CVE-2021-28476

CVE-2021-28476: vmswitch.sys의 게스트-호스트 "Microsoft Hyper-V 원격 코드 실행 취약점" 이것은 CVE-2021-28476 "Hyper-V 원격 코드 실행 취약점"에 대한 개념 증명PoC으로, 2021년 5월 Microsoft가 패치한 vmswitch.sys네트워크 가상화 서비스 제공자의 임의 메모리 읽기 취약점입니다. 이 취약점은 @australeo, @ergot86, @peleghd 및 @OphirHarpaz에 의해 발견되었습니다. 게스트 가상 머신이 VMBus를 통해 악의적인 RNDI...

Ubuntu 26.04 LTS : OpenSSL vulnerabilities (USN-8861-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8861-1 advisory. It was discovered that OpenSSL had an inefficient algorithm in its QUIC stream reassembly implementation. A remote attacker could possibly use this issue...

Siemens Desigo DXR and PXC Controllers Improper Check For Unusual or Exceptional Conditions (CVE-2026-59693)

A vulnerability has been identified in Desigo DXR2 All versions V01.21.233.16-7862, Desigo PXC3 All versions V01.21.233.16-7862, Desigo PXC4 All versions V02.21.194.36-2715, Desigo PXC5.E003 All versions V02.21.194.36-2715, Desigo PXC5.E24 All versions V02.21.194.36-2715, Desigo PXC7 All versions...

openSUSE 16 Security Update : valkey (openSUSE-SU-2026:21985-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21985-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the...

Cyber-Attack-Analysis

사이버보안 사례 연구: 2020년 Virgin Mobile KSA 침해 사고 📌 요약 2020년, 주요 보안 사고로 Virgin Mobile KSA가 침해되어 직원 통신 및 1,000명 이상의 사용자 개인 정보를 포함한 민감한 데이터가 도난당했습니다. 이 저장소는 공격 벡터, 악용된 기술적 취약점, 그리고 이후 다크 웹에서 판매된 데이터 유출로 이어진 전략적 실패에 대한 종합적인 분석을 제공합니다. 🔍 공격 분석 작동 방식 이 침해 사고는 패치되지 않은 취약점을 통한 초기 접근 후 내부 네트워크 스니핑이 이어진 전형적인...

CVE-2014-0224

이 저장소에는 README가 없습니다...

EAC-Kernel-Packet-Fucker

EAC-Kernel-Packet-Fucker 私のコードではありません。保存用です https://www.unknowncheats.me/forum/anti-cheat-bypass/503052-easy-anti-cheat-kernel-packet-fucker.html これは Easy Anti-Cheat Kernel Packet Fucker（略して EACKPFucker）です。 これは何か？基本的に、カーネルモードドライバー経由のパケットが彼らに送信されなくなるため、あなたの pasta pasta 2023 kdmapper FUD...

CVE-2024-53027-WIP

CVE-2024-53027-WIP POCの作業中 CVE-2024-53027: Qualcomm Bluetooth/Wi-Fi 脆弱性 📄 概要 CVE-2024-53027 は、Android デバイスの Qualcomm 製 WLAN および Bluetooth チップセット に影響する中程度の深刻度の脆弱性（CVSS 未評価）です。ワイヤレスパケット内の 不正なカントリー情報要素（IE） を処理する際に、一時的なサービス妨害（DoS） を引き起こす可能性があります。 🧩 影響を受けるコンポーネント Qualcomm WLAN ファームウェア Snapdragon チップセッ...

USN-8861-1 openssl vulnerabilities

It was discovered that OpenSSL had an inefficient algorithm in its QUIC stream reassembly implementation. A remote attacker could possibly use this issue to cause OpenSSL to use excessive CPU resources, leading to a denial of service. CVE-2026-42772 It was discovered that OpenSSL did not properly...

kernel: xfrm: hold dev ref until after transport_finish NF_HOOK

A flaw was found in the Linux kernel's xfrm IP eXtensible FRamework subsystem. This vulnerability involves a race condition where a network device's reference is released too early during packet processing after asynchronous cryptography. This premature release can lead to the system attempting t...

BIT-PHP-MIN-2025-1218 Various packet overreads in mysqlnd_writeprotocol.c

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

BIT-PHP-2025-1218 Various packet overreads in mysqlnd_writeprotocol.c

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

BIT-PGBOUNCER-2026-6668 Integer overflow causes an infinite loop in packet buffer growth in PgBouncer

Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all...

BIT-LIBPHP-2025-1218 Various packet overreads in mysqlnd_writeprotocol.c

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

CLEANSTART-2026-TV66074 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs

Security vulnerability affects the kube-state-metrics-fips package. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

Rocky Linux 9 [CIQ] Security Update: corosync / corosync-debuginfo / corosync-debugsource / etc Multiple Vulnerabilities (crlsa-2026_19200)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619200 advisory. corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via integer...

CentOS Linux 6 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs Multiple Vulnerabilities (CENTOS6:CLSA-2026:1777036898)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1777036898 advisory. - An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1782375682)

"The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1782375682 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: Don't redirect packets with invalid pktlen Syzbot fou...

AlmaLinux 9.2 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel (ALMALINUX9.2:CLSA-2026:1786718192)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786718192 advisory. - RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture...

Rocky Linux 9 [CIQ] Security Update: gpsd-minimal / gpsd-minimal-clients / etc Multiple Vulnerabilities (crlsa-2026_0771)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20260771 advisory. gpsd: gpsd: Denial of Service due to malformed NAVCOM packet parsing CVE-2025-67269 gpsd: gpsd: Arbitrary code execution via heap-based out-of-bounds write...