2294 matches found
CVE-2022-0997
Fidelis Network and Deception - CVE-2022-0997 - 안전하지 않은 파일 권한 권한 상승 공개 가능성 및 감사의 말 이 익스플로잇은 미국 정부에 의해 공개 승인되었습니다. 문서의 무제한 배포를 승인하는 업무를 맡은 군인 및 정부 연락관에게 특별히 감사드립니다. 다음 OTR 번호를 참조하십시오: OTR-2022-00487 메타데이터 날짜: 20220516 0123H UTC 익스플로잇 작성자: Henry Reed, The Aerospace Corporation 공급업체 홈페이지:...
plague
plague EDR向けデフォルト検知 以下に詳述する検知は、私が導入または関わるあらゆるEDR製品に確立しようとしているものです。重要度やデータセットについては、ご自身の考慮事項を踏まえてください。 検知の実現方法については、こちらの投稿を参照してください https://www.goblinloot.net/2023/02/writing-detections-when-stuck-with-edr.html?m=1 センサーやその他のセキュリティ製品の改ざん...
VirtualLockSensorLPE
VirtualLockSensorLPE 설명 Windows에서 실행되는 Elliptic Virtual Lock Sensor 버전 3.1.60531.2를 대상으로 하는 CVE-2025-0886 로컬 권한 상승 PoC 익스플로잇으로, 특정 Lenovo 노트북 모델에 기본적으로 설치됩니다. 레지스트리 키의 권한을 변경하여 일반 사용자 컨텍스트에서 SYSTEM 컨텍스트로 페이로드를 실행할 수 있게 합니다. Lenovo 공식 보안 권고:...
raspi-corelight
Corelight@Home raspi-corelight v3.2 Corelight Software Sensor를 실행하도록 Pi 구성 Corelight Software Sensor는 64비트 애플리케이션이므로, 센서와 Raspberry Pi OS의 초기 구성을 수행하기 위해 구성 도구 raspi-corelight를 만들었습니다. 이 도구를 설치하고 실행하려면 Raspberry Pi의 터미널 창에서 다음을 수행하십시오: 공식 Raspberry Pi OS64bit용 다음을 실행하여 Github에서 raspi-corelight를...
CVE-2021-35956
CVE-2021-35956. CVE-2021-35956에 대한 개념 증명 익스플로잇, AKCP sensorProbe - '다중' 크로스 사이트 스크립팅 XSS. Exploit Title: AKCP sensorProbe - '다중' 크로스 사이트 스크립팅 XSS. Date: 07-01-2021. Exploit Author: Tyler Butler. Vendor Homepage: https://www.akcp.com/. Software Link:...
Rocky Linux 8 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2025_17802)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202517802 advisory. webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-43272 webkitgtk: Processing maliciously crafted web...
Rocky Linux 9 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2025_18097)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202518097 advisory. webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-43272 webkitgtk: Processing maliciously crafted web...
Rocky Linux 9 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2025_20922)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202520922 advisory. webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-43272 webkitgtk: Processing maliciously crafted web...
Astra Linux – Vulnerability in Chromium
Missing authorization in the Sensor component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information through a crafted HTML page. Chromium security severity: Medium...
CVE-2026-4638
PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending parameter value in plaintext. PRTG...
CVE-2026-4638 Plaintext Password Disclosure via VBScript Sensor Error Message in Paessler PRTG Network Monitor
PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending parameter value in plaintext. PRTG...
EUVD-2026-85847
PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending parameter value in plaintext. PRTG...
PT-2026-97781
Name of the Vulnerable Software and Affected Versions PRTG Network Monitor versions prior to 26.2.120.1449 Description A demo EXE/Script sensor uses cscript.exe to multiply two integer parameters. When a non-numeric value is provided instead of an integer, cscript.exe triggers a 'Type mismatch'...
CVE-2026-4638: Generation of Error Message Containing Sensitive Information
PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer parameters using cscript.exe. If a non-numeric value is passed instead, cscript.exe raises a 'Type mismatch' runtime error that includes the offending parameter value in plaintext. PRTG...
SUSE CVE-2026-89938
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...
FalconFlank
FalconFlank Crowdstrike Falcon 0day Privilege Escalation Vulnerability FalconFlank is a 0day privilege escalation that abuses the office malicious macros remediation in Crowdstrike Falcon Sensor, obviously by the time I drop this Crowdstrike would already have detections for it so if you want to...
SUSE CVE-2026-89939
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable atlasbufferpostenable acquires a runtime PM reference with pmruntimeresumeandget but returns the result of atlassetinterrupt directly. If atlassetinterrupt...
CVE-2026-25261
Memory corruption while processing rear sensor IOCTL calls...