cirro

Cirro is an extensible security research platform that enables researchers and penetration testers to collect, analyze, and visualize cloud environments and identity relationships through graph databases. Built with a modular architecture, Cirro can be extended to support multiple platforms and...

CVE-2024-2961

CVE-2024-2961 CVE-2024–2961 보안 문제 완화 스크립트 설명 이 저장소에는 GNU libcglibc 2.39 및 이전 버전에서 확인된 버퍼 오버플로 취약점CVE-2024-2961을 확인하고 완화하는 Bash 스크립트가 포함되어 있습니다. 이 취약점은 iconv 함수를 사용하여 요청 인코딩과 특정 중국어 확장 인코딩ISO-2022-CN-EXT 간을 변환할 때 PHP에 영향을 미칩니다. 악용될 경우 잠재적으로 광범위한 영향을 초래할 수 있습니다. 사용법 사전 요구사항 시스템 구성 파일을 수정하는 데 필요한 권한...

fisy-fuzz

FIle SYstem - FUZZer This is the full file system fuzzing framework that I presented at the Hack in the Box 2020 Lockdown Edition conference in April. Conference Talk Conference Talk Single Video Conference Material Goal The goal of this framework is to uncover kernel security bugs on UNIX system...

SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker

terrapincheck.py CVE-2023-48795 — SSH Terrapin 접두사 잘림prefix truncation 취약점을 위한 경량 Python 스캐너입니다. Terrapin 은 SSH의 프로토콜 수준 취약점으로, 능동적 중간자MitM 공격자가 협상된 확장 정보를 잘라내 연결 보안을 낮출 수 있게 합니다. 가장 치명적인 영향은 ext-info서버 서명 알고리즘에 사용와 pingOpenSSH의 no-auth 확장에 사용을 비활성화하는 것입니다. 📋 목차 취약점 정보 동작 원리 요구 사항 설치 사용법 출력 취약 조건...

e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

CVE-2026-17543 — PHP ext/pgsql에서 E'...' 백슬래시 탈출을 통한 SQL 인젝션 CVE-2026-17543CVSS 9.8 Critical, CWE-89에 대한 개념 증명PoC으로, PHP의 절차적 PostgreSQL 확장 기능에 존재하는 SQL 인젝션 취약점입니다. 취약점 요약 pginsert, pgselect, pgupdate, pgdelete 및 pgconvert는 모두 문자열 값을 phppgsqlconvert로 전달하며, 이 함수는 다음과 같이 동작합니다: 1. libpq의...

CVE-2016-5195

기록은 학습 목적으로만 사용하며, 불법적인 용도로 사용하는 것을 금지합니다 원리 이 취약점의 원리는 동시성Concurrency을 이용해 더티 페이지Dirty Page를 플러시Flush하여, 원래 읽기 전용 권한인 파일의 내용이 변경되도록 하는 것입니다 만약 수정된 파일이 root 소유이고 SUID 권한을 가지고 있다면, 이를 이용해 권한 상승Privilege Escalation을 수행할 수 있습니다 영향 범위 2016년 10월 이전에 컴파일되었고 버전이 2.6.22 4.8.3 사이인 커널, 2016년 10월 이후에는 대부분 패...

BIT-PHP-MIN-2026-91767 Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN

phpopensslmatcheswildcardname in ext/openssl/xpssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP...

BIT-PHP-2026-91767 Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN

phpopensslmatcheswildcardname in ext/openssl/xpssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP...

BIT-LIBPHP-2026-91767 Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN

phpopensslmatcheswildcardname in ext/openssl/xpssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP...

Rocky Linux 10.2 [CIQ] Security Update: php8.4 / php8.4-bcmath / php8.4-bcmath-debuginfo / php8.4-cli / etc Multiple Vulnerabilities (crlsa-2026_56969)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202656969 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Arbitrary code execution via out-of-bounds write in bccomp...

Rocky Linux 9 [CIQ] Security Update: apcu-panel / php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2026_57539)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202657539 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archives...

Rocky Linux 9 [CIQ] Security Update: php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2026_61259)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202661259 advisory. php: ext/openssl: memory corruption in opensslencrypt with AES-WRAP-PAD CVE-2026-14355 php: ext-pgsql: PHP: SQL injection via improper backslash escaping...

PT-2026-105116

php openssl matches wildcard name in ext/openssl/xp ssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes th...

PT-2026-105136

php openssl matches wildcard name in ext/openssl/xp ssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes th...

Rocky Linux 10.2 [CIQ] Security Update: php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2026_62614)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202662614 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar...

Rocky Linux 8 [CIQ] Security Update: apcu-panel / libzip / libzip-debuginfo / libzip-debugsource / etc Multiple Vulnerabilities (crlsa-2026_62334)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202662334 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archives...

PT-2026-105146

php openssl matches wildcard name in ext/openssl/xp ssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes th...

Rocky Linux 8 [CIQ] Security Update: apcu-panel / libzip / libzip-debuginfo / libzip-debugsource / etc Multiple Vulnerabilities (crlsa-2026_57574)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202657574 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archives...

Rocky Linux 9 [CIQ] Security Update: apcu-panel / php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2026_61903)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202661903 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archives...

EUVD-2024-55778

Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/modelreport/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can craft requests such as...