Hale

정보 Hale는 모듈식 설계를 통해 C&C 서버에서 사용되는 새로운 프로토콜을 모니터링하는 새 모듈을 쉽게 개발할 수 있는 봇넷 명령 및 제어 모니터/스파이입니다. Hale는 많은 연결의 확장성을 처리하기 위해 Twisted로 개발된 IRC 및 HTTP 모니터를 제공합니다. 이 모듈들은 설정 가능한 프로토콜 문법과 봇 설정을 가지며 필요에 맞게 수정할 수도 있습니다. 캡처된 모든 로그와 파일은 데이터베이스에 저장되며, IRC의 경우 추적된 IP 번호도 저장됩니다. 운영자의 위치를 숨기기 위해 SOCKSv5 프록시를 통해 연결할...

Kibana 8.x < 8.19.22 / 9.0.x < 9.4.7 / 9.5.x < 9.5.3 Missing Authorization (ESA-2026-139)

The version of Kibana installed on the remote host is 8.x prior to 8.19.22, or 9.0.x prior to 9.4.7, or 9.5.x prior to 9.5.3. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-139 advisory. - Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of da...

CVE-2026-78582

Kibana is vulnerable to a Missing Authorization (CWE-862) flaw that allows an authenticated user with Synthetics privileges in a single space to permanently delete Synthetics monitors shared in other spaces where they lack access. If a monitor is associated with a private location, the operation ...

PT-2026-99426

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authorization flaw allows an authenticated user with Synthetics privileges limited to a single Kibana space to permanently delete Synthetics monitors shared into spaces they are not...

Kibana 8.19.22, 9.4.7, 9.5.3 Security Update (ESA-2026-139)

Missing Authorization in Kibana Leading to Unauthorized Deletion of Data Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding Synthetics privileges scoped to ...

CVE-2026-86679

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

CVE-2026-86679 Broken Access Control vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

CVE-2026-86679

ZohoCorp ManageEngine Applications Manager (versions 182000 and below ) is susceptible to a permissions validation issue . This vulnerability allows a low-privileged user to delete service monitors that are outside of their assigned scope. The documents do not provide specific details regarding t...

CVE-2026-86679 Broken Access Control vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

EUVD-2026-85293

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

PT-2026-97318

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

CVE-2026-86679: Improper Input Validation

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

CVE-2026-86585 Improper Verification of the Firmware Signature vulnerability

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86474 Improper Certificate Validation in the Firmware Download vulnerability

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

PT-2026-93434

Name of the Vulnerable Software and Affected Versions VEO Wi-Fi monitors versions prior to 01.48.001 VEO-XS Wi-Fi monitors versions prior to 01.48.001 Description The software fails to verify the digital signatures of firmware update packages. This allows an attacker who can control the update...

PT-2026-93429

Name of the Vulnerable Software and Affected Versions VEO Wi-Fi monitors versions prior to 01.48.001 VEO-XS Wi-Fi monitors versions prior to 01.48.001 Description The software fails to validate TLS certificates during the firmware update download process. This flaw enables a man-in-the-middle...

CVE-2026-86585: Improper Verification of Cryptographic Signature

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86474: Improper Certificate Validation

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098770 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipcmonreinitself. syzbot reported use-after-free of...

CVE-2026-68155

In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps advertising zero monitors A message of type CEPHMSGMONMAP contains a monmap that is sent from a monitor to the client. This monmap contains information about the existing monitors in the cluster. Currently...