceptional conditions in the aspnet-request pattern converter allows a sender to suppress the log record of their own request. When reading request parameters,...
Astra Linux – Vulnerability in Firefox and Thunderbird
Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...