펜리젠트 헤더

해킹 연구소

CVE-2026-1731 BeyondTrust When “Remote Support” Behaves Like an Internet-Facing Identity System

CVE-2026-1731 BeyondTrust: When “Remote Support” Behaves Like an Internet-Facing Identity System

자세히 보기

CVE-2026-20841 When Notepad Learns Markdown, a Click Can Become Execution

CVE-2026-20841 PoC: When Notepad Learns Markdown, a Click Can Become Execution

자세히 보기

CVE-2026-21510 PoC The SmartScreen Moment That Never Happens

CVE-2026-21510 PoC: The SmartScreen Moment That Never Happens

자세히 보기

Notepad RCE When a “Lightweight App” Learns Markdown, It Inherits Browser-Sized Risk

Notepad RCE: When a “Lightweight App” Learns Markdown, It Inherits Browser-Sized Risk

자세히 보기

CVE-2025-49132 PoC The “Locale JSON” Endpoint That Turns Into Pre-Auth RCE

CVE-2025-49132 PoC: The “Locale JSON” Endpoint That Turns Into Pre-Auth RCE

자세히 보기

CVE-2026-20841 PoC When “Just a Text Editor” Becomes a Link-to-Code Execution Primitive

CVE-2026-20841 PoC: When “Just a Text Editor” Becomes a Link-to-Code Execution Primitive

자세히 보기

When Search Becomes the Payload Defending Against SEO GEO AEO Poisoning in the Real World

When Search Becomes the Payload: Defending Against SEO / GEO / AEO Poisoning in the Real World

자세히 보기

When SKILL.md Becomes an Installer The OpenClaw ClawHub Poisoning Playbook

When SKILL.md Becomes an Installer: The OpenClaw ClawHub Poisoning Playbook

자세히 보기

OpenClaw Multi-User Session Isolation Failure Authorization Bypass and Privilege Escalation

OpenClaw Multi-User Session Isolation Failure Authorization Bypass and Privilege Escalation

자세히 보기

CVE-2023-20198 Incident Playbook Exposure Triage, Compromise Checks, and Durable Remediation

CVE-2023-20198 Incident Playbook: Exposure Triage, Compromise Checks, and Durable Remediation

자세히 보기

Korean