CVE-2026-21509

CVE-2026-21509 — Microsoft Office OLE 보안 기능 우회 Sentinel AI Defense 의 연구 분석 자료입니다. 방어 분석 전용 — 활발히 악용되고 있는 취약점에 대한 동작하는 익스플로잇이나 PoC는 게시하지 않습니다. Microsoft Office의 보안 기능 우회 취약점으로, 악의적으로 제작된 문서가 OLE 완화 조치가 차단해야 하는 COM 구성 요소를 로드할 수 있게 합니다. APT28 UAC-0001이 우크라이나 및 동유럽 표적을 대상으로 적극적으로 악용하고 있습니다. 📄 전체 분석 문...

CVE-2017-8367

CVE-2017-8367 CVE-2017-8367 취약점에 대한 PoC 익스플로잇 - Easy Mov Converter Register 기능의 스택 기반 버퍼 오버플로우. 사용법 스크립트를 실행하면 페이로드가 포함된 POCPayload.txt 파일이 생성됩니다. python3 payloadgeneratorCVE-2017-15950.py 출력 파일을 메모장에서 열고 ASCII 출력을 복사하여 Easy Mov Converter Register 기능의 사용자 이름 필드에 붙여넣으십시오...

CVE-2026-103288

Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions from 5.9.0 before 6.44.1. An authenticated member can delete comment likes or dislikes belonging to other users that they are not authorized to delete, resulting in an authorizatio...

CVE-2026-103289

Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data...

EUVD-2026-90682

Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data...

EUVD-2026-90681

Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions from 5.9.0 before 6.44.1. An authenticated member can delete comment likes or dislikes belonging to other users that they are not authorized to delete, resulting in an authorizatio...

CVE-2026-48172---LiteSpeed-cPanel-Plugin-Version-Auditor

CVE-2026-48172 - LiteSpeed cPanel 플러그인 취약점 감사 도구 이 저장소는 CVE-2026-48172 의 영향을 받는 LiteSpeed User-End cPanel 플러그인의 취약한 설치를 탐지하도록 설계된 로컬 보안 규정 준수 및 감사 도구를 포함합니다. 이 프로젝트의 목표는 시스템 관리자와 보안 엔지니어가 악의적인 악용이 발생하기 전에 자산을 식별하고 조치할 수 있도록 지원하는 것입니다. 🔍 취약점 개요 CVE ID : CVE-2026-48172 심각도 : 9.8 치명적...

Rocky Linux 10.2 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / libcurl / etc Multiple Vulnerabilities (crlsa-2026_69125)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202669125 advisory. libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse CVE-2026-8932 curl: curl: Information disclosure via incorrect .netrc...

CVE-2026-51875

Devika v1.0 is affected by a path traversal vulnerability in the Feature Agent save_code_to_project function. This flaw allows an attacker to write files outside the designated project workspace, which could lead to a full server compromise. While the vulnerability is documented, specific exploit...

Rocky Linux 10.0 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2025_18152)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202518152 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial ...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-runtime-dbg-9.0 / etc Multiple Vulnerabilities (crlsa-2026_54550)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654550 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Denia...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc Multiple Vulnerabilities (crlsa-2026_54542)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654542 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Denia...

Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_54541)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654541 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-runtime-dbg-9.0 / etc Multiple Vulnerabilities (crlsa-2026_54590)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654590 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc Multiple Vulnerabilities (crlsa-2026_55857)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202655857 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Denia...

Rocky Linux 10.0 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-runtime-dbg-9.0 / etc Multiple Vulnerabilities (crlsa-2025_18153)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202518153 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial ...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_54574)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654574 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Denia...

A Hybrid Approach to Malware Detection: Integrating Few-Shot Model-Agnostic Meta-Learning with Autoencoders

Ransomware has emerged as a major cybersecurity threat, with incidents increasing in frequency and impact across critical sectors. These attacks are typically launched through phishing emails, malicious downloads, or exploitation of software vulnerabilities to gain system access. Once inside, the...

SAGE: Similarity-Based Cleaning of Poisoned Training Data from Verified Examples

As machine learning increasingly relies on public, untrusted data sources, data poisoning attacks, which inject malicious examples into training data to induce misclassification of a chosen target, pose a growing threat. Existing defenses either assume zero ground-truth information about which...

Rocky Linux 8 [CIQ] Security Update: prometheus-jmx-exporter (crlsa-2020_4807)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20204807 advisory. snakeyaml: Billion laughs attack via alias feature CVE-2017-18640 Tenable has extracted the preceding description block directly from the CIQ security advisory. Not...