EUVD-2026-75258

A vulnerability in the EndPoint Data Loss Prevention DLP enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not...

CVE-2020-6519

これは元々、PerimeterX社の公式Github から、私の仕事用Githubアカウント を通じて公開されました。 これは私の仕事ではありますが、すべての権利および法的な問題はPerimeterX社に帰属します。 Chromium 83 ゼロデイ 完全CSPバイパス クロスプラットフォーム CVE-2020-6519 Exploit DB 技術記事 （ 済み）...

vault-cve-2026-5006-audit

CVE-2026-5006 ツールキット（HCSEC-2026-32） Vault のテンプレート化ポリシーにおけるスラッシュインジェクションの脆弱性に対処するための2つのツールです。問題の説明と影響範囲の把握に役立つ対話型ウォークスルーと、稼働中のクラスターを検査して結果を Markdown に書き出す監査スクリプトです。 vault-cve-2026-5006-walkthrough.html - 問題を解説する対話型の自己完結型 HTML ファイル vault-cve-2026-5006-audit.sh - 読み取り専用のクラスター監査スクリプト。4つのレポートを生成します...

MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacked to change the trusted RouterOS policy mask, leading to privilege escalation...

CVE-2026-87479

Insufficient policy enforcement in Extensions in Google Chrome prior t...

soc-investigation-powershell-edrfreeze

PowerShell EDRFreeze 調査 LetsDefend ケーススタディ このリポジトリには、不審な PowerShell アクティビティ、GitHub でホストされたペイロード、EDRFreeze ツールの実行を含む LetsDefend シナリオに基づいた SOC 調査の記録が含まれています。 このリポジトリに含まれるもの 完全なレポート: report.md タイムライン: timeline.md 侵害指標: iocs.md MITRE ATT&CK マッピング: mitre.md 調査スクリーンショット: screenshots ケース概要 調査により、ホストが...

CVE-2026-21018-OPC-UA-Authentication-Bypass-via-None-Security-Policy

CVE-2026-21018 – None セキュリティポリシーによる OPC UA 認証バイパス プログラムコード Python opcua-asyncio sim root@kitploit: opcuaserversim.py - OPC UA server accepting None security policy from asyncua import Server import asyncio async def main: server = Server await server.init...

CVE-2026-73789

A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized...

Nexora

Nexora Nexora 는 AI 기반 엔터프라이즈 엔드포인트 거버넌스 및 보안 인텔리전스 시스템으로, 머신 전반의 소프트웨어 사용을 모니터링하고 정책 기반 위험 분류를 적용하며 구조화된 행동 및 보안 보고서를 생성합니다. 이 시스템은 조직이 애플리케이션 사용에 대한 가시성을 확보하고, 소프트웨어 거버넌스 규칙을 시행하며, 결정론적 정책 규칙과 AI 기반 분석을 결합하여 위험하거나 승인되지 않은 도구의 동작을 탐지해야 하는 환경을 위해 설계되었습니다. AI가 공격자가 될 때, Nexora가 방어자가 됩니다. 개요 Nexora는...

CVE-2026-86752

snipe-it versions before 8.7.0 fail to enforce per-instance FMCS scoping in asset audit endpoints, relying solely on query-layer filtering instead of policy-layer authorization checks. Attackers with valid sessions and assets.audit permissions could write audit log entries against cross-company...

CVE-2026-86752 snipe-it before 8.7.0 Authorization Bypass via Asset Audit Endpoints

snipe-it versions before 8.7.0 fail to enforce per-instance FMCS scoping in asset audit endpoints, relying solely on query-layer filtering instead of policy-layer authorization checks. Attackers with valid sessions and assets.audit permissions could write audit log entries against cross-company...

CVE-2026-62201-OpenClaw-SSRF

CVE-2026-62201 — OpenClaw サンドボックス Exec-Server ネットワークポリシーバイパス（SSRF） 深刻度: 高 · CVSS: 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N · CWE-918（サーバーサイドリクエストフォージェリ） 脆弱性の概要...

Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257

Digisol-DG-GR1321のパスワードポリシーバイパス-CVE-2024-2257...

CVE-2020-6519

Chromium 83 Zero Day 전체 CSP 우회 크로스 플랫폼 CVE-2020-6519 기술 문서 POC 크로미움 프로젝트에 보고된 대로...

CVE-2026-59643

A flaw was found in Bouncy Castle for Java and Bouncy Castle for Java FIPS BC-FJA. This vulnerability allows an attacker to bypass OpenPGP inline-signature policy failures, which are silently ignored by the software. This silent disregard of policy failures can lead to a compromise of data...

crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...

CVE-2026-85978

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...

firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...

firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Graphics: ImageLib component...

EUVD-2026-74794

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...