79 matches found
DEFCON-KQL-KUNG-FU-22
DEFCON-KQL-KUNG-FU-22 제 DEFCON30 Cloud Village KQL Kung Fu Workshop 슬라이드 데크는 여기에 있습니다: DEFCON30-KQL-Kung-Fu.pdf KQL 기술을 연습하고 싶다면 Microsoft가 방대한 로그 데이터로 유지 관리하는 이 Log Analytics 작업 영역을 방문하세요: aka.ms/lademo...
MySQL-Fu.rb
MySQL-Fu.rb MySQL-Fu는 제가 작성한 Ruby 기반 MySQL 클라이언트 스크립트입니다. 일반 MySQL 클라이언트가 수행하는 대부분의 작업을 수행합니다: SQL 셸, 데이터베이스/테이블 업데이트/삭제/드롭, 사용자 추가/삭제, gzip 옵션을 포함한 데이터베이스/테이블 덤프...... 또한 침투 테스트를 조금 더 쉽게 해주는 몇 가지 추가 옵션이 있습니다. 여러 내장 PHP 명령 셸 옵션과 Pentestmonkey의 PHP 리버스 셸, 파일 쓰기 및 읽기를 위한 여러 옵션읽은 모든 파일은 나중에 오프라인 분석을...
waf-fu
waf-fu 대화형 TUI를 갖춘 AWS WAF v2 로그 브라우저 및 리플레이어. CloudWatch, S3, WAF 샘플링 APISQLite 캐싱 포함에서 로그를 가져와 인증 감지 및 YAML 기반 필터링 기능을 갖춘 분할 창 터미널 UI에 표시하고, 헤더/쿠키/본문을 완전한 충실도로 유지하여 Firefox, Chrome 또는 curl을 통해 요청을 리플레이합니다. curl, JSON, HAR로의 일괄 내보내기를 지원합니다. 설치 PyPI에서 uv pip install waf-fu pipx install waf-fu git...
CVE-2026-18649
CVE-2026-18649 - GStreamer rtph264depay 무제한 메모리 증가 DoS GStreamer의 H.264 RTP 디페이라이로더rtph264depay에서 발생하는 리소스 고갈 취약점에 대한 개념 증명입니다. 동일한 패턴은 rtph265depay에도 영향을 줍니다. 이것은 무엇인가 H.264 FU-A 분할 RTP 재조립 과정에서 수신되는 각 프래그먼트는 크기 제한 없이 내부 GstAdapter 버퍼로 푸시됩니다. 어댑터는 FU 헤더의 조각 종료E 비트가 설정된 경우에만 버퍼를 비웁니다. 원격 공격자는 유효한...
CVE-2026-73574
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
EUVD-2026-58073
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
CVE-2026-73574
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
CVE-2026-73574
Zimbra Collaboration versions before 10.1.17 are affected by a local file inclusion (LFI) vulnerability in the Forward servlet of the Classic Web Client. The root cause is improper validation of the fu request parameter, allowing an unauthenticated attacker to supply a crafted path and disclose p...
CVE-2026-73574: Incorrect Resource Transfer Between Spheres
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
PT-2026-71680
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 10.1.17 Description A local file inclusion LFI issue exists in the Zimbra Classic Web Client within the Forward servlet. This is caused by improper validation of the fu request parameter, which allows an...
EUVD-2025-137619
Malicious code in gociay-unga-fu npm...
MAL-2025-11503 Malicious code in @zalastax/nolb-fu (npm)
The package @zalastax/nolb-fu was found to contain malicious code...
Malicious code in @zalastax/nolb-fu (npm)
The package @zalastax/nolb-fu was found to contain malicious code...
Malicious code in @zalastax/nolb-fu- (npm)
The package @zalastax/nolb-fu- was found to contain malicious code...
MAL-2025-11504 Malicious code in @zalastax/nolb-fu- (npm)
The package @zalastax/nolb-fu- was found to contain malicious code...
Ubuntu: Security Advisory (USN-6879-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MAL-2024-6877 Malicious code in drupal-fu (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in drupal-fu (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
isis.ub.fu-berlin.de Cross Site Scripting vulnerability OBB-3878597
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
