3919 matches found
DC30_Workshop
DEF CON 30 研讨会大型机容器 这里的脚本用于为 DEFCON 30 研讨会构建 MVS 3.8j 虚拟大型机。 感谢您关注 DEFCON 30 大型机缓冲区溢出研讨会。 使用 Docker 此 Docker 容器包含学习 MVS 缓冲区溢出所需的全部内容！ 要开始课程，请运行容器并访问 http://localhost:8080 要运行容器，请使用以下命令，确保将 $pwd/docker 改为适合您系统的文件夹。$pwd 会将 Docker 卷放在当前工作文件夹中。 最小容器 如果您只想自包含运行，请使用此命令。⚠️ 如果您删除并重新启动容器，您将丢失对大型机环境所做的所有更改。...
DC30-Badge-Challenge-Writeup
DC30-Badge-Challenge-Writeup 目录 介绍 挑战第 1 部分：收集音符 挑战第 2 部分：呼叫 YИИEႱ 挑战第 2A 部分：Alice 挑战第 2B 部分：Bob 挑战第 2C 部分：Carol 挑战第 2D 部分：Dan 挑战第 2E 部分：Eve 挑战第 2F 部分：Trevor 挑战第 3 部分：最终线索 如果我错过了大会上的电话怎么办？ 后记 介绍 大家好！我是 Pete，也叫 Kybr，这是我为 DEF CON 30 徽章挑战赛写的解题报告。...
DEFCON-CICD-pipelines-workshop
CI/CD : ¿El nuevo Eldorado? Resumen Los pipelines de CI/CD se están convirtiendo cada vez más en parte de la infraestructura estándar dentro de los equipos de desarrollo, con el auge de nuevos enfoques como la Infraestructura como Código, el nivel de sensibilidad de dichos pipelines está aumentan...
Lsass-Shtinkering
Lsass Shtinkering 通过滥用 Windows 错误报告服务转储 LSASS 的新方法。 它使用 ALPC 协议向该服务发送消息，报告 LSASS 上的异常。 该报告将导致该服务转储 LSASS 的内存。 先决条件 注册表值 "DumpType" 位于 "HKLM\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps" 下，应设置为 2。 致谢 Asaf Gilboa 参考...
SkeletonKey
CVE-2026-6765 · FormAutofill test-only handlers reachable outside automation Reporter credited by Mozilla in MFSA 2026-30 : Abdulaziz Alasaiqah. This directory holds a real reproduction harness for the vulnerability. It is meant to be run against a locally downloaded vulnerable Firefox build. It...
CVE-2026-86423
ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the GetList method can trigger the use-after-free, resulting in a crash denial of service...
UBUNTU-CVE-2026-86422
ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...
CVE-2026-86420
ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service...
CVE-2026-86424
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use TOCTOU vulnerability in the video decoder that allows attackers to bypass path policy write restrictions via symlink swaps. An attacker can replace a symlink between policy validation check-time and the file write...
UBUNTU-CVE-2026-86421
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service...
CVE-2026-86425
ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who supplies a crafted list of images can trigger memory access after deallocation, resulting in a crash denial of service...
CVE-2026-86424
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use TOCTOU vulnerability in the video decoder that allows attackers to bypass path policy write restrictions via symlink swaps. An attacker can replace a symlink between policy validation check-time and the file write...
CVE-2026-86422
ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...
CVE-2026-86421
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service...
CLEANSTART-2026-YK54542 Security fixes in langfuse-worker 3.213.0-r1
Package langfuse-worker version 3.213.0-r1 fixes 30 vulnerabilities: ghsa-frvp-7c67-39w9, ghsa-p63j-vcc4-9vmv, ghsa-55q2-fjhq-7xh7, ghsa-c2j3-45gr-mqc4, CVE-2026-69192...
CLEANSTART-2026-TX42489 Security fixes in pulumi 3.248.0-r0
Package pulumi version 3.248.0-r0 fixes 30 vulnerabilities: ghsa-hrxh-6v49-42gf, CVE-2026-56864, CVE-2026-56865, CVE-2026-56852, CVE-2026-71556...
CLEANSTART-2026-OP76655 Security fixes in keycloak 26.7.1-r0
Package keycloak version 26.7.1-r0 fixes 30 vulnerabilities: CVE-2026-8763, CVE-2026-59650, CVE-2026-58062, CVE-2026-59639, CVE-2026-12802...
CVE-2026-81636
creationtimestamp| type| source ---|---|--- 2026-08-30 20:44:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7ggrndg7qqyjd...