CVE-2022-26809

CVE 설명 CVE-2022-26809 - 핵심 Windows 구성 요소RPC의 취약점으로, CVSS 점수 9.8을 받은 데에는 이유가 있습니다. 공격에 인증이 필요하지 않고 네트워크를 통해 원격으로 실행될 수 있으며, RPC 서비스의 권한으로 원격 코드 실행RCE이 가능합니다. RPC 서비스의 권한은 RPC 런타임을 호스팅하는 프로세스에 따라 달라집니다. 약간의 운이 따르는 이 치명적인 버그는 패치되지 않은 SMB를 실행하는 Windows 호스트에 접근할 수 있게 해줍니다. 이 취약점은 네트워크 외부에서 침입하기 위해, 그리...

blackbox-fuzzing

라우터 TL-WR902AC를 예로 한 IoT 기기 블랙박스 퍼징 이 문서는 제 학기 논문의 HTML 버전으로, PDF는 여기에서 내려받을 수 있다. 서론 퍼징은 소프트웨어에서 버그를 찾는 "가장 효과적인 방법 중 하나"가 되었다. 이러한 주장이나 이와 유사한 주장으로 많은 최신 퍼징 관련 논문이 시작된다 google-scholar. "Internet of Vulnerable Things"라는 주제에 대한 지난 학기 논문의 주요 목표는 메모리 관련 버그를 찾은 다음 이 취약점에 대한 익스플로잇을 작성하는 것이었다. 우리는 펌웨어...

PT-2026-97822

Name of the Vulnerable Software and Affected Versions mcp-remote versions 0.1.32 through 0.1.38 Description The software is subject to Server-Side Request Forgery SSRF, a flaw that allows a server to make requests to an unintended location. This occurs because the application trusts and fetches t...

PT-2026-96913

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description A Server-Side Request Forgery SSRF flaw exists that allows for privilege escalation. This issue is network-exploitable and can be triggered without authentication or user...

EUVD-2026-79818

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...

EUVD-2026-79810

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

PT-2026-92585

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

CVE-2026-78450

Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...

EUVD-2026-73848

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-78130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser. CVE-2026-78130 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-78133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling. CVE-2026-78133 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-84471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - openvpn - None Ubuntu Linux - Use-After-Free / Dangling Pointer in TLS Session Handling CVE-2026-84471 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-84134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Linux Distros Unpatched Vulnerability : CVE-2026-81501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - Unknown description CVE-2026-81501 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenabl...

dotnet: .NET Security Feature Bypass Vulnerability

A flaw was found in .NET. An unauthorized attacker can exploit this vulnerability over a network due to improper verification of cryptographic signatures. This allows the attacker to bypass a critical security feature, potentially leading to significant compromise of confidentiality, integrity, a...

EUVD-2026-61932

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Content Acquisition System. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...

PT-2026-78046

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher version 8.2.0.0.0 Oracle BI Publisher version 12.2.1.4.0 Oracle BI Publisher version 26.1.0.0.0 Description A security flaw in the BI Platform Security component allows a low privileged attacker with network access via HTTP...

Linux Distros Unpatched Vulnerability : CVE-2026-71194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the sa...

Photon OS 5.0: Wget PHSA-2024-5.0-92-0331

An update of the wget package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-92-0331. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Iperf PHSA-2025-5.0-91-0498

An update of the iperf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0498. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...