CVE-2026-75347

EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format CPF handling logic. This allows a remote attacker to cause a denial of service...

badssl.com

badssl.com에서 테스트 서브도메인 목록을 확인하세요: self-signed.badssl.com expired.badssl.com mixed.badssl.com rc4.badssl.com hsts.badssl.com 서버 설정 기본 Ubuntu VM, badssl.com. 및 .badssl.com.에 대한 DNS A 레코드가 VM을 가리키고 있습니다. 테스트 및 개발 1. Docker 설치 안내를 따릅니다. 2. git clone https://github.com/chromium/badssl.com && cd...

catphish

CATPHISH 피싱 공격을 위해 유사한 도메인을 생성합니다. 만료된 도메인과 분류 상태를 확인하여 프록시 분류를 우회합니다. 화이트리스트에 등록된 도메인은 C2 서버에 완벽합니다. Red Team 활동에 적합합니다. 설치 bundle install 현재 알고리즘 SingularOrPluralise prependOrAppend doubleExtensions mirrorization homoglyphs dashOmission Punycode Version 1.1.0: The parser for command line option...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

domainhunter

도메인 헌터 저자 Joe Vest @joevest & Andrew Chiles @andrewchiles 도메인 이름 선택은 침투 테스트, 특히 레드 팀 활동 준비의 중요한 측면입니다. 일반적으로 이전에 양성 목적으로 사용되었고 적절히 분류된 도메인은 몇 달러만으로 구매할 수 있습니다. 이러한 도메인은 피싱 및 C2 관련 작업을 위해 평판 기반 웹 필터와 네트워크 이그레스 제한을 우회하는 데 사용될 수 있습니다. 이 Python 기반 도구는 Expireddomains.net 검색 엔진을 빠르게 쿼리하여 사용 이력이 있는 만료/사...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

EUVD-2026-95916

EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format CPF handling logic. This allows a remote attacker to cause a denial of service...

CVE-2026-107721

fast-jwt provides fast JSON Web Token JWT implementation. Prior to 6.3.0, fast-jwt createVerifier accepts Infinity for clockTolerance because its option validation checks type and negativity but not finiteness. In validateClaimDateValue, infinite positive and negative modifiers make exp and nbf...

NPM: fast-jwt: Verifier cache accepts expired JWTs without iat.

NPM: fast-jwt: Verifier cache accepts expired JWTs without iat. vulnerability discovered by ? in WordPress Npm fast-jwt versions = 6.3.3...

CVE-2026-107719

The fast-jwt library (prior to version 6.3.4 ) contains a vulnerability in its createVerifier cache. When caching is enabled, the system may continue to accept a signed JWT after its exp time if the token lacks an iat claim. This occurs because src/verifier.js only derives the expiration deadline...

DEBIAN-CVE-2026-92821

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

UBUNTU-CVE-2026-92821

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

EUVD-2026-92894

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

CVE-2026-92821 Sssd: sssd: access control bypass via premature ldap access rule evaluation

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

CVE-2026-92821

A vulnerability exists in SSSD where improper configuration allows an access control bypass in LDAP environments. If the system is configured to evaluate password expiration warnings before restrictive access rules, an expired-password warning causes the rule evaluation to terminate early, treati...

CVE-2026-92821

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

PT-2026-106292

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

Linux Distros Unpatched Vulnerability : CVE-2026-92821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol...

CVE-2022-24449

CVE-2022-24449 Solar Appscreener XXE 권장 설명 Solar AppScreener SAST 도구 3.10.4 이하 버전에서 문제가 발견되었습니다. 인가되지 않은 공격자는 만료되었거나 설치되지 않은 라이선스가 있는 호스트에 특수하게 조작된 XML 파일을 업로드하여 취약한 버전이 설치된 호스트를 악용할 수 있습니다. 최소 승인된 영향은 XXE-SSRF입니다. 추가 정보 수정됨: 3.10.4 취약점 유형 기타 CWE-611: XML 외부 엔터티 참조의 부적절한 제한 제품 공급업체 SOLAR SECURITY...

CVE-2026-46455

CVE-2026-46455 — camel-keycloak ISACTIVE 검사 누락 만료된 토큰 허용 동일한 Apache Camel 취약점에 대한 실행 가능한 PoC 재현 도구로, 런타임별로 하나씩 제공됩니다: 런타임| 디렉터리| 스택 ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-keycloak 4.18.2 Camel Quarkus| camel-quarkus/| Quarkus 3.36.0 + Camel Quarkus 3.36.0 Cam...