CVE-2025-56383

취약점 공격 유형: DLL Hijacking DLL 하이재킹 대상 애플리케이션: Notepad++ 방법: NppExport.dll 파일이 Notepad++에 의해 작업 디렉터리에서 로드됨 구현 악성 DLL에는 다음이 포함됩니다: 호환성을 위한 원본 라이브러리의 내보내기 함수 공격자 호스트에 연결되는 Reverse shell 로딩 차단을 방지하기 위한 별도 스레드에서의 실행...

0day-Rubbish

0day Rubbish 0day vulnerabilities have become rubbish in the AI era. 🌐 Official Website : https://0day-rubbish.com/blog 🎯 Why This Exists Traditional vulnerability disclosure is broken. It's slow, bureaucratic, and ineffective. In the AI era, we can mass-produce 0days at scale—making individual...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

org.cowpoop.moooooo

org.cowpoop.moooooo 공개 정보와 DirtyCOW CVE-2016-5195 취약점을 이용한 Android APK 현재 작동하지 않는 애플리케이션입니다 테스트가 성공하면 이 메시지를 제거하겠습니다...

CVE-2021-3345

CVE-2021-3345 CVE-2021-3345에 대한 실제 작동하는 익스플로잇...

CVE-2023-23946-POC

CVE-2023-23946 PoC 익스플로잇 CVE-2023-23946에 대한 설명 및 PoC CVE-2023-23946 취약점은 git이 심볼릭 링크를 처리하는 방식의 결함으로 인해 발생합니다. git이 심볼릭 링크를 생성할 때 실제로 심볼릭 링크로 처리하지 않기 때문에, 이를 악용하여 작업 트리 외부의 파일을 가리키도록 할 수 있습니다. 먼저 심볼릭 링크를 생성합니다 ln -s PATHYOUWANTTOACCESSOUTSITEWORKINGTREE symlink 이제 git apply에 사용할 패치를 생성합니다 diff --g...

CVE-2024-21626

CVE-2024-21626 이 취약점에 대한 자세한 설명은 제 글을 참조하세요. Exploit 컨테이너 실행을 통한 익스플로잇 사용자 정의 이미지를 빌드할 필요 없이 -w 매개변수로 컨테이너를 실행하기만 하면 됩니다: docker run -w /proc/self/fd/8 --name cve-2024-21626 --rm -it debian:bookworm 실행 중인 컨테이너로 exec을 통한 익스플로잇 runc 자체를 통한 익스플로잇 /container/runc/runc --version docker run --name...

CVE-2024-21262

레코드 CVEs 재현 전용. 관련 자료: LINK GITHUB1 GITHUB2 ISSUE 환경 확인 https://download.docker.com/linux/static/stable/x8664/에서 docker-24.0.6.tgz를 다운로드합니다. sudo mkdir -p /usr/local/docker-24.0.6 sudo tar -xzf docker-24.0.6.tgz -C /usr/local/docker-24.0.6 sudo ln -sf /usr/local/docker-24.0.6/docker/...

CVE-2024-21626

소개 재현 단계 커널이 5.4,4.19,.. 이상이고 /proc/kallsyms에 openat2가 있는지 확인하세요. v1.0.0-rc93= runc =1.1.11 $ grep openat2 /proc/kallsyms ffffffffa64290d0 T pfxauditopenat2how ffffffffa64290e0 T auditopenat2how ffffffffa666de90 t pfxdosysopenat2 ffffffffa666dea0 t dosysopenat2 ffffffffa666e020 t pfxdosysopenat2...

CentOS Linux 7 [TuxCare] Security Update: gtk-update-icon-cache / gtk3 / gtk3-devel / gtk3-devel-docs / etc (CENTOS7:CLSA-2024:1728056039)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1728056039 advisory. - A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the...

AlmaLinux 9.2 [TuxCare] Security Update: gtk-update-icon-cache / gtk3 / gtk3-devel / gtk3-devel-docs / etc (ALMALINUX9.2:CLSA-2025:1745946091)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745946091 advisory. - A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the...

GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution

Summary Repo.init decides which directory is the git directory by testing candidate paths in an order that considers the real .git last. Two earlier tests can be satisfied by ordinary tracked files. Git reserves only the literal name .git, so HEAD, objects/, refs/, config, gitdir, commondir and...

CVE-2024-21626

CVE-2024-21626 익스플로잇 작업 디렉토리 docker run -w /proc/self/fd/8 --name cve-2024-21626 --rm -it debian:bookworm 중요한 것은 -w /proc/self/fd/8를 넣는 것입니다.\ 컨테이너 내부에서 cat ../../../../../../../../../etc/passwd를 사용하여 호스트 파일시스템에 접근합니다. 익스플로잇 심볼릭 링크 1. docker run --name cve-2024-21626 --rm --it debian:bootworm 2...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via reusable exec approvals that fail to bind the working directory context to the approval record. When an operator grants an allow-always approval for a command,...

CVE-2026-100530

OpenClaw versions before 2026.8.1 fail to bind working directory context to reusable exec approvals, allowing approved commands to execute in different directories. Attackers with an allow-always approval can reuse it to run the same command against unreviewed files or repositories with materiall...

PT-2026-99167

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description Reusable execution approvals fail to bind the working directory context, which allows approved commands to be executed in directories other than the one originally intended. An attacker possessin...

EulerOS Virtualization 2.11.0 : perl (EulerOS-SA-2026-3537)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including...

Astra Linux – Vulnerability in jupyter-core

Jupyter Core is a package for the core common functionalities of Jupyter projects. Prior to version 4.11.2, Jupyter Core contained an arbitrary code execution vulnerability in “jupytercore,” which stemmed from “jupytercore” executing untrusted files in the CWD environment. This vulnerability...

Astra Linux – Vulnerability in Perl

Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allows out-of-bounds write-ups, because the main function, while having setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...