Tivoli-Madness

Tivoli-Madness 권고 사항: CVE-2020-28054: JamoDat – TSMManager Collector v. = 6.5.0.21에 영향을 미치는 권한 우회 취약점 IBM Tivoli Storage Manager 명령줄 관리 인터페이스 버전 5, 릴리스 2, 레벨 0.1에 영향을 미치는 스택 기반 버퍼 오버플로우 안타깝게도, Hackerone의 트라이어저와 가장 무례한 만남을 가진 후, 다음과 같은 결론을 얻었습니다: IBM Tivoli Storage Manager는 지원이 종료되어 패치되지 않을 것입니다...

seal-security-nuget-demo-net7

브라우저 + CLI 데모 NuGet/C — .NET 7 에디션 왜 .NET 7 포크인가? 이것은 표준 seal-security-nuget-demonet9.0을 대상으로 함의 대상을 변경한 포크입니다. 익스플로잇 스토리, 컨트롤러, 그리고 봉인된 패키지 목록은 동일합니다 — TargetFramework만 다릅니다. 이 포크가 존재하는 이유는 대부분의 엔터프라이즈 고객이 요청 시 최신 .NET SDK로 전환할 수 없기 때문입니다. .NET 7은 2024년 5월 14일에 지원이 종료되었지만 , 실제 프로덕션 환경에서는 호환성, 인증...

seal-security-nuget-demo-net7

브라우저 + CLI 데모 NuGet/C — .NET 7 에디션 왜 .NET 7 포크인가? 이것은 표준 seal-security-nuget-demo net9.0 대상의 대상을 변경한 포크입니다. 익스플로잇 스토리, 컨트롤러, 시일드 패키지 목록은 동일합니다 — 오직TargetFramework만 다릅니다. 이는 대부분의 엔터프라이즈 고객이 요청에 따라 최신 .NET SDK로 전환할 수 없기 때문에 존재합니다. .NET 7은 2024년 5월 14일에 지원이 종료되었습니다 하지만 실제 프로덕션 환경에서는 호환성, 인증 또는 운영상의...

PT-2026-84054

Name of the Vulnerable Software and Affected Versions QVidium Opera11 version 3.3.2a26-Ax4x-opera11 Description An unauthenticated command injection issue exists in the CGI Script component. A remote attacker can exploit this by manipulating the ipaddr argument within the '/cgi-bin/net tr.cgi'...

aws__aws-sdk-java_CVE-2022-31159_1-12-2600

AWS SDK for Java L'AWS SDK for Java consente agli sviluppatori Java di lavorare facilmente con Amazon Web Services e di creare soluzioni scalabili con Amazon S3, Amazon DynamoDB, Amazon Glacier e altri servizi. Consulta l'AWS SDK for Java 2.x per iniziare. In modalità di manutenzione a partire da...

unshackle

Fine del supporto ⚠ Il progetto è ora archiviato e non sarà più sviluppato a causa del tempo necessario per mantenerlo e testarlo su VMware in un PC non molto performante. Unshackle - Strumento di bypass delle password Unshackle è uno strumento open-source per bypassare le password utente di...

EUVD-2026-67134

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...

Zyxel NAS Firmware 5.21- Remote Code Execution

Multiple Zyxel network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. Zyxel NAS devices achieve authentication by using th...

K000162640: BIND vulnerability CVE-2026-3592

Security Advisory Description BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18...

June 9, 2026—KB5094042 (Monthly Rollup)

None None...

June 9, 2026—KB5094041 (Monthly Rollup)

None None...

[SECURITY] [DLA 4659-1] debian-security-support update

Debian LTS Advisory DLA-4659-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón June 30, 2026 https://wiki.debian.org/LTS Package : debian-security-support Version : 1:11+2026.06.30 Debian Bug : 1109118 1121942 1135153 debian-security-support, the Debian...

EUVD-2026-35454

Insufficient input validation in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as of 2018 , and no further security updates are...

CVE-2026-0419

Insufficient input validation in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as of 2018 , and no further security updates are...

CVE-2026-0412

Insufficient input validation vulnerability in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows administrators connected to the local network to make unauthorized modification of router software and functionality. NETGEAR JR6150 reached End-of-Support status in...

CVE-2026-0419 Insufficient input validation vulnerability in NETGEAR JR6150

Insufficient input validation in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as of 2018 , and no further security updates are...

CVE-2026-0419

CVE-2026-0419 describes insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router, 802.11ac, dual-band; released 2014) that allows users on the local Wi‑Fi to execute operating system commands. The device is End-of-Support since 2018 with no planned security updates. The advisory notes t...

CVE-2026-0419 Insufficient input validation vulnerability in NETGEAR JR6150

Insufficient input validation in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as of 2018 , and no further security updates are...

CVE-2026-0412 Insufficient input validation vulnerability in NETGEAR JR6150 Web UI

Insufficient input validation vulnerability in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows administrators connected to the local network to make unauthorized modification of router software and functionality. NETGEAR JR6150 reached End-of-Support status in...

CVE-2026-0412

CVE-2026-0412 relates to the NETGEAR JR6150 Web UI and is described as an insufficient input validation vulnerability. The affected device is the NETGEAR JR6150 (AC750 WiFi Router, 2014 release) and the description states that administrators connected to the local network can make unauthorized mo...