IIITA-IoT-Security-Research

IIIT 알라바드 – IoT 보안 연구 인턴십 개요 이 저장소는 Indian Institute of Information Technology, AllahabadIIIT Allahabad의 암호화·네트워크 보안CNS 연구실 에서 수행한 연구 인턴십 기간의 작업을 보여줍니다. 인턴십 기간 동안 저는 IoT 보안 , 펌웨어 역공학 , 취약점 연구 를 수행했으며, 임베디드 IP 카메라 펌웨어의 보안 평가에 중점을 두었습니다. 이 연구는 보안 취약점의 책임 있는 공개Responsible Disclosure로 이어졌으며, 해당 취약점은...

pentest-writeups

pentest-writeups Kioptrix Level 1 분석 보고서 - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — 침투 테스트 분석 보고서 저자: Amirbek Raxmatullayev @americo444 날짜: 2026-06-17 플랫폼: VulnHub 난이도: 초급 목표: root 권한 획득 1. 환경 설정 구성 요소| 세부 정보 ---|--- 호스트 OS| Ubuntu 26.04 하이퍼바이저| QEMU/KVM 대상| Kioptrix Level 1 VMDK 공격자 IP|...

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS devices. "The...

Vulnerability-Assessment-and-OSINT-CVE-2012-1823

취약점 평가 및 OSINT: CVE-2012-1823 이 저장소는 대상 네트워크 스캔 중 탐지된 특정 보안 취약점에 대한 식별, 분석 및 OSINT오픈소스 인텔리전스 정보 수집 과정을 문서화합니다. 프로세스 개요 이 평가에서 수행된 워크플로는 네 가지 주요 단계로 나뉩니다: 1. 정찰 및 취약점 탐지 사용 도구 : Nmap 조치 : 다음 명령을 사용하여 고급 네트워크 스캔을 실행했습니다: root@kitploit: nmap --script-help http-vuln-cve2012-1823 결과 : 대상 환경은 오래된...

web-penetration-drupal

웹 침투 테스트 — Drupal CVE-2018-7600 유형: 인턴십 프로젝트 | 회사: BB CyberSec | 기간: 2024년 11월 – 2025년 1월 📋 프로젝트 개요 이 프로젝트는 BB CyberSec에서의 사이버 보안 인턴십의 일환으로 Drupal 웹 애플리케이션에 대해 수행한 전체 침투 테스트를 문서화합니다. 평가는 Drupal 코어에 영향을 미치는 원격 코드 실행 취약점인 CVE-2018-7600 Drupalgeddon 2을 식별하고 악용하는 데 중점을 두었습니다. 🎯 목표 Drupal 기반 웹 애플리케이션에...

CVE-2026-58571

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-58571

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

EUVD-2026-69149

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-58571

Dell PowerStore is affected by an OS Command Injection vulnerability that allows an authenticated user with limited privileges to execute arbitrary commands with root privileges . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low complexity, low privileges required, changed scope...

CVE-2026-84109 Xinhu Rainrock RockOA webmainAction.php getOrder sql injection

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. Affected by this issue is the function getOrder of the file webmain/webmainAction.php. Executing a manipulation of the argument highorder can lead to sql injection. The attack can be launched remotely. The exploit has been made...

CVE-2026-84109 Xinhu Rainrock RockOA webmainAction.php getOrder sql injection

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. Affected by this issue is the function getOrder of the file webmain/webmainAction.php. Executing a manipulation of the argument highorder can lead to sql injection. The attack can be launched remotely. The exploit has been made...

EUVD-2026-69146

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. Affected by this issue is the function getOrder of the file webmain/webmainAction.php. Executing a manipulation of the argument highorder can lead to sql injection. The attack can be launched remotely. The exploit has been made...

CVE-2026-84109

A SQL injection vulnerability exists in Xinhu Rainrock RockOA versions up to 2.7.6 . The flaw resides in the getOrder function of webmain/webmainAction.php , where manipulation of the highorder argument can be exploited remotely with low privileges and no user interaction. The CVSS 3.1 base score...

EUVD-2025-210818

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...

CVE-2025-12768 FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...

CVE-2025-12768

CVE-2025-12768 is an out-of-bounds write vulnerability in FactoryTalk® Historian Machine Edition (Rockwell Automation). An attacker with low-level authentication can exploit it to achieve remote code execution on the affected device. The CVSS 4.0 score is 8.6 (HIGH) , with an adjacent network att...

CVE-2025-12768 FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...

CVE-2026-79684

Dell PowerStore contains a Protection Mechanism Failure vulnerability (CVE-2026-79684, CVSS 3.1 score 8.8 HIGH ). An authenticated user with limited privileges could bypass access restrictions to gain escalated privileges , with high impact on confidentiality, integrity, and availability over the...

CVE-2026-79684

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges...

EUVD-2026-69143

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges...