gpg_reaper

GPG Reaper TL;DR: gpg-agent 캐시/메모리에서 GPG 개인 키 얻기/도용/복원 이 POC는 Windows에서 gpg-agent 메모리로부터 GPG 개인 키를 얻는 방법을 보여줍니다. 일반적으로 이는 10분 이내--default-cache-ttl 값에만 가능해야 합니다. 불행히도 housekeeping 함수캐시 정리를 담당는 GPG를 사용하는 경우에만 실행됩니다타이머가 없음. 따라서 일반적인 GPG 사용 사례예: 파일에 서명한 다음 GUI를 닫고 다른 작업 수행에서도 비밀번호는 여전히 gpg-agent 메모리...

EUVD-2026-92135

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...

CVE-2026-105222

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...

CVE-2015-3306

CVE-2015-3306 이 저장소는 ProFTPd 1.3.5 modcopy CVE-2015-3306 취약점에 대한 단일 파일 익스플로잇을 포함하며, 특히 TryHackMe Kenobi Lab을 위해 작성되었습니다. 취약점 설명 CVE-2015-3306 은 ProFTPd 1.3.5 에서 modcopy 모듈의 결함으로 인해 발견된 취약점입니다. 이 모듈은 FTP 파일 복사 작업을 가능하게 합니다. 이 취약점을 통해 THM 플레이어는 SSH 개인 키를 공유 위치로 복사하고 로컬 시스템에 마운트하여 SSH 개인 키를 사용해 사용자에...

CVE-2026-105222 alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...

CVE-2026-105222 alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...

PT-2026-104656

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl verify peer to FALSE, which is passed to CURLOPT SSL VERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service...

CVE-2026-67598

CVE-2026-67598 Emlog Pro — AI 어시스턴트의 TLS 인증서 검증 비활성화 네트워크 인접 MITM → LLM 공급자 API 키 탈취 및 AI 응답 주입 요약 · 공격 흐름 · 영향받는 코드 · 증명 · 수정 방법 · 타임라인 · 참고 자료 📋 한눈에 보기 | ---|--- CVE ID| CVE-2026-67598 제품| emlog/emlog — Emlog Pro 영향 범위| Emlog Pro 2.6.23까지 취약점 유형| CWE-295: 부적절한 인증서 검증 CVSS v4.0| 9.1 — 치명적Critica...

Pixnapping-Attack-on-Android

이 글은 암호화폐 저장 공간에서의 보안 위협 진화를 분석하며, 디지털 지갑을 보호하는 개인 키와 시드 문구를 탈취하는 현대적인 방법에 초점을 맞춥니다. 현대 암호화폐 생태계는 디지털 지갑 보안의 기반인 개인 키와 시드 문구를 노리는 사이버 공격의 증가하는 위협에 직면해 있습니다. 소프트웨어뿐만 아니라 현대 모바일 기기의 하드웨어까지 악용하는 공격의 복잡성과 정교함은 해마다 증가하고 있습니다. 클립보드 하이재킹, 키로깅, QR 코드 스푸핑, BIP32/BIP39 지갑 구현의 취약점 악용과 같은 전통적인 위협과 함께, 연구자들은...

LabAutomationCVE-2021-43798

LabAutomationCVE-2021-43798 저는 CVE-2021-43798Grafana의 경로 탐색 취약점을 악용하여 사용자 비밀SSH 키을 탈취한 다음, Linux 시스템에서 권한을 상승시키는SUID 사용 침투 테스트 자동화 스크립트를 만듭니다. 저는 이 랩을 자동화하여 침투 테스트 방법론을 공유합니다...

EUVD-2026-87482

OpenClaw is an npm-distributed application. In versions = 2026.4.25 and 2026.8.1, the workspace environment-variable filter did not block variables ending in ENDPOINT, so an untrusted workspace .env file could set AZURESPEECHENDPOINT. Azure Speech preferred that value over the configured region, ...

CVE-2026-90959

A path traversal vulnerability exists in pulpcore within the content upload API's file_url parameter. The root cause is a validation mismatch: the system rejects URLs starting with file://, but Python's URL parser accepts the file: scheme without double slashes. This allows an authenticated user ...

CVE-2026-90959 Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...

CVE-2026-90959 Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...

EUVD-2026-85920

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...

CVE-2026-86678

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions...

EUVD-2026-85296

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions...

CVE-2026-86678

ZohoCorp ManageEngine Applications Manager versions 182000 and below are vulnerable to a broken authentication flaw. This vulnerability allows a low-privileged user to obtain an administrator’s API key , which can then be leveraged to perform administrator-level actions . Exploitation details and...

CVE-2026-86678 Broken Authentication vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions...

CVE-2026-86678: Authorization Bypass Through User-Controlled Key

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions...