usbsas

usbsas는 신뢰할 수 없는 USB 대용량 저장 장치를 안전하게 읽기 위한 무료 오픈 소스GPLv3 도구 및 프레임워크입니다. 개요 심층 방어 개념과 최소 권한 원칙에 따라 usbsas의 목표는 USB 스택의 공격 표면을 줄이는 것입니다. 이를 위해 일반적으로 권한 있는 커널 공간에서 실행되는 대부분의 USB 관련 작업USB 패킷 파싱, SCSI 명령, 파일 시스템 등을 사용자 공간으로 이동시키고 각각 자체 제한된 보안 컴퓨팅 모드에서 실행되는 별도의 프로세스마이크로커널 방식로 분리했습니다. GNU/Linux에서 작동하며...

qrv

QRV — 64비트 RISC-V를 위해 다시 설계된 QNX Neutrino 기반 운영체제 QRV는 최신 64비트 하드웨어를 위해 QNX Neutrino 6.4 운영체제 를 처음부터 다시 적응시키고 재구현한 것입니다. 주요 아키텍처는 RISC-Vrv64g이며, x86-64 는 보조 대상입니다. 이 프로젝트는 2020년 크리스마스 이브에 시작되었습니다. QRV 라는 이름은 QNX 상표와의 연관성을 의도적으로 피한 것입니다. QRV는 단순한 커널이 아니라 전체 운영체제 입니다. 마이크로커널은 그 핵심이지만, 작업의 더 큰 부분은 그...

sel4-ics-gateway-demo

seL4 ICS 게이트웨이 데모 사이버 공격으로부터 산업 제어 시스템을 보호하기 위한 프로토콜 차단 및 패킷 포워딩 아키텍처를 비교하는 방어적 보안 연구 프로젝트입니다. 문서: 네트워크 아키텍처 - 네트워크 다이어그램 및 트래픽 흐름 컨테이너 아키텍처 - Docker 컨테이너 관계 CVE 설명 - 취약점 세부 정보 및 공격 메커니즘 연구 동기 현대의 ICS/SCADA 시스템은 2024년 1월 Modbus TCP를 통해 우크라이나 지역 난방 시스템을 표적으로 삼아 영하의 기온에서 600가구 이상이 난방을 사용하지 못하게 한...

Huawei EMUI and Huawei HarmonyOS have vulnerabilities related to input validation.

Huawei HarmonyOS EMUI is a microkernel-based distributed operating system developed by Huawei, offering seamless collaboration across devices. There are input validation vulnerabilities in Huawei EMUI and Huawei HarmonyOS. These vulnerabilities stem from the log service’s failure to properly hand...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. There is a security vulnerability in Huawei HarmonyOS, which stems from a logic bypass in the file system. This vulnerability may...

CVE-2026-34019

When Bidirectional Forwarding Detection BFD is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel TMM to stop processing BFD packets and cause the configured routing protocol to fail over. Note: Software versions which have reached...

CVE-2026-42920

When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2026-42409

When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM process to terminate. Note: Software versions which have reached End of Technical Support EoTS are n...

CVE-2026-42781

When embedded Packet Velocity Acceleration ePVA acceleration is configured, undisclosed local ethernet traffic can cause an increase in ePVA and Traffic Management Microkernel TMM resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2026-40423

When a SIP profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

F5 Networks BIG-IP : BIG-IP PEM iRules vulnerability (K000160875)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4 / 21.0.0.1. It is, therefore, affected by a vulnerability as referenced in the K000160875 advisory. When BIG-IP PEM iRules are configured on a virtual server iRules using commands starting...

F5 Networks BIG-IP : BIG-IP SIP profile vulnerability (K000161023)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.2 / 17.5.1.6 / 21.0.0.2. It is, therefore, affected by a vulnerability as referenced in the K000161023 advisory. When a SIP profile is configured on a virtual server, undisclosed traffic can cause the Traffic...

Huawei HarmonyOS 授权问题漏洞

Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. Huawei HarmonyOS has vulnerabilities related to authorization control, which may affect the confidentiality of services...

EUVD-2026-30002

When embedded Packet Velocity Acceleration ePVA acceleration is configured, undisclosed local ethernet traffic can cause an increase in ePVA and Traffic Management Microkernel TMM resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

EUVD-2026-29984

When BIG-IP PEM iRules are configured on a virtual server iRules using commands starting with CLASSIFICATION::, CLASSIFY::, PEM::, PSC::, and the urlcatquery command, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End...

EUVD-2026-29972

When a SIP profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

EUVD-2026-29963

When Bidirectional Forwarding Detection BFD is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel TMM to stop processing BFD packets and cause the configured routing protocol to fail over. Note: Software versions which have reached...

CVE-2026-42781

When embedded Packet Velocity Acceleration ePVA acceleration is configured, undisclosed local ethernet traffic can cause an increase in ePVA and Traffic Management Microkernel TMM resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2026-42409

When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM process to terminate. Note: Software versions which have reached End of Technical Support EoTS are...

CVE-2026-41956

When a classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...