27942 matches found
CVE-2024-21626
이용: 1.git clone https://github.com/cdxiaodong/CVE-2024-21626 2.docker-compose up 검증: 호스트의 /etc/passwd를 획득할 수 있다면 해당 취약점이 존재합니다. 환경: runc: =v1.0.0-rc93,=1.1.11 공격 세부 원리: runc 영향 버전에서는 초기화 과정에서 호스트의 /sys/fs/cgroup 핸들을 포함한 일부 내부 파일 디스크립터가 유출되며, runc는 최종 작업 디렉토리가 컨테이너의 마운트 네임스페이스 내에 있는지 검증하지 않습니다. 공격...
CVE-2026-106198
A missing authorization flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/510773353...
CVE-2026-106329
An incorrect authorization flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562043997...
CVE-2026-107805
Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated...
EUVD-2026-95818
Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated...
EUVD-2026-95816
Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The...
CVE-2026-104629 Grid Protection Alliance openPDC and openHistorian Use of Externally-Controlled Input to Select Classes or Code
A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, an...
EUVD-2026-95783
A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, an...
CVE-2026-78340
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code executio...
CVE-2026-78340
Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is vulnerable to a Path Traversal vulnerability (CWE-22). A high privileged attacker with local access could exploit this flaw to achieve Code execution and Filesystem access . No specific exploit information or in-...
EUVD-2026-95587
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code executio...
CVE-2026-78340
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code executio...
CVE-2026-78019
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesyst...
CVE-2026-78019
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Inclusion of Functionality from Untrusted Control Sphere (CWE-829). A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges , Filesystem access , and ...
EUVD-2026-95569
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesyst...
CVE-2026-78019
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesyst...
CVE-2026-78019
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesyst...
binwalk
Binwalk Binwalk es una herramienta rápida y fácil de usar para analizar, realizar ingeniería inversa y extraer imágenes de firmware. Aviso de fin de vida útil EOL Este fork nació para corregir algunos problemas pendientes de binwalk v2 y, en general, para mantenerlo en buen estado. Cumplió su...
psa-2026-00043-recovery
psa-2026-00043-recovery ランサムウェアを装ったワイパーからの復旧 — インターネットに露出したProxmoxインフラストラクチャへの攻撃後（PSA-2026-00043-1 / CVE-2023-54391 ）。 攻撃者はゲストを消去し、ファイルシステムを破損させたままにしました。ゲストの種類に応じて2つの復旧経路があります: データベースゲスト — 生のWiredTigerページからBSONドキュメントをカービング アプリケーションホスト — 破損したファイルシステムからファイル（nginx、systemdユニット、env、アプリのルート）をカービング...
local-mcp
local-mcp 로컬 파일 작업을 위한 제로 의존성 MCP 서버. 13개의 파일시스템 도구 + 점진적 탐색을 위한 3개의 메타 도구 — SDK, 프레임워크, npm install이 필요 없습니다. MCP 프로토콜: 2024-11-05 · 전송: stdio + Streamable HTTP · 런타임: Node.js ≥ 22.0.0 아키텍처 local-mcp.mjs — 595 lines, 13 tools, entry point lib/mcp-core.mjs — 229 lines, stdio + HTTP transport, 9 M...