MINI-8RMH-J3F9-48C7

Bulletin has no description...

Jenkins - Remote Command Injection

Jenkins 2.153 and earlier and LTS 2.138.3 and earlier are susceptible to a remote command injection via stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this wa...

CVE-2024-57553

creationtimestamp| type| source ---|---|--- 2026-09-05 01:00:04+00:00| seen| Telegram/saF7t8033F3RaGsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4 2026-09-06 00:01:03+00:00| seen| Telegram/saF7t8033F3RaGsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4...

TEE-reversing

TEE 基础与概述 可信执行环境简介：ARM 的 TrustZone https://blog.quarkslab.com/introduction-to-trusted-execution-environment-arms-trustzone.html TEE 简介 原标题：TEEを中心とするCPUセキュリティ機能の動向 https://seminar-materials.iijlab.net/iijlab-seminar/iijlab-seminar-20181120.pdf 攻击 ARM 的 TrustZone...

MozillaFirefox-155.0-1.1 on GA media (moderate)

MozillaFirefox-155.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11677-1 Rating: moderate Cross-References: CVE-2026-84117 CVE-2026-84118 CVE-2026-84119 CVE-2026-84120 CVE-2026-84121 CVE-2026-84122 CVE-2026-84123 CVE-2026-84124 CVE-2026-84125 CVE-2026-84126 CVE-2026-84127 CVE-2026-84128...

Fedora 44 : rust-webbrowser (2026-0272e561a4)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0272e561a4 advisory. Update to version 1.2.4. This includes a fix for RUSTSEC-2026-0257. Tenable has extracted the preceding description block directly from the Fedora security...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2026-247-02)

The version of mozilla-firefox installed on the remote host is prior to 140.15.0esr / 153.2.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-247-02 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues...

Fedora 46 : rust-hickory-net / rust-hickory-proto / rust-hickory-resolver (2026-08a5c52d65)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-08a5c52d65 advisory. Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes:...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2026-247-03)

The version of mozilla-thunderbird installed on the remote host is prior to 140.15.0esr / 153.2.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-247-03 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix securit...

Slackware Linux 15.0 / current libxml2 Vulnerability (SSA:2026-247-01)

The version of libxml2 installed on the remote host is prior to 2.11.9 / 2.15.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-247-01 advisory. New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

grafana-12.4.10-1.1 on GA media (moderate)

grafana-12.4.10-1.1 on GA media Announcement ID: openSUSE-SU-2026:11684-1 Rating: moderate Cross-References: CVE-2026-14199 CVE-2026-17033 CVE-2026-17183 CVE-2026-19197 CVE-2026-19475 CVE-2026-2303 CVE-2026-41178 CVE-2026-56852 CVE-2026-73501 CVSS scores: CVE-2026-14199 SUSE : 7.1...

MozillaThunderbird-140.15.0-1.1 on GA media (moderate)

MozillaThunderbird-140.15.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11678-1 Rating: moderate Cross-References: CVE-2026-16365 CVE-2026-75874 CVE-2026-84119 CVE-2026-84120 CVE-2026-84121 CVE-2026-84122 CVE-2026-84124 CVE-2026-84131 CVE-2026-84143 CVE-2026-84145 CVE-2026-84639...

sigma-rules

Sigma 规则 由 Joe Security 编写的社区 Sigma 规则，用于沙箱中的威胁狩猎，采用 GPL 许可。有关我们针对沙箱的 Sigma 规则的详细说明，请查看这篇博客文章。...

DVIA-v2

DVIA-v2 由 8ksec.io 提供支持 DVIA-v2 使用 Swift 编写，并包含额外的漏洞 Damn Vulnerable iOS App DVIA 是一个存在大量漏洞的 iOS 应用。其主要目标是为移动安全爱好者/专业人士或学生提供一个合法环境来测试他们的 iOS 渗透测试技能。该项目由 @prateekg147 开发和维护。此应用涵盖的漏洞和解决方案已测试至 iOS 11。当前版本使用 Swift 编写，并具有以下漏洞。 1. 本地数据存储 2. 越狱检测 3. 过度权限 4. 运行时操纵 5. 反反 Hook/调试 6. 二进制保护 7. Touch/Face ID ...

Mindmap

Hacking Articles- 网络安全思维导图 全面收集网络安全思维导图，涵盖安全行业中使用的技术、工具、方法论、课程和认证。 本仓库将复杂的网络安全概念组织为可视化树状结构，使学习者和专业人士能够更轻松地快速理解网络安全中工具、技术与领域之间的关系。 🌐 联系我们 🔵 Telegram – 加入频道 ⚫ Twitter/X – 关注我们 🟣 Discord – 加入服务器 💼 LinkedIn – 关注 HackingArticles 🎓 培训计划 🚀 加入我们的网络安全培训计划 实战培训：渗透测试、红队与网络安全。...

AppSecEzine

AppSec Ezine 提高对安全风险防范的意识是一项挑战。大多数人不知道或无法获得正确的信息。在科技领域跟上步伐是黄金法则。如果你没有准备好应对安全问题，你就走错了方向。 AppSec Ezine 的诞生源于对信息安全相关内容进行精选的需求，否则这些内容可能会零散地分布在网络上。每一期都涵盖广泛的主题。AppSec Ezine 专注于提供你应该了解的问题（无论新旧）的信息，并让你概览最新的热门话题——那些能帮你度过日常工作或点燃你对这一主题热情的有趣事物。 阅读 AppSec Ezine...

GHSA-RH53-XVX2-J327

creationtimestamp| type| source ---|---|--- 2026-09-04 23:32:53+00:00| seen| https://gist.github.com/alon710/e3fcd961ce3e45afd531f9a1d48bb4cf 2026-09-05 00:01:05+00:00| seen| https://gist.github.com/alon710/e3fcd961ce3e45afd531f9a1d48bb4cf...

Bug-Bounty-Wordlists

Bug-Bounty-Wordlists 一个收录了漏洞挖掘过程中所有重要字典的仓库。 字典将定期更新。 也欢迎你为这个项目做出贡献，并上传你自己的字典。非常感谢。 注意：本仓库包含一些公开可用的字典，目标是让所有这些字典汇集到一个地方。...

tools

Zscaler ThreatLabz 工具 由 Zscaler ThreatLabz 威胁情报团队开发的工具 在 Twitter 上关注我们：@Threatlabz 博客：https://www.zscaler.com/blogs/security-research...

CVE-2026-72792

creationtimestamp| type| source ---|---|--- 2026-09-04 22:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-mp7r-57w4-5qm3 2026-09-05 04:31:40+00:00| seen| https://gist.github.com/alon710/90178cd17fc0b9e9f8bf4b855dea8ff1...