CVE-2026-86950

🛡️ CVE-2026-86950 — CoreGraphics セキュリティリサーチ 🔬 防御的セキュリティリサーチ • 脆弱性分析 • 検出 📌 概要 CVE-2026-86950 は、Apple の CoreGraphics コンポーネントに影響を与える高深刻度の脆弱性です。 この脆弱性は 境界外書き込み CWE-787 に分類され、脆弱なシステムが特別に細工されたコンテンツを処理した際に、メモリ破壊や任意コード実行を引き起こす可能性があります。 ⚠️ セキュリティに関する注意 このリポジトリは、許可されたセキュリティリサーチ、脆弱性評価、検出、および防御的分析...

Security Advisory 0191

Security Advisory 0191 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-102156 CVSSv3.1 Base Score: 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N CVSSv4.0 Base Score: 6.9...

PT-2026-107142

Improper neutralization of Lightweight Directory Access Protocol LDAP authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service...

CVE-2026-50751

CVE-2026-50751 Check Point IKEv1 スキャナー CVE-2026-50751 用のマルチスレッド脆弱性スキャナー。Check Point Quantum Security Gateways に影響を与える重大なIKEv1認証バイパスの脆弱性です。 概要 IKEv1が有効なCheck Point Remote Access VPNシステムは、認証バイパス攻撃に対して脆弱です。このツールは、ターゲットシステムでIKEv1が有効かどうかを検出します。 CVE-2026-50751 詳細: CVSSスコア : 9.8 重大 脆弱性 : Check...

CVE-2026-60206

🚨 CVE-2026-60206 — WebLogic SAML 탈취 Oracle WebLogic Server SAML 인증 취약점 Oracle WebLogic Server에 영향을 미치는 CVE-2026-60206에 대한 기술적 분석. 📖 개요 CVE-2026-60206 은 Oracle WebLogic Server 에 영향을 미치는 중요CVSS 9.9 취약점입니다. Oracle에 따르면, SAML 을 통해 네트워크 액세스 권한이 있는 낮은 권한의 인증된 공격자가 이 취약점을 악용하여 취약한 WebLogic 인스턴스를 완전히 장악할...

CVE-2021-36630

CVE-2021-36630 Ruckus의 SmartZone 시리즈 장치에 보안 위험이 있습니다. 제조사에 통보한 후, 적극적으로 기술 인력을 조직하여 조사를 진행했습니다. 이 기간 동안 우리는 여러 차례 보안 제안과 검증 방법도 제공했습니다. 7월 19일, 회사는 공식적으로 보안 공지를 발표했습니다. 요청 보내기 공격 명령: echo "" | nc -4u ip:address 9001 IP 주소 예시: 62.210.8.110?111.107.251.71RuckusWireless SZ ip 예시 영향을 받는 버전...

CVE-2022-21907

CVE-2022-21907 설명 CVE-2022-21907용 POC: HTTP 프로토콜 스택 원격 코드 실행 취약성. 작성자: Malwareman, 2022-09-17. 상세 정보 HTTP 프로토콜 스택 원격 코드 실행 취약성. https://github.com/antx-code/CVE-2021-31166CVE-2021-31166와 유사합니다. 이 문제는 작년에 https://github.com/antx-code/CVE-2021-31166CVE-2021-31166에서 보고된 이후로 여전히 존재합니다. CVE 심각도...

CVE-2026-4480-POC

CVE-2026-4480 - Samba印刷サブシステムのリモートコード実行 概要 CVE-2026-4480 に関連する概念実証および研究資料。これはSamba印刷サブシステムに影響を与える重大なリモートコード実行（RCE）脆弱性です。 この脆弱性は、設定された print command に %J 置換パラメータを通じて渡される、ユーザー制御の印刷ジョブ記述の不適切な処理に起因します。 脆弱性の詳細 CVE: CVE-2026-4480 コンポーネント: Samba印刷サブシステム 種類: OSコマンドインジェクション（CWE-78） 影響: リモートコード実行 攻撃ベクトル:...

CVE-2026-105295 GitAhead 2.5.0 through 2.7.1 Unverified Update Installation and TLS Bypass

GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid certificate once can intercept later automatic...

CVE-2021-44228

CVE-2021-44228 2021년 12월 9일, 세계는 Log4J 관련 새로운 보안 결함을 알게 되었습니다. 이 취약점의 CVSSv3 Common Vulnerability Scoring System 점수는 10으로 평가되어 치명적 수준입니다https://nvd.nist.gov/vuln/detail/CVE-2021-44228. CVSSv3 해당 CVSSv3 벡터는 다음과 같습니다: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. 평가 이유를 완전히 이해할 수 있도록 각 값에 대해 설명하겠습니...

BIT-DOTNET-2026-69304 ASP.NET Core Denial of Service Vulnerability

Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...

PT-2026-105087

Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12;...

CVE-2026-49994

Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when authenabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/ handlers settings, devices, groups, per-device endpoints including /api/device/mac/notes called no auth check at all. A netwo...

CVE-2026-27867

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat in this case, registration action is required who has the vulnerable firmware version could inject a specific payload via the parameter "cmdcookie" withing the /upgrade/index.html resulting in to a Cross-Site...

EUVD-2026-86931

An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat in this case, registration action is required who has the vulnerable firmware version could inject a specific payload via the parameter "cmdcookie" withing the /upgrade/index.html resulting in to a Cross-Site...

CVE-2026-82157

Dell ThinOS 10, versions prior to SecurityAddon2605.10.2766T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access...

Improper Authentication

Spring Cloud Azure is vulnerable to improper authentication. The vulnerability is due to insufficient authentication controls, which allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-66079

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, parsearrayprimitive/2 for constructor 0x45 list0 returns an element with byte-width B = 0. The enclosing array32 parser at line 148 reads a 4-byte Count from the wire and loops Count times consumin...

CVE-2026-18490

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to unauthenticated remote code execution due to a Java native deserialization flaw. The issue resides in the PayDir Business Rules Manager RMI SSL endpoint, specifically within BrmRMISSLServerSocketFactory.java:95, EP8. An...