kr-vulhub icon indicating copy to clipboard operation
kr-vulhub copied to clipboard

๐Ÿณ docker-compose ๋ฅผ ํ™œ์šฉํ•œ ์ทจ์•ฝํ•œ ํ™˜๊ฒฝ ๊ตฌ์„ฑ ๋ฐ ๊ฒ€์ฆ (vulhub ํ•œ๊ธ€ํŒ)

Results 102 kr-vulhub issues
Sort by recently updated
recently updated
newest added

์•ˆ๋…•ํ•˜์„ธ์š”! WHS 2๊ธฐ 3๋ฐ˜ ์ •๋ฏผ์„ฑ์ž…๋‹ˆ๋‹ค. Nginx CVE-2013-4547 ๋ถ„์„ ์ฝ”๋“œ ๋ฐ ๊ฒฐ๊ณผ๋ฌผ ์ œ์ถœํ•ฉ๋‹ˆ๋‹ค. Review ๋ถ€ํƒ๋“œ๋ฆฝ๋‹ˆ๋‹ค. ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค.

์•ˆ๋…•ํ•˜์„ธ์š”, whs 2๊ธฐ 8๋ฐ˜ ๋ฌธ์„œ์ง„์ž…๋‹ˆ๋‹ค. Django CVE-2021-35042 ๋ถ„์„ ์ฝ”๋“œ ๋ฐ poc ๊ฒฐ๊ณผ๋ฌผ ์ œ์ถœํ•ฉ๋‹ˆ๋‹ค. Review ๋ถ€ํƒ๋“œ๋ฆฝ๋‹ˆ๋‹ค. ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค.

์•ˆ๋…•ํ•˜์„ธ์š”, log4j CVE-2021-44228 ๋ถ„์„ ์ฝ”๋“œ ๋ฐ ๊ฒฐ๊ณผ๋ฅผ ์ œ์ถœํ•ฉ๋‹ˆ๋‹ค. ๋ฐฐ๊ฒฝ์ง€์‹์— ๋Œ€ํ•ด ๊ธฐ์ˆ ํ•˜๊ณ , ์ทจ์•ฝํ•œ ํ™˜๊ฒฝ ๊ตฌ์„ฑ์™„๋ฃŒํ–ˆ๊ณ , PoC๋ฅผ ํฌํ•จํ•ด Github Pull Request๋กœ ๋ณด๋ƒˆ์Šต๋‹ˆ๋‹ค. ์ถ”๊ฐ€๋กœ RCEํ•˜๋Š” ๊ณผ์ •์„ ์‚ฌ์ง„์œผ๋กœ ์ดฌ์˜ํ–ˆ์Šต๋‹ˆ๋‹ค. ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค.

์•ˆ๋…•ํ•˜์„ธ์š”, 2๊ธฐ 4๋ฐ˜ ๋„ํ˜„์ •์ž…๋‹ˆ๋‹ค. Metabase CVE-2021-41277 ๋ถ„์„ ์ฝ”๋“œ ๋ฐ ๊ฒฐ๊ณผ๋ฅผ ์ œ์ถœํ•ฉ๋‹ˆ๋‹ค. ์ทจ์•ฝํ•œ ํ™˜๊ฒฝ ๊ตฌ์„ฑ ํ›„, poc๋ฅผ ํฌํ•จํ•˜์—ฌ Pull Request๋กœ ๋ณด๋ƒˆ์Šต๋‹ˆ๋‹ค. ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค.

์•ˆ๋…•ํ•˜์„ธ์š”. ๋ฉ˜ํ† ๋‹˜ whs 1๊ธฐ 6๋ฐ˜ ๋ฐ•์ฒ ์ค€_1424 ํ•™์ƒ์ž…๋‹ˆ๋‹ค. ๋ถ„์„ ์ฝ”๋“œ ๋ฐ ๊ฒฐ๊ณผ๋ฌผ ์ œ์ถœํ•ฉ๋‹ˆ๋‹ค. Review ๋ถ€ํƒ๋“œ๋ฆฝ๋‹ˆ๋‹ค. ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค.

์•ˆ๋…•ํ•˜์„ธ์š”, 8๋ฐ˜ ์ดํ˜•์„(5578) ์ž…๋‹ˆ๋‹ค. imagemagick [CVE-2022-44268](https://github.com/advisories/GHSA-g5qh-f5rv-grcp) ๋ถ„์„ ๋ฐ ๊ฒฐ๊ณผ ์ œ์ถœํ•ฉ๋‹ˆ๋‹ค. ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค.

์•ˆ๋…•ํ•˜์„ธ์š”, 7๋ฐ˜ ์žฅ์ •์•ˆ(5308) ์ž…๋‹ˆ๋‹ค. Django CVE-2022-34265 Poc ์ฝ”๋“œ ๋ฐ ๋ถ„์„ ์ œ์ถœํ•ฉ๋‹ˆ๋‹ค. ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค.

์•ˆ๋…•ํ•˜์„ธ์š” 13๋ฐ˜ ์ด์ค€๊ทœ (9002)์ž…๋‹ˆ๋‹ค. CVE-2018-16509 ๋ถ„์„ ์ฝ”๋“œ ๋ฐ ๊ฒฐ๊ณผ๋ฅผ ์ œ์ถœํ•ฉ๋‹ˆ๋‹ค.

์•ˆ๋…•ํ•˜์„ธ์š”. 14๋ฐ˜ ์ด๋™ํ˜„์ž…๋‹ˆ๋‹ค. bash CVE-2014-6271 ๋ถ„์„ ์ฝ”๋“œ ๋ฐ ๊ฒฐ๊ณผ ์ œ์ถœํ•ฉ๋‹ˆ๋‹ค. ์ทจ์•ฝํ•œ docker ํ™˜๊ฒฝ ๊ตฌ์„ฑ ํ›„ ์ทจ์•ฝ์ ์„ ํ™•์ธํ•˜์—ฌ ์Šคํฌ๋ฆฐ์ƒท ์ฐ์—ˆ์Šต๋‹ˆ๋‹ค. review๋ถ€ํƒ๋“œ๋ฆฝ๋‹ˆ๋‹ค ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค.

์•ˆ๋…•ํ•˜์„ธ์š” `๋™ํ—Œํฌ_4412`์ž…๋‹ˆ๋‹ค. fastjson 1.2.24 RCE ๋ถ„์„ ์ฝ”๋“œ ๋ฐ ๊ฒฐ๊ณผ๋ฅผ ์ œ์ถœํ•ฉ๋‹ˆ๋‹ค. ์‹ค์ œ dockerfile๊ณผ docker-compose.yml์„ ์‚ฌ์šฉํ•˜์—ฌ PoC ํ™˜๊ฒฝ ๊ตฌ์ถ• ๋ฐ ์‹คํ–‰์— ์„ฑ๊ณตํ•˜์˜€์Šต๋‹ˆ๋‹ค. ๋ฆฌ๋ทฐ ๋ถ€ํƒ๋“œ๋ฆฝ๋‹ˆ๋‹ค. ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค.