OwnershipStealer

OwnershipStealer 이 C 코드는 지정된 파일의 소유권을 가져오려고 시도하는 콘솔 애플리케이션입니다. 코드 로직 프로그램은 먼저 명령줄 인수로 파일 이름이 지정되었는지 확인하고, 지정되지 않은 경우 사용자에게 파일 이름을 입력하도록 요청합니다. 그런 다음 다음 단계를 수행하여 파일의 소유권을 가져오려고 시도합니다: 현재 프로세스 토큰을 가져옵니다. SeTakeOwnershipPrivilege에 대한 LUID로컬 고유 식별자, Locally Unique Identifier를 조회합니다. 토큰에서...

Vulnerabilities fixed in Splunk Enterprise and Splunk Cloud Platform

Splunk has fixed vulnerabilities in Splunk Enterprise and Splunk Cloud Platform. The vulnerabilities are in several versions of Splunk Enterprise and Splunk Cloud Platform. They allow low-privileged users to bypass protections, view sensitive information, and abuse the REST API for user...

CVE-2026-20141

In Splunk Enterprise versions below 10.0.2, 10.0.3, 9.4.8, and 9.3.9, a low-privileged user who does not hold the "admin" Splunk role could access the Splunk Monitoring Console App endpoints due to an improper access control. This could lead to a sensitive information disclosure. The Monitoring...

console 路径遍历漏洞

console is an application by Grayson Groshong Individual Developer. A path traversal vulnerability exists in console versions prior to 2.8.0, which stems from a path traversal that could result in a write to a non-target directory...

July 11, 2023—KB5028171 (OS Build 20348.1850)

None None...

Malicious Package

Overview ui-extensions-dev-console-app is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...