1002 matches found
CVE-2020-7200
CVE-2020-7200 Download HPE SIM 7.6: https://support.hpe.com/hpesc/public/docDisplay?docId=emrna-c05350303N10011 Details: https://support.hpe.com/hpesc/public/docDisplay?docLocale=enUS&docId=hpesbgn04068enus 🎞 Video: https://www.youtube.com/watch?v=QNhcNJtjKyw HPE does not provide a patch but only...
ossec-hids
OSSEC 정보 OSSEC는 시스템을 모니터링하고 제어하기 위한 완전한 플랫폼입니다. HIDS호스트 기반 침입 탐지, 로그 모니터링, SIM/SIEM의 모든 측면을 단순하고 강력하며 오픈 소스인 하나의 솔루션으로 결합합니다. 최신 정보는 저희 웹사이트를 방문하세요. www.ossec.net 현재 릴리스 현재 안정 버전은 ossec 웹사이트에서 확인할 수 있습니다. 릴리스 다운로드: Downloads 릴리스 문서: docs 개발 개발 버전은 GitHub에서 호스팅되며 간단한 git clone만으로 받을 수 있습니다. 스크린샷 파...
swicc
swICC 라이브러리 프로젝트는 반드시 재귀적으로 클론되어야 합니다. ZIP을 다운로드하는 것만으로는 충분하지 않습니다. Software ICC또는 swICC는 대부분의 유형의 스마트 카드를 개발할 수 있는 쉽고 유연한 방법을 제공하는 프레임워크입니다. 또한 swICC 기반 카드를 PC에 연결하는 사실상의 표준인 PC/SC 인터페이스를 통해 PC에 연결할 수 있게 해줍니다swICC PC/SC 리더기 사용. 범위 하드웨어 의존성 없이 소프트웨어로 스마트 카드를 개발하기 위한 프레임워크입니다. 모든 swICC 기반 카드는 swIC...
swsim
swSIM 프로젝트는 반드시 재귀적으로 클론해야 합니다. ZIP 다운로드만으로는 부족합니다. swSIM은 완전한 소프트웨어 기반 SIM 카드입니다. 제가 아는 한, 어떤 SIM 하드웨어에도 의존하지 않는 최초로 공개된 SIM 카드 시뮬레이터입니다. 범위 소프트웨어 전용 SIM 카드 시뮬레이터입니다. 작동에 어떤 하드웨어에도 의존하지 않습니다. swICC PC/SC 리더기를 사용하여 PC/SC를 통해 PC에 연결할 수 있습니다. PC/SC 인터페이스를 통해 SIM 카드 슬롯이 있는 모든 휴대폰에 연결할 수 있습니다. 우리는...
CVE-2026-11108-Integer-Overflow-in-Memory-Allocator-kmalloc-Sim-
CVE-2026-11108 – 메모리 할당기Integer Overflow의 정수 오버플로우 kmalloc Sim 프로그램 코드 C // allocsim.c - Vulnerable memory allocator include include include define MAXBLOCK 1024 void mymallocsizet size sizet total = size + sizeofsizet; // header if total MAXBLOCK return NULL; void ptr = malloctotal; if !ptr retu...
gps-sdr-sim
GPS-SDR-SIM GPS-SDR-SIM генерирует потоки данных базового сигнала GPS, которые можно преобразовать в радиочастоту с использованием программно-определяемых радио SDR платформ, таких как ADALM-Pluto, bladeRF, HackRF и USRP. Инструкции по сборке в Windows 1. Запустите Visual Studio. 2. Создайте пуст...
bladeGPS
bladeGPS Very crude experimental implementation of gps-sdr-sim for real-time signal generation. The code works with bladeRF and has been tested on Windows 10 and Ubuntu 20.04. Usage: bladegps options Options: -e RINEX navigation file for GPS ephemerides required -y YUMA almanac file for GPS...
Malicious code in contoso-login-sim-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ce76699c91a883d24e3ad609bb04faa3f52cbeaecfb24c1c3bcde8b496a5c Package ships a single 138 KB browser script whose entire body is an RC4-encrypted base64 blob decoded at runtime by an inline RC4 routine zc with a...
CVE-2026-35330
CVE-2026-35330 strongSwan EAP-SIM / EAP-AKA 속성 파서에서 정수 언더플로로 인해 발생하는 인증 전 힙 버퍼 오버플로. 설명 parseattributes는 src/libsimaka/simakamessage.c:419에서 length 바이트가 4바이트 워드 단위로 계산되는 TLV 헤더를 읽습니다. ATRAND / ATENCRDATA 분기의 경우: if hdr-length 4 in.len || in.len type; data = chunkcreatein.ptr + 4, hdr-length 4 - 4...
Astra Linux – Vulnerability in ofono
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...
Astra Linux – Vulnerability in ofono
oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...
CVE-2026-86115
Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplying paths starting with /api/ in HTTP...
CVE-2026-86115 Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path
Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplying paths starting with /api/ in HTTP...
CVE-2026-86115 Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path
Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplying paths starting with /api/ in HTTP...
CVE-2026-86115 Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path
Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplying paths starting with /api/ in HTTP...
EUVD-2026-71947
Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplying paths starting with /api/ in HTTP...
CVE-2026-86115
Sim (an open-source tool by SimStudio) before 0.8.14 contains a confused deputy flaw in tool URL routing. Requests are classified as internal via URL prefix matching without scheme normalization , causing SSRF validation to be skipped and internal authentication tokens to be minted for user-suppl...
CVE-2026-86115: Unintended Proxy or Intermediary
Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplying paths starting with /api/ in HTTP...
PT-2026-86386
Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplying paths starting with /api/ in HTTP...
A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices
A malicious SIM card can order the device it sits in to run commands of the attacker's choosing. On the cellular modules built into electric-vehicle chargers, industrial routers, and car telematics units, that is enough to take the whole device over. Researchers at the University of Birmingham an...