292 matches found
reload.sh
reload.sh 하지 마세요... 절대로 실제 시스템예: 프로덕션이나 중요한 데이터가 저장된 개인 컴퓨터 에서 실행하지 마세요. 이 레시피는 다른 시스템이 이미 설치되어 실행 중인 상태에서 새 시스템을 설치하는 방법을 보여줍니다. 정말 멋지고 놀랍지만 매우 위험합니다! 만약 혼란의 늪에 빠져보고 싶다면 계속 읽어보세요. 왜 만들었나요? 저는 실험을 좋아합니다. 사물이 어떻게 작동하는지 알고 싶어하기 때문입니다. 실험을 통해 더 까다로운 개념들을 이해하고 볼 수 있습니다. 오래전, 이 방법이 제 목숨을 구해준 적이 있지만 정말...
CVE-2026-81438
Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 contain a Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote network access could exploit this flaw, resulting in Information disclosure . The CVSS 3.1 score is 3.7 (LOW) , ...
CVE-2025-36591
Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
PT-2026-87420
Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network...
CVE-2026-76133
Ebyte NE2-D11 (and related variant NA111-M ) uses a deprecated hashing algorithm in an authentication-related operation. When an attacker can manipulate or predict the authentication exchange, the weak cryptographic construction may reduce the assurance of the authentication mechanism and facilit...
CVE-2026-21751
HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...
CVE-2025-68833 HCL Hive is affected by use of a cryptographic primitive with a risky implementation
HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources...
EUVD-2026-64855
HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...
CVE-2026-21751
HCL Hive is affected by a cryptographic primitive with a risky implementation , which could allow an attacker to achieve unauthorized lateral compromise or widespread credential leakage if a single internal component is breached. The vulnerability is rated CVSS 3.1 7.4 (HIGH) with a network attac...
CVE-2026-21751 HCL Hive is affected by use of a cryptographic primitive with a risky implementation
HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...
CVE-2026-21751 HCL Hive is affected by use of a cryptographic primitive with a risky implementation
HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...
PT-2026-80848
HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...
EUVD-2026-63578
A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipulation results in risky cryptographic algorithm. Remote exploitation of the attack is possible. The complexity of an...
EUVD-2026-62961
In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedulesearch capability could cause a scheduled search to load and deserialize a model file through the apply search command. The improper access control is possible because Splunk AI Toolkit does not mark the apply...
EUVD-2026-62906
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store attacker-controlled Search Processing Language SPL in a Table Editor dataset and share the dataset. A user who holds the "admin" Splunk role triggers the SPL when that user...
CVE-2026-77151: Use of a Broken or Risky Cryptographic Algorithm
A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipulation results in risky cryptographic algorithm. Remote exploitation of the attack is possible. The complexity of an...
CVE-2026-76342 Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store risky Search Processing Language SPL commands in a Table Editor dataset and share the dataset. A user who holds the "admin" Splunk role triggers the commands when that user...
CVE-2026-76342
A "power"-role Splunk user can embed risky SPL commands in a shared Table Editor dataset; when an admin opens it, the commands execute with admin privileges, bypassing SPL safeguards on the field-summary search and risking data exposure and lookup modification. Patch versions: 10.4.2, 10.2.6, 10....
CVE-2026-76341
In Splunk Enterprise below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a "power"-role user can store attacker-controlled SPL in a Table Editor dataset; when an "admin" opens it, the SPL runs with admin privileges, exposing all relevant data. The root cause is the Table Editor not applying SPL safeguards ...
CVE-2026-76341 Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store attacker-controlled Search Processing Language SPL in a Table Editor dataset and share the dataset. A user who holds the "admin" Splunk role triggers the SPL when that user...