CVE-2026-43499-Redmi-Turbo5

CVE-2026-43499 Exploit for Redmi Turbo 5 이 프리로드 라이브러리는 duchamp-root 소스 코드를 기반으로 빌드되었습니다. ⚠️ 경고: 교육 및 승인된 보안 연구 목적으로만 사용하십시오. 이 저장소는 Xiaomi Redmi Turbo 5 기기를 대상으로 하는 CVE-2026-43499GhostLock에 대한 개념 증명 익스플로잇을 제공합니다. 이 익스플로잇은 Linux 커널의 futex PI우선순위 상속 requeue 경로에 있는 use-after-free 취약점을 활용하여 부트로더를 잠금...

turbo-intruder

Turbo Intruder Turbo Intruder는 대량의 HTTP 요청을 전송하고 결과를 분석하기 위한 Burp Suite 확장 프로그램입니다. 속도, 지속 시간 또는 복잡성이 뛰어난 공격을 처리하여 Burp Intruder를 보완하도록 설계되었습니다. 다음 기능이 차별화됩니다. 빠름 – Turbo Intruder는 속도에 중점을 두고 처음부터 직접 작성된 HTTP 스택을 사용합니다. 그 결과 많은 대상에서 유행하는 비동기 Go 스크립트조차도 크게 앞설 수 있습니다. 확장 가능 – Turbo Intruder는 일정한 메모...

haptyc

Haptyc 테스트 생성 프레임워크 Haptyc란 무엇인가? Haptyc는 Turbo Intruder에 페이로드 위치 지원과 Sniper/Clusterbomb/Batteringram/Pitchfork 공격 유형을 추가하기 위해 만들어진 Python 라이브러리입니다. Haptyc는 이러한 목표를 상당히 잘 달성하면서도 일반적으로 테스트 시퀀스를 더 간단하게 표현하는 방법을 제공합니다. 이 라이브러리는 Turbo Intruder를 대상으로 설계되었지만 Turbo Intruder에 대한 하드 의존성이 없으며 Python 컨텍스트에서...

Callisto

Callisto 지능형 자동화 바이너리 취약점 분석 도구 데모: Callisto 는 지능형 자동화 바이너리 취약점 분석 도구입니다. 제공된 바이너리를 자동으로 디컴파일하고, 생성된 의사 C 코드에서 잠재적인 보안 취약점을 찾기 위해 해당 의사 코드 출력을 반복적으로 검사합니다. Ghidra 의 헤드리스 디컴파일러가 바이너리 디컴파일 및 분석 부분을 담당합니다. 의사 코드 분석은 Semgrep SAST 도구에 의해 초기에 수행된 후, GPT-3.5-Turbo 로 전송되어 Semgrep 결과를 검증하고 추가 취약점을 식별합니다. ...

Rocky Linux 8.6 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-debugsource / etc (ciqsa-2026_0078)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260078 advisory. This advisory aggregates security fixes for the libjpeg-turbo SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2020-13790. Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-debugsource / etc (crlsa-2024_2295)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20242295 advisory. libjpeg-turbo: heap-buffer-overflow vulnerability in decompresssmoothdata in jdcoefct.c CVE-2021-29390 Tenable has extracted the preceding description block directl...

CentOS Linux 7.9 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-devel / etc (ciqsa-2026_0698)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260698 advisory. This advisory aggregates security fixes for the libjpeg-turbo SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2020-17541. Tenable has extracted the...

Rocky Linux 8 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-debugsource / etc (crlsa-2019_3705)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20193705 advisory. libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get8bitrow in rdbmp.c leads to denial of service CVE-2018-14498 Tenable has extracted the...

Rocky Linux 9 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-debugsource / etc (crlsa-2023_1068)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20231068 advisory. libjpeg-turbo: heap buffer overflow in getwordrgbrow in rdppm.c CVE-2021-46822 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9.2 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-debugsource / etc (ciqsa-2026_0444)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260444 advisory. This advisory aggregates security fixes for the libjpeg-turbo SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2021-29390. Tenable has extracted the preceding...

CentOS Linux 7.9 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-devel / etc Multiple Vulnerabilities (ciqsa-2026_0699)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260699 advisory. This advisory aggregates security fixes for the libjpeg-turbo SRPM in CIQ CentOS Bridge 7.9. It addresses 2 CVEs: CVE-2019-2201, CVE-2020-13790. Tenable...

Rocky Linux 8 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-debugsource / etc (crlsa-2025_7540)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257540 advisory. libjpeg-turbo: heap-based buffer over-read in getrgbrow in rdppm.c CVE-2020-13790 Tenable has extracted the preceding description block directly from the CIQ securi...

Malicious code in turbo-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25d8c29cbfb317e1c88568514a999618bdeee25b2716b76e3db5062e9dd7a67 package.json at line 43 declares the sole dependency 'node-net-pool' as an HTTPS tarball of the 'main' branch of an unrelated GitHub account...

MAL-2026-16440 Malicious code in turbo-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25d8c29cbfb317e1c88568514a999618bdeee25b2716b76e3db5062e9dd7a67 package.json at line 43 declares the sole dependency 'node-net-pool' as an HTTPS tarball of the 'main' branch of an unrelated GitHub account...

CVE-2026-59160

Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts its embedded Next.js server from packages/turbo-graph/src/index.ts on all interfaces, including 0.0.0.0:29312 by default, while the GET handler for /api/run in...

CVE-2026-59160 Yeger: Unauthenticated Network-Exposed Turborepo Task Execution via /api/run

Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts its embedded Next.js server from packages/turbo-graph/src/index.ts on all interfaces, including 0.0.0.0:29312 by default, while the GET handler for /api/run in...

EUVD-2026-78834

Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts its embedded Next.js server from packages/turbo-graph/src/index.ts on all interfaces, including 0.0.0.0:29312 by default, while the GET handler for /api/run in...

CVE-2026-59160 Yeger: Unauthenticated Network-Exposed Turborepo Task Execution via /api/run

Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts its embedded Next.js server from packages/turbo-graph/src/index.ts on all interfaces, including 0.0.0.0:29312 by default, while the GET handler for /api/run in...

CVE-2026-59160 Yeger: Unauthenticated Network-Exposed Turborepo Task Execution via /api/run

Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts its embedded Next.js server from packages/turbo-graph/src/index.ts on all interfaces, including 0.0.0.0:29312 by default, while the GET handler for /api/run in...

CVE-2026-59160

@yeger/turbo-graph (an npm package in the Yeger monorepo) prior to version 2.8.9 exposes an embedded Next.js server on all network interfaces (0.0.0.0:29312 by default) due to a missing hostname argument in .listen() at packages/turbo-graph/src/index.ts:44. The /api/run GET handler (packages/turb...