CVE-2019-0708

원격 데스크톱 서비스이전 명칭: 터미널 서비스에 인증되지 않은 공격자가 RDP를 사용하여 대상 시스템에 연결하고 특수하게 조작된 요청을 전송할 때 원격 코드 실행 취약점이 존재합니다. 이 취약점은 사전 인증pre-authentication 상태에서 발생하며 사용자 상호 작용이 필요하지 않습니다. 이 취약점을 성공적으로 악용한 공격자는 대상 시스템에서 임의의 코드를 실행할 수 있습니다. 그런 다음 공격자는 프로그램을 설치하거나 데이터를 열람, 변경, 삭제하거나 모든 사용자 권한으로 새 계정을 만들 수 있습니다. 이 취약점을...

CVE-2025-55817

Тип уязвимости Межсайтовый скриптинг XSS Затронутый компонент Настройки соединения Nitro GraphQL от Chillicream содержат 3 различных поля ввода, уязвимых для межсайтового скриптинга XSS. Уязвимые параметры: SDL Schema Endpoint, Subscription Endpoint, SSE Subscription Endpoint Тип атаки Удаленный...

RDP-Guard

RDP Guard RDP Guard는 Windows 보안 로그에서 실패한 RDP 로그인 시도를 모니터링하고, 악성 원격 IP 주소를 Windows 방화벽을 통해 차단합니다. 기본값 이벤트 ID: 4625 로그온 유형: 3 또는 10 임계값: 3회 이상의 감사 실패 확인 간격: 15분 방화벽 규칙 이름: RDPGUARDyyyyMMddHHmmssfff 확인 중 차단할 IP가 발견되면 모든 IP가 단일 인바운드 방화벽 규칙에 remoteip 범위로 기록됩니다. IP가 이미 활성화된 광범위한 인바운드 차단 규칙에 포함되어 있으면 새...

CVE-2025-24054-PoC

CVE-2025-24054 PoC CVE-2025-24054에 대한 간단한 개념 증명 – Windows 라이브러리.library-ms NTLM 해시 노출 취약점. ⚠️ 교육 및 승인된 랩 사용 전용 설명 CVE-2025-24054는 공격자가 특수하게 조작된 .library-ms 파일을 사용하여 Windows 시스템이 피해자의 Net-NTLMv2 해시 를 유출하도록 강제할 수 있습니다. 피해자가 악성 .library-ms 파일이 포함된 ZIP을 추출하면 Windows 탐색기가 자동으로 SMB 연결을 시작하여 NTLM 해시를...

BIT-RABBITMQ-2026-66067 RabbitMQ: Stream protocol skips per vhost per user connection limits

RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The stream open handler calls only checkvhostaccess; it omits the node/vhost/user connection-limit checks that rabbitreader performs for AMQP. A developer %% FIXME comment at the cited line explicitly acknowledges th...

CVE-2015-8522.RCE

CVE-2015-8522 Приложение Tivoli FastBack Server 6.1.4 подвержено стековому переполнению буфера, позволяющему злоумышленникам получить произвольное выполнение кода ACE через удаленное TCP-подключение. PoC, предоставленный в этом репозитории, использует эту уязвимость для выполнения CMD.exe на...

CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection

CVE-2026-26898: 샤오미 Mi Router 4A Gigabit - Host 헤더 주입을 통한 SSRF -orange 요약 샤오미 Mi Router 4A Gigabit 에디션에서 서버 측 요청 위조SSRF 취약점이 발견되었습니다. 라우터의 웹 인터페이스가 HTTP Host 헤더를 검증하지 않아 인증되지 않은 공격자 가 라우터를 강제로 임의의 아웃바운드 TCP 연결을 수행하게 할 수 있습니다. 필드| 값 ---|--- 장치| 샤오미 Mi Router 4A Gigabit 에디션 펌웨어| 3.0.24 국제판 CVE|...

CVE-2021-4044

Сценарий проверки SSL Этот репозиторий содержит сценарий Python, который проверяет версию OpenSSL в вашей системе и тестирует SSL/TLS-соединения с указанным пользователем веб-сайтом. Сценарий предназначен для определения того, подвержена ли система уязвимости CVE-2021-4044, а также для тестирован...

CLEANSTART-2026-WT03886 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Security vulnerability affects the kube-state-metrics-fips package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection...

CentOS Linux 8.5 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal (CENTOS8.5:CLSA-2026:1786092535)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1786092535 advisory. - libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited...

AlmaLinux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal (ALMALINUX9.6:CLSA-2026:1778889816)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778889816 advisory. - libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTPS request after a...

Rocky Linux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal (ALMALINUX9.6:CLSA-2026:1778889816)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778889816 advisory. - libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTPS request after a...

CentOS Linux 8.4 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal (CENTOS8.4:CLSA-2026:1785319688)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1785319688 advisory. - A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even thoug...

Rocky Linux 9 [CIQ] Security Update: aardvark-dns / aardvark-dns-debuginfo / aardvark-dns-debugsource (crlsa-2026_36318)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202636318 advisory. aardvark-dns: Aardvark-dns: Denial of Service via truncated TCP DNS query and connection reset CVE-2026-35406 Tenable has extracted the preceding description block...

Rocky Linux 9 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / curl-minimal / etc (crlsa-2022_8299)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228299 advisory. curl: bad local IPv6 connection reuse CVE-2022-27775 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus...

CentOS Linux 8.5 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1774259901)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1774259901 advisory. - libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2022_7006)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227006 advisory. OpenJDK: excessive memory allocation in X.509 certificate parsing Security, 8286533 CVE-2022-21626 OpenJDK: HttpServer no connection count limit Lightweigh...

Rocky Linux 8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_7012)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227012 advisory. OpenJDK: improper MultiByte conversion can lead to buffer overflow JGSS, 8286077 CVE-2022-21618 OpenJDK: excessive memory allocation in X.509 certificate...

Rocky Linux 10.2 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / libcurl / etc Multiple Vulnerabilities (crlsa-2026_69125)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202669125 advisory. libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse CVE-2026-8932 curl: curl: Information disclosure via incorrect .netrc...

Rocky Linux 8 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / libcurl / etc Multiple Vulnerabilities (crlsa-2022_5313)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20225313 advisory. curl: OAUTH2 bearer bypass in connection re-use CVE-2022-22576 curl: credential leak on redirect CVE-2022-27774 curl: auth/cookie leak on redirect...