inside-pegasus

Inside Pegasus: WhatsApp v. NSO Group 사건의 핵심 문서 NSO Group의 내부 문서, 제품 자료, 선서 증언을 선별해 모은 것으로, WhatsApp Inc. and Meta Platforms, Inc. v. NSO Group Technologies Limited and Q Cyber Technologies Limited 사건사건번호 4:19-cv-07123-PJH, 미국 캘리포니아 북부지방법원에서 공개 기록으로 유입된 자료입니다. 이 저장소는 Amnesty International의 Securi...

androidqf

androidqf androidqf Android Quick Forensics는 Android 기기에서 관련 법의학 데이터를 쉽게 수집할 수 있는 휴대용 도구입니다. androidqf는 Android 기기에서 데이터를 신속하게 수집할 수 있는 간단하고 휴대 가능한 크로스 플랫폼 유틸리티를 제공하기 위해 설계되었습니다. 기능적으로는 mvt-android와 유사합니다. 그러나 MVT와 달리 androidqf는 기술에 익숙하지 않은 사용자도 쉽게 실행할 수 있도록 설계되었습니다. androidqf로 추출된 데이터는 MVT로 분석할 ...

mvt

Mobile Verification Toolkit !IMPORTANT 최근 "v3" 브랜치를 병합했습니다. 이로 인해 호환성이 깨지는 변경 사항이 도입되었습니다. 다른 스크립트에서 mvt 출력에 의존하고 있었다면 해당 스크립트가 깨졌을 수 있습니다. 자세한 내용: https://github.com/mvt-project/mvt/issues/757 Mobile Verification ToolkitMVT은 Android 및 iOS 기기의 잠재적 침해를 식별하는 데 유용한 포렌식 추적 정보 수집 과정을 간소화하고 자동화하는 유틸리티...

investigations

조사 이 저장소에는 인권 옹호자를 대상으로 한 표적 위협에 관한 국제앰네스티Amnesty International의 기술 조사 중 일부에서 추출한 침해 지표IoC가 포함되어 있습니다. 이 지표들은 CC-BY 라이선스에 따라 공유됩니다...

CVE-2026-92598

A flaw was found in Nodemailer. This vulnerability arises from the failure to properly apply UTS-46 normalization when encoding international domain names. A remote attacker can exploit this by crafting recipient addresses with invisible characters or compatibility mappings. This allows them to...

commend_sqli

CVE-2023-XXXXX 제안된 설명 G8-VOIPRECCommend VoIPRec 웹 인터페이스는 로그인 페이지의 "Code" 매개변수에서 시간 기반 블라인드 SQL 인젝션에 취약합니다. 추가 정보 PoC: POST /cgi-bin/SecComRecX.cgi HTTP/1.1 Host: 192.168.88.10 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept: application/json, text/javascript...

Astra Linux – Vulnerability in Chromium

The double-free operation in the ICU of Google Chrome before version 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

CVE-2026-19425 Win Men Intermational｜Travel Agency Management System - SQL Injection

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

EUVD-2026-54835

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root...

Security Bulletin: IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. (CVE-2026-18097)

Summary IBM® Db2® could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. Vulnerability Details CVEID:CVE-2026-18097 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain...

EUVD-2026-53922

OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values SV frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect...

GHSA-8MXV-9XHP-86H4 rclone: S3 Redirect Sanitization Omits IBM IAM Bearer Tokens and SSE-C Keys

Summary The S3 redirect callback strips X-Amz-Security-Token when a redirect changes scheme or host, but it does not strip IBM IAM bearer authorization or customer-provided encryption keys. Two independently validated paths remain: - a same-host HTTPS-to-HTTP redirect preserves Authorization:...

EUVD-2026-53576

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning...

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU

Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. The CVEs listed in this document might affect some configurations of IBM WebSphere Application Server traditiona...

EUVD-2026-51259

IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...

CVE-2026-12118

IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments

Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies with an aim to siphon funds from international firms for more than nine years. According to Russian cybersecurity vendor F6, the threat actors have...

EUVD-2026-50058

IBM Observability with Instana Agent Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API...

EUVD-2026-50013

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 is vulnerable to an information disclosure due to sensitive information being...

CVE-2026-4932

IBM PowerVM Hypervisor vulnerability CVE-2026-4932 affects FW1110.00–FW1110.20 and FW1060.00–FW1060.71. Affects PowerVM Hypervisor and TME hardware; attacker with physical access to Transparent Memory Encryption could decrypt memory due to insufficient cryptographic entropy. Impact is high confid...