GoTEE-example

소개 GoTEE 프레임워크는 권한privileged 및 비권한unprivileged 모드에서 TamaGo 기반 유니커널의 동시 인스턴스화를 구현하며, 유니커널들은 모니터 모드와 사용자 정의 시스템 콜을 통해 서로 상호 작용합니다. 이러한 기능을 통해 GoTEE는 TamaGo 기반 TEETrusted Execution Environment를 구현하여, ARM TrustZone Secure World 또는 RISC-V Supervisor Execution Environment 내부의 베어 메탈 실행에 Go의 메모리 안전성, 편의성...

ffufw

ffufw 특별한 소스를 곁들인 ffuf 설치 go install github.com/puzzlepeaches/ffufw@latest 왜? ffufw는 디렉터리 무차별 대입bruteforcing을 더 쉽고 지능적으로 만들어 주는 ffuf 래퍼입니다. 이 도구는 다음과 같은 기능을 제공합니다: URL 목록에 대한 ffuf 명령의 멀티스레드 실행 gowappalyzer를 사용한 기술 동적 감지 감지된 기술에 기반한 ffuf 명령 동적 생성 사용자 정의 워드리스트 및 확장자 포함 ffuf 출력을 파싱하여 불필요한 항목을 제거하고...

[SECURITY] [DLA 4830-1] twitter-bootstrap3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4830-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès October 08, 2026 https://wiki.debian.org/LTS -...

Awesome-Pentest

침투 테스트 도구 모음 목차 익명성 도구 안티바이러스 우회 도구 도서 방어적 프로그래밍 도서 Hacker's Handbook 시리즈 도서 자물쇠 따기 도서 악성코드 분석 도서 네트워크 분석 도서 침투 테스트 도서 리버스 엔지니어링 도서 사회공학 도서 Windows 도서 CTF 도구 협업 도구 컨퍼런스 및 이벤트 Docker 컨테이너 의도적으로 취약한 시스템의 Docker 컨테이너 침투 테스트 배포판 및 도구의 Docker 컨테이너 파일 형식 분석 도구 GNU/Linux 유틸리티 해시 크래킹 도구 헥스 에디터 산업 제어 및...

CVE-2026-107908

A heap-based out-of-bounds write in the BoltReadHandler function src/bolt/boltapi.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt...

CVE-2026-107908

A heap-based out-of-bounds write in the BoltReadHandler function src/bolt/boltapi.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt...

CIMCown

CIMCown CVE-2026-20200 Cisco IMC에서의 인자 주입Argument Injection을 통한 RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 보안 권고: NSIDE-SA-2026-003 블로그 포스트:...

RLSA-2026:77500 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in...

kernel-rt security update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

RLSA-2026:78952 Moderate: tftp security update

The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...

RLSA-2026:79113 Important: bind9.16 security, bug fix, and enhancement update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

bind9.16 security, bug fix, and enhancement update

An update is available for bind9.16. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Berkeley Internet Name Domain BIND is an implementation of the Domain Na...

tftp security update

An update is available for tftp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Trivial File Transfer Protocol TFTP is typically used only for booting...

RLSA-2026:79162 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

RLSA-2026:77498 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in non-ring send paths kernel: packet: use consistent...

RLSA-2026:78951 Moderate: kbd security update

The kbd packages provide tools for managing console behavior on a Linux system, including the keyboard, screen fonts, virtual terminals, and font files. Security Fixes: kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-726...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

kbd security update

An update is available for kbd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kbd packages provide tools for managing console behavior on a Linux system,...

bind security update

An update is available for bind. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Berkeley Internet Name Domain BIND is an implementation of the Domain Name...

CVE-2026-50522

CVE-2026-50522 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python...